4692 matches found
[SECURITY] [DSA 797-1] New zsync packages fix DOS
-------------------------------------------------------------------------- Debian Security Advisory DSA 797-1 [email protected] http://www.debian.org/security/ Michael Stone September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 793-1] New sqwebmail packages fix cross-site scripting
-------------------------------------------------------------------------- Debian Security Advisory DSA 793-1 [email protected] http://www.debian.org/security/ Martin Schulze September 1st, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 761-2] New heartbeat packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 761-2 [email protected] http://www.debian.org/security/ Martin Schulze August 15th, 2005 http://www.debian.org/security/faq -...
FreeBSD : gnupg -- OpenPGP symmetric encryption vulnerability (8375a73f-01bf-11da-bc08-0001020eed82)
Serge Mister and Robert Zuccherato reports that the OpenPGP protocol is vulnerable to a cryptographic attack when using symmetric encryption in an automated way. David Shaw reports about the impact : This attack, while very significant from a cryptographic point of view, is not generally effectiv...
FreeBSD : mozilla -- automated file upload (6e740881-0cae-11d9-8a8a-000c41e2cdad)
A malicious web page can cause an automated file upload from the victim's machine when viewed with Mozilla with JavaScript enabled. This is due to a bug permitting default values for type='file' elements in certain situations. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive...
[SECURITY] [DSA 751-1] New squid packages fix IP spoofing vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 751-1 [email protected] http://www.debian.org/security/ Martin Schulze July 11th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 748-1] New ruby1.8 packages fix arbitrary command execution
------------------------------------------------------------------------ Debian Security Advisory DSA 748-1 [email protected] http://www.debian.org/security/ Michael Stone July 10, 2005 http://www.debian.org/security/faq - ------------------------------------------------------------------------...
citypostXSS.txt
sNKenjoi's Security Advisory: XSS Vunerabilities in Multiple CityPost Software Security Advisory: XSS Vunerabilities in Multiple CityPost Software Severity: Medium Title: XSS Vunerabilities in Simple PHP Upload, Simple Image Editor and Automated Link Exchange Vendor: Allen Kim Vendor Website:...
[SECURITY] [DSA 727-1] New libconvert-uulib-perl packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 727-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 726-1] New oops packages fix format string vulnerability
-------------------------------------------------------------------------- Debian Security Advisory DSA 726-1 [email protected] http://www.debian.org/security/ Martin Schulze May 20th, 2005 http://www.debian.org/security/faq -...
[SA15009] CityPost Automated Link Exchange "msg" Cross-Site Scripting
---------------------------------------------------------------------- Want a new IT Security job? Vacant positions at Secunia: http://secunia.com/secuniavacancies/ ---------------------------------------------------------------------- TITLE: CityPost Automated Link Exchange "msg" Cross-Site...
[SECURITY] [DSA 710-1] New gtkhtml packages fix denial of service
-------------------------------------------------------------------------- Debian Security Advisory DSA 710-1 [email protected] http://www.debian.org/security/ Martin Schulze April 18th, 2005 http://www.debian.org/security/faq -...
[SECURITY] [DSA 697-1] New netkit-telnet packages fix arbitrary code execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 697-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2005 http://www.debian.org/security/faq -...
getr00t.sh
!/usr/bin/sh r00t exploit written for the invscout bug reported by Idefense labs http://www.idefense.com/application/poi/display?id=171&type=vulnerabilities coded by ri0t exploitation is trivial but automated with this script www.ri0tnet.net usage ./getr00t.sh : exploitation gives euidroot from...
GnuPG: OpenPGP protocol attack
Background GnuPG is complete and free replacement for PGP, a tool for secure communication and data storage. Description A flaw has been identified in an integrity checking mechanism of the OpenPGP protocol. Impact An automated system using GnuPG that allows an attacker to repeatedly discover the...
[EXPL] ELOG Remote Shell Exploit
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
ELOG <= 2.5.6 Remote Shell Exploit
Exploit for multiple platform in category remote exploits ================================= ELOG = 2.5.6 Remote Shell Exploit ================================== Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versions Updated On 18/April/2004 LOCK YOUR...
ELOG <= 2.5.6 Remote Shell Exploit
No description provided by source. / Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versio...
ELOG 2.5.6 - Remote Shell
ELOG 2.5.6 - Remote Shell / Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versions Update...
ELOG 2.5.6 - Remote Shell
/ Worked on latest version for me http://midas.psi.ch/elog/download/tar/elog-latest.tar.gz elog-latest.tar.gz 26-Jan-2005 21:36 519K Default port 8080. str0ke / / Hi there, someone has brought to u a gift. ELOG Remote Shell Exploit = 2.5.6 Also for future Versions Updated On 18/April/2004 LOCK YO...