SECUNIA ADVISORY ID: SA32439

VERIFY ADVISORY: http://secunia.com/advisories/32439/

CRITICAL: Moderately critical

IMPACT: System access

SOFTWARE: phplist 2.x - http://secunia.com/advisories/product/2544/

DESCRIPTION: A vulnerability has been reported in phplist, which potentially can be exploited by malicious users to compromise a vulnerable system. The vulnerability is reported in versions prior to 2.10.7.
 Read More...

papamike writes:  

Are you sick of the drab AvantGo look? Want to make it look like the rest of your site? I have redesigned the look of the tired looking AvantGo module with a new stylesheet which resides next to your themes style/style.css which makes for ease of updating and editing. I turned the AvantGo page into a tableless fully CSS compliant module that you can redesign by editing the avantgo.css stylesheet only. There are 2 files to download in a zip file, Just upload the index.php file into modules/AvantGo/ to replace the file that's already there and add the avantgo.css file into the style folder of your theme. Install time is about 2 minutes. Editing time of the avantgo.css page depends on you. For a demo look at my (Papa Mike Creations) AvantGo page The Designer's Resource. Members can download this mod free in my downloads area under 'My Creations.'

papamike writes:  

The more I work with RavenNuke™ 2.30.00 the better I like it. I like is so well that I built a new theme for my site, integrated phpBB3, and run everything off RavenNuke™ 2.30.00.

I have finally released PMC Customizable Theme (PMCCT) Version 3. It is a theme building utility which I coded entirely in PHP and is aimed at those who can't or don't want to build themes using traditional methods. I have completely changed the way themes are built. As most theme designers have non-production servers installed on their computers, they are able to create graphics and write code or copy and paste snippets of code until the desired effect is created in the theme build. PMCCT uses the same method and because it is written 99% in PHP you will need a server that recognizes PHP4 or PHP5 to be able to use PMCCT. So in that regard nothing has changed in the theme building process.

Here's what has changed. All of the code is written for you and all you have to do is update/change $variables within configuration files. Of course you will need to create your graphics too. I have written a short starter info page and each configuration file has instructions included to help keep you on track. The package comes with sample themes and starter themes you can upload into your RavenNuke themes folder so you can experiment until you get comfortable using PMCCT. Some of you will be able to upload the starter theme and create a theme within just a few minutes depending on your knowledge level. I built the sample themes in 30 minutes each. Go to Papa Mike Creations to see some themes that I built using PMCCT.

One thing alot of you may find useful is having the ability to move the left/right blocks around just by changing 5 settings inside the blocks-config.php file. You can have the standard look of left and right sided blocks or you can have both blocks on the left side or both blocks on the right side and you can also turn either one or both of them off.

PMCCT is free to members and can be downloaded from Papa Mike Creations. Please read the short tutorial first to get you going and if you need additional help then please post in my forums under the PMCCT topic. I highly recommend using a proper text based editor with PMCCT, I find Notepad++ is exceptional and I have a link to it in my tutorial.

PMCCT was designed exclusively for RavenNuke™

SECUNIA ADVISORY ID: SA32326

VERIFY ADVISORY: http://secunia.com/advisories/32326/

CRITICAL: Highly critical

IMPACT: System access

OPERATING SYSTEM:
Microsoft Windows 2000 Advanced Server - http://secunia.com/advisories/product/21/
Microsoft Windows 2000 Datacenter Server - http://secunia.com/advisories/product/1177/
Microsoft Windows 2000 Professional - http://secunia.com/advisories/product/1/
Microsoft Windows 2000 Server - http://secunia.com/advisories/product/20/
Microsoft Windows XP Home Edition - http://secunia.com/advisories/product/16/
Microsoft Windows XP Professional - http://secunia.com/advisories/product/22/
Microsoft Windows Vista - http://secunia.com/advisories/product/13223/
Microsoft Windows Server 2003 Datacenter Edition - http://secunia.com/advisories/product/1175/
Microsoft Windows Server 2003 Enterprise Edition - http://secunia.com/advisories/product/1174/
Microsoft Windows Server 2003 Standard Edition - http://secunia.com/advisories/product/1173/
Microsoft Windows Server 2003 Web Edition - http://secunia.com/advisories/product/1176/
Microsoft Windows Storage Server 2003 - http://secunia.com/advisories/product/12399/
Microsoft Windows Server 2008 - http://secunia.com/advisories/product/18255/

DESCRIPTION: A vulnerability has been reported in Microsoft Windows, which can be exploited by malicious people to compromise a vulnerable system. The vulnerability is caused due to an error in the Server Service component when processing RPC requests and can be exploited via specially crafted RPC requests. Successful exploitation allows execution of arbitrary code, but requires authenticated access on Windows Vista and Windows Server 2008. NOTE: According to Microsoft, the vulnerability is currently being actively exploited.
 Read More...

SECUNIA ADVISORY ID: SA32299

VERIFY ADVISORY: http://secunia.com/advisories/32299/

CRITICAL: Moderately critical

IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information

SOFTWARE:
Opera 5.x - http://secunia.com/advisories/product/82/
Opera 6.x - http://secunia.com/advisories/product/81/
Opera 7.x - http://secunia.com/advisories/product/761/
Opera 8.x - http://secunia.com/advisories/product/4932/
Opera 9.x - http://secunia.com/advisories/product/10615/

DESCRIPTION: Some vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct script insertion attacks, to bypass certain security restrictions, or to disclose potentially sensitive information. The vulnerabilities are reported in versions prior to 9.61.
 Read More...

papamike writes:  

I just completed the updates for my local server and my online site with the RN 2.30.00 build and it went smooth as silk. I can't believe how RN just keeps getting better and better with each update. The addition of RNYA is exceptional also the addition of ajax in the blocks admin is a real 'sweet' idea. There's just too much good stuff to mention. I want to say congrats to the entire team who worked on this project!

Note: 

And speaking for the Team, thank you for your theme support exclusively for RavenNuke™ !