DEBIAN-CVE-2009-0050

Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

CVE-2009-0050

Lasso 2.2.1 and earlier does not properly check the return value from the OpenSSL DSAverify function, which allows remote attackers to bypass validation of the certificate chain via a malformed SSL/TLS signature, a similar vulnerability to CVE-2008-5077...

Cross site scripting

Cross-site scripting XSS vulnerability in verifylogin.jsp in Pro2col Stingray FTS allows remote attackers to inject arbitrary web script or HTML via the formusername parameter aka user name field...

Download Accelerator Plus - DAP 8.x (m3u) Local BOF Exploit 0day

No description provided by source. !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Just for fun ;...

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow

Download Accelerator Plus DAP 8.x - .m3u Local Buffer Overflow !/usr/bin/python Download Accelerator Plus - DAP 8.x m3u 0day Local Buffer Overflow Exploit Bug discovered by Krystian Kloskowski h07 Tested on: Download Accelerator Plus 8.6 / XP SP2 Polish Shellcode: Windows Execute Command calc Jus...

Debian: Security Advisory (DSA-884-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DTSA-59-1 gforge - cross site scripting vulnerability in account/verify.php

Bulletin has no description...

CVE-2007-2585

Stack-based buffer overflow in the Verify function in the BarCodeWiz ActiveX control 2.0 and 2.52 BarcodeWiz.dll allows remote attackers to execute arbitrary code via a long argument...

Fedora Core 5 : openssh-4.3p2-4.12.fc5 (2007-395)

Fri Mar 30 2007 Miloslav Trmac - 4.3p2-4.12 - Fix an information leak in Kerberos password authentication CVE-2006-5052 Resolves: 234640 - Fri Nov 10 2006 Tomas Mraz - 4.3p2-4.11 - CVE-2006-5794 - properly detect failed key verify in monitor 214641 - kill all ssh sessions when stop is called in...

CVE-2006-6678

The edittextarea function in form-file.c in Netrik 1.15.4 and earlier does not properly verify temporary filenames when editing textarea fields, which allows attackers to execute arbitrary commands via shell metacharacters in the filename...

Low openssh security update

3.9p1-8.RHEL4.17.1 - CVE-2006-5794 properly detect failed key verify in monitor 21640...

security flaw

OpenSSH 3.6.1 and earlier, when restricting host access by numeric IP addresses and with VerifyReverseMapping disabled, allows remote attackers to bypass "from=" and "user@host" address restrictions by connecting to a host from a system whose reverse DNS hostname contains the numeric IP address...

CVE-2006-2931

CMS Mundo before 1.0 build 008 does not properly verify uploaded image files, which allows remote attackers to execute arbitrary PHP code by uploading and later directly accessing certain files...

FreeBSD : gnupg -- false positive signature verification (63fe4189-9f97-11da-ac32-0001020eed82)

Werner Koch reports : The Gentoo project identified a security related bug in GnuPG. When using any current version of GnuPG for unattended signature verification e.g. by scripts and mail programs, false positive signature verification of detached signatures may occur. This problem affects the to...

CVE-2006-0049

gpg in GnuPG before 1.4.2.2 does not properly verify non-detached signatures, which allows attackers to inject unsigned data via a data packet that is not associated with a control packet, which causes the check for concatenated signatures to report that the signature is valid, a different...

gnupg -- false positive signature verification

Werner Koch reports: The Gentoo project identified a security related bug in GnuPG. When using any current version of GnuPG for unattended signature verification e.g. by scripts and mail programs, false positive signature verification of detached signatures may occur. This problem affects the too...

security flaw

sslenginekernel.c in modssl before 2.8.24, when using "SSLVerifyClient optional" in the global virtual host configuration, does not properly enforce "SSLVerifyClient require" in a per-location context, which allows remote attackers to bypass intended access restrictions...

Fedora Core 4 : kernel-2.6.12-1.1447_FC4 (2005-820)

Fri Aug 26 2005 Dave Jones 2.6.12-1.1447FC4 - Better identify local builds. 159696 - Fix disk/net dump & netconsole. 152586 - Fix up sleeping in invalid context in sym2 driver. 164995 - Fix 'semaphore is not ready' error in snd-intel8x0m. - Restore hwclock functionality on some systems. 144894 -...

WebCalendar -- remote file inclusion vulnerability

WebCalendar is proven vulnerable to a remote file inclusion vulnerability. The sendreminders.php does not properly verify the "includedir" parameter, giving remote attackers the possibility to include local and remote files. These files can be used by the attacker to gain access to the system...

CVE-2005-2173

The Flag::validate and Flag::modify functions in Bugzilla 2.17.1 to 2.18.1 and 2.19.1 to 2.19.3 do not verify that the flag ID is appropriate for the given bug or attachment ID, which allows users to change flags on arbitrary bugs and obtain a bug summary via processbug.cgi...