7285 matches found
Microsoft Windows MSDTC Denial of Service (CVE-2006-1184)
The Microsoft Distributed Transaction Coordinator MSDTC is a transaction infrastructure for distributed systems. It is implemented on the Windows platform as a service. The MSDTC facilitates the interactions between independent programs in a distributed system. A denial of service vulnerability...
DEBIAN-CVE-2010-2791
modproxy in httpd in Apache HTTP Server 2.2.9, when running on Unix, does not close the backend connection if a timeout occurs when reading a response from a persistent connection, which allows remote attackers to obtain a potentially sensitive response intended for a different client in...
CVE-2010-2526
The cluster logical volume manager daemon clvmd in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System GFS and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service daemon exit or logical-volume...
Baby POP Server 1.04 Denial Of Service
DCA-0005 Software - Baby POP Server Vendor Product Description - In the past I have done several projects related to e-mail POP3/SMTP/IMAP4. One of the problems at least in my company is that there are never good test servers available. So that's why I decided to create this simple POP3 server,...
CustomCMS Persistent XSS Vulnerability
Exploit for php platform in category web applications ====================================== CustomCMS Persistent XSS Vulnerability ====================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...
NetworX 1.0.3 Cross Site Scripting
------------------------------------------------------------------------ Software................NetworX 1.0.3 Vulnerability...........Reflected XSS Download................http://sourceforge.net/projects/networx/ Release Date............7/5/2010 Tested On...............Windows Vista + XAMPP...
Family Connections Who is Chatting Add-On Remote File Inclusion
Exploit for php platform in category web applications =============================================================== Family Connections Who is Chatting Add-On Remote File Inclusion =============================================================== Author : lumut-- Script Details :...
Family Connections Who is Chatting AddOn - Remote File Inclusion
======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details : http://www.familycms.com/downloads/details.php?file=50 Bugs : Expl:...
Family Connections Who is Chatting AddOn - Remote File Inclusion
Family Connections Who is Chatting AddOn - Remote File Inclusion ======================================================= Who is Chatting 2.2.3 Remote File Include Vulnerability ======================================================= Author : lumut-- Script Details :...
Fedora 12 : squirrelmail-1.4.20-3.fc12 (2010-10244)
Tue Jun 22 2010 Michal Hlavinka - 1.4.20-3 - fix CVE-2010-1637 : mail fetch plugin's port-scans via non-standard POP3 server ports - Mon Jun 7 2010 Michal Hlavinka - 1.4.20-2 - add note to config file that https connections are forced by default - Mon Mar 8 2010 Michal Hlavinka - 1.4.20-1 -...
Fedora 13 : squirrelmail-1.4.20-3.fc13 (2010-10259)
Tue Jun 22 2010 Michal Hlavinka - 1.4.20-3 - fix CVE-2010-1637 : mail fetch plugin's port-scans via non-standard POP3 server ports - Mon Jun 7 2010 Michal Hlavinka - 1.4.20-2 - add note to config file that https connections are forced by default Note that Tenable Network Security has extracted...
Fedora 13 : dsniff-2.4-0.9.b1.fc13 / libnids-1.24-1.fc13 (2010-5562)
libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...
Fedora 11 : dsniff-2.4-0.9.b1.fc11 / libnids-1.24-1.fc11 (2010-5545)
libnids 1.24 Mar 14 2010: - fixed another remotely triggerable NULL dereference in ipfragment.c - unofficial patch that enables tracking of already established TCP connections - missing reset of some tcp variables upon nidsexit - correct calculation of radiotap header - compilation warning fixes...
Fedora 11 : irssi-0.8.15-1.fc11 (2010-6618)
This release fixes two security issues: The first being that Irssi didn't check hostname on SSL connections and the other being a hard to exploit remote crash bug. For a complete listing of the changes and bugfixes since 0.8.14, please have a look at the http://irssi.org/news/ChangeLog Note that...
Malware Rises With Smartphone Adoption
Researchers are closely watching the rise of malware on Internet-enabled mobile devices. New mobile malware boasts a broad range of functionality, including the capability to download other malicious files, detect internet connections or establish new ones, undertake URL redirection and carry out...
CVE-2010-2278
The bookmarklet pop-up in the Bookmarks component in IBM Lotus Connections 2.5.x before 2.5.0.2 does not properly follow the "force SSL" setting, which might make it easier for remote attackers to obtain the cleartext of network communication by sniffing the network, or spoof arbitrary servers vi...
CVE-2010-2279
The Top Updates implementation in the Homepage component in IBM Lotus Connections 2.5.x before 2.5.0.2, when "forced SSL" is enabled, uses http for links, which has unspecified impact and remote attack vectors...
CVE-2010-2280
Open redirect vulnerability in the Mobile component in IBM Lotus Connections 2.5.x before 2.5.0.2 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, related to "mobile edit actions," aka SPR ASRE83PPVH...
CVE-2010-2277
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...