Safari browser 3.1 (525.13) spoofing

Hello everybody, this time writing to inform them of a vulnerability in the Safari browser for Windows 3.1 which allows falsify the web address and enter another page or content that we want. Below I attach a proof of concept so they can see what it is doing so simple and so dangerous because it...

CentOS 4 / 5 : kdelibs (CESA-2007:0909)

Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Two...

RHEL 4 / 5 : kdelibs (RHSA-2007:0909)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2007:0909 advisory. The kdelibs package provides libraries for the K Desktop Environment KDE. Two cross-site-scripting flaws were found in the way Konqueror...

kdebase security update

CentOS Errata and Security Advisory CESA-2007:0905 Updated kdebase packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide...

kdelibs security update

CentOS Errata and Security Advisory CESA-2007:0909 Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides...

Moderate: Red Hat Security Advisory: kdelibs security update

Updated kdelibs packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdelibs package provides libraries for the K Desktop Environment KDE. Two...

Moderate: Red Hat Security Advisory: kdebase security update

Updated kdebase packages that resolve several security flaws are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop...

CVE-2007-4532

CVE-2007-4532 (Soldat) affects Soldat game server 1.4.2 and earlier and dedicated server 2.6.2 and earlier. The issue allows remote attackers to cause a denial-of-service (client lockout) by sending a sequence of UDP join packets from a spoofed IP, which triggers temporary blacklisting of that IP...

Design/Logic Flaw

Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication...

PT-2007-1292 · Simple Machines · Simple Machines Forum

Name of the Vulnerable Software and Affected Versions: Simple Machines Forum SMF versions 1.0.7 and earlier Simple Machines Forum SMF version 1.1rc2 and earlier Description: The issue allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP...

CVE-2006-7013: Undefined Security Weakness

QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...

CVE-2006-4982

Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...

CVE-2006-4982

Cisco NAC has a vulnerability where an exception list only records MAC addresses, enabling physically proximate attackers to bypass controls and join a local network by spoofing the MAC address of a different device type (example: MAC of a disconnected printer). Affected/software component: Cisco...

CVE-2006-4981: Undefined Security Weakness

Symantec Sygate NAC allows physically proximate attackers to bypass control methods and join a local network by selecting a forged MAC address associated with an exception rule that 1 permits all non-Windows devices or 2 whitelists certain sets of Organizationally Unique Identifiers OUIs...

CVE-2006-4982: Undefined Security Weakness

Cisco NAC maintains an exception list that does not record device properties other than MAC address, which allows physically proximate attackers to bypass control methods and join a local network by spoofing the MAC address of a different type of device, as demonstrated by using the MAC address o...

MAC address and IP address binding policy of hack-vulnerability warning-the black bar safety net

1 Introduction On the“IP address theft”solutions, the vast majority are taking MAC and IP address binding policy, this practice is very dangerous, this article will this problem be explored. Here need to declare that this article is in the pairs of MAC and IP address binding policy security...

Design/Logic Flaw

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PCREMOTEADDR HTTP header, which vars.php uses to redefine $SERVER'REMOTEADDR'...

CVE-2006-2702

CVE-2006-2702 : WordPress 2.0.2 contains a vulnerability where vars.php may redefine $_SERVER['REMOTE_ADDR'] using the PC_REMOTE_ADDR HTTP header, allowing remote IP spoofing (noted on Mac OS X). The issue is supported by connected advisories indicating remediation through upgrading to WordPress ...

CVE-2006-2702: Undefined Security Weakness

vars.php in WordPress 2.0.2, possibly when running on Mac OS X, allows remote attackers to spoof their IP address via a PCREMOTEADDR HTTP header, which vars.php uses to redefine $SERVER'REMOTEADDR'...

CVE-2006-1126

Gallery 2 up to 2.0.2 allows remote attackers to spoof their IP address via a modified X-Forwarded-For XFORWARDEDFOR HTTP header, which is checked by Gallery before other more reliable sources of IP address information, such as REMOTEADDR...