CVE-2010-1906

The CVE-2010-1906 entry concerns tgsrv.exe in Consona Dynamic Agent components (Repair Service, Repair Manager, Subscriber Activation, Subscriber Agent). The root cause is reliance on a predictable timestamp field to validate input to the named pipe \.\pipe\__RepairService_pipe__company, enabling...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

Authentication flaw

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2009-4851

XOOPS Profiles Module vulnerability (pre-2.4.1) allows remote attackers to bypass administrative approval via activation resend: activation codes are sent in response to arbitrary activation requests (activate.php). Affects XOOPS Profiles Module; root cause is improper handling of activation requ...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

Comptel Provisioning and Activation - index.jsp?error_msg_parameter Cross-Site Scripting

Comptel Provisioning and Activation - index.jsp?errormsgparameter Cross-Site Scripting source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. ...

Comptel Provisioning and Activation - 'index.jsp?error_msg_parameter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...

Comptel InstantLink XSS vulnerability

Exploit for unknown platform in category web applications ===================================== Comptel InstantLink XSS vulnerability ===================================== -------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability...

Comptel InstantLink Cross Site Scripting

-------------------------------------------------------------------- Exploit Title: Comptel InstantLink" XSS vulnerability Date: 24 Feb 2010 Author: thebluegenius Software Link: http://www.comptel.com/ProvisioningActivation/ Version: All CVE : NA --------------------------------------------------...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

CVE-2009-4641

gnome-screensaver 2.28.0 does not resume adherence to its activation settings after an inhibiting application becomes unavailable on the session bus, which allows physically proximate attackers to access an unattended workstation on which screen locking had been intended...

New Ransomware Blocks Internet Access

Security researchers have stumbled upon a new piece of ransomware that blocks an infected computer from accessing the Internet until a fee is paid via SMS text message. The latest ransomware file is bundled with a program called uFast Download Manager. Once a machine is infected, a message is...

Security fix for the ALT Linux 10 package gnutls30 version 2.6.6-alt1

April 30, 2009 Afanasov Dmitry 2.6.6-alt1 - 2.6.6 release. + fix Corrected double free on signature verification failure CVE-2009-1415 + fix DSA key generation CVE-2009-1416 + fix gnutls-cli expiration/activation time check CVE-2009-1417 - release fixes 19873 also...

Conficker activation passes quietly, but threat isn't over

By Sumner Lemon, IDG News Service An expected activation of the Conficker.c worm at midnight today passed without incident computerworld.com, despite sensationalized fears cbsnews.com that the Internet itself might be affected, but security researchers said users aren’t out of the woods yet. Whil...

Design/Logic Flaw

Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...

CVE-2008-6546

Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...

CVE-2008-6546

Unspecified vulnerability in phpns before 2.1.3 has unknown impact and attack vectors related to "activation permissions."...

CVE-2008-6546

CVE-2008-6546 concerns phpns before 2.1.3 with a vulnerability related to activation permissions. The connected documents confirm the affected software and version but do not specify the underlying root cause, concrete impact, or exploitation details. The description consistently notes unknown im...

Design/Logic Flaw

Unspecified vulnerability in phpBB before 3.0.4 allows attackers to bypass intended access restrictions and activate de-activated accounts via unknown vectors...