7285 matches found
Researcher Lifts Lid on Google's Spyware Connections
A prominent anti-spyware researcher is calling on Google to sever its ties with an advertising partner that covers popular sites with pop-up PPC advertisements promoting those same sites. According to Ben Edelman, an assistant professor at the Harvard Business School and a staunch anti-spyware...
CentOS 5 : gnutls (CESA-2008:0489)
Updated gnutls packages that fix several security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. The GnuTLS Library provides support for cryptographic algorithms and protocols such as TL...
CVE-2009-4440
Directory Proxy Server DPS in Sun Java System Directory Server Enterprise Edition 6.0 through 6.3.1 does not properly handle multiple client connections within a short time window, which allows remote attackers to hijack the backend connection of an authenticated user, and obtain the privileges o...
msgid:[email protected][email protected]&from=RedTeam%20Pentesting%20GmbH&folder=\\3APA3A\Bugtraq&subject=TLS%20Renegotiation%20Vulnerability:%20Proof
Information about a vulnerability in the TLS protocol was published in the beginning of November 2009. Attackers can take advantage of that vulnerability to inject arbitrary prefixes into a network connection protected by TLS. This can result in severe vulnerabilities, depending on the applicatio...
Family Connections <= 2.1.3 Multiple Remote Vulnerabilities
No description provided by source. Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Da...
Family Connections Multiple Input Validation Vulnerabilities
Family Connections is prone to multiple input-validation vulnerabilities, including a local file-include issue, an arbitrary file-upload issue, and multiple SQL-injection issues. These issues occur because the application fails to properly sanitize user- supplied input. Exploiting these issues ma...
Family Connections Detection
This host is running Family Connections, an easy-to-use website where you can connect with your friends and family. Share photos, messages, documents and more. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
Family Connections Detection
This host is running Family Connections, an easy-to-use website where you can connect with your friends and family. Share photos, messages, documents and more. OpenVAS Vulnerability Test $Id: familyconnectionsdetect.nasl 5721 2017-03-24 14:42:01Z cfi $ Family Connections Detection Authors: Michae...
family connections 2.1.3 - Multiple Vulnerabilities
family connections 2.1.3 - Multiple Vulnerabilities Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at...
Family Connections <= 2.1.3 Multiple Remote Vulnerabilities
Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-16 X. INDEX I. ABOUT THE...
Family Connections 2.1.3 XSS / LFI / Upload
Family Connections = 2.1.3 Multiple Remote Vulnerabilities Name Family Connections Vendor http://www.familycms.com Versions Affected = 2.1.3 Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-16 X. INDEX I. ABOUT THE...
PHP ""multipart/form-data"" Denial of Service Exploit (Python)
No description provided by source. !/usr/bin/python -- coding: utf-8 -- Author: Eren Turkay eren .-. pardus.org.tr, 2009/11/20 http://www.pardus.org.tr/eng/ Credits: Bogdan Calin from Acunetix Description: Exploit to cause denial of service on any host that runs PHP via temporary file exhaustion...
GLSA-200911-02 : Sun JDK/JRE: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200911-02 Sun JDK/JRE: Multiple vulnerabilities Multiple vulnerabilities have been reported in the Sun Java implementation. Please review the CVE identifiers referenced below and the associated Sun Alerts for details. Impact : A...
How to Take Down a Botnet
The botnet problem has reached epidemic levels in recent months, with the continued growth of large-scale botnets, as well as the identification of smaller, more targeted networks around the world. But researchers have been taking steps to disrupt botnets of late, with some notable successes, as...
InterNetNews NULL Path Denial of Service
The InterNetNews package INN is a complete Usenet system. It includes innd, an NNTP server, and nnrpd, a newsreading server. A vulnerability exists in the 'innd' daemon of InterNetNews INN, which handles NNTP connections. This vulnerability can be create a denial of service condition. A successfu...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-3816
Multiple cross-site scripting XSS vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
CVE-2009-3816
CVE-2009-3816 describes multiple cross-site scripting (XSS) vulnerabilities in the Mobile subsystem’s Activities pages of IBM Lotus Connections 2.5.0.0. The flaws allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. Connected sourcesconfirm the affected product a...
CVE-2009-3816
Multiple cross-site scripting XSS vulnerabilities in Activities pages in the Mobile subsystem in IBM Lotus Connections 2.5.0.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...
GLSA-200910-01 : Wget: Certificate validation error
The remote host is affected by the vulnerability described in GLSA-200910-01 Wget: Certificate validation error The vendor reported that Wget does not properly handle Common Name CN fields in X.509 certificates that contain an ASCII NUL \0 character. Specifically, the processing of such fields is...