7285 matches found
Design/Logic Flaw
Google Chrome before 2.0.172.43 does not prevent SSL connections to a site with an X.509 certificate signed with the 1 MD2 or 2 MD4 algorithm, which makes it easier for man-in-the-middle attackers to spoof arbitrary HTTPS servers via a crafted certificate, a related issue to CVE-2009-2409...
CVE-2009-2973
Removed by vendor...
Code injection
Cisco Unified Communications Manager aka CUCM, formerly CallManager 4.x, 5.x before 5.13g, 6.x before 6.14, 7.0 before 7.02, and 7.1 before 7.12; and Cisco Unified Presence 1.x, 6.x before 6.06, and 7.x before 7.04; allows remote attackers to cause a denial of service TCP services outage via a...
CVE-2009-2973
CVE-2009-2973 affects Google Chrome prior to 2.0.172.43, where SSL connections to a site with an X.509 certificate signed using MD2 or MD4 could be spoofed by a man-in-the-middle. This is related to CVE-2009-2409. Connected documents indicate MD2/MD4 hash-signature weaknesses and that mitigations...
Mandrake Security Advisory MDVSA-2009:162 (java-1.6.0-openjdk)
The remote host is missing an update to java-1.6.0-openjdk announced via advisory MDVSA-2009:162. OpenVAS Vulnerability Test $Id: mdksa2009162.nasl 6587 2017-07-07 06:35:35Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:162 java-1.6.0-openjdk Authors: Thomas Reinke Copyright:...
OpenJDK proxy mechanism allows non-authorized socket connections (6801497)
The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...
Rootkit techniques the main principle of explanation-vulnerability warning-the black bar safety net
Article author: hackisle rootkit main categories: Application-level-kernel-the hardware level Early rootkits mainly for application-level rootkits application-level rootkits mainly by replacing the login, ps, ls, netstat and other system tools, or modify. rhosts etc system configuration files, et...
Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs
No description provided by source. BITS 32 ; Windows x86 null-free bindshell for Windows 5.0-6.0 all service packs. ; See http://skypher.com/wiki/index.php/Hacking/Shellcode/Bind/NGS. ; Based largely on code and ideas C 2005 by Dafydd Stuttard, NGS Software. ; See...
openSUSE Security Update : rxvt-unicode (rxvt-unicode-163)
It was possible to open a terminal on :0 when the environment variable was not set. This could be exploited by local users to hijack X11 connections CVE-2008-1142. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...
RIP-1 Poisoning Routing Table Modification
This host is running a RIP-1 agent. RIP-1 does not implement authentication. An attacker on the same network may feed the target machine bogus routes and hijack network connections. Note that Nessus cannot test this flaw as it is not running on the same network. C Tenable Network Security, Inc...
RIP Poisoning Routing Table Modification (Adjacent Network)
It was possible to poison the remote host routing tables through the RIP protocol. An attacker may use this to hijack network connections. Several RIP agents reject routes that are not sent by a neighbor, so this flaw may not be exploitable from a non-adjacent network. C Tenable Network Security,...
CVE-2009-2010
Multiple SQL injection vulnerabilities in Haudenschilt Family Connections CMS FCMS 1.9 and earlier allow remote authenticated users to execute arbitrary SQL commands via the 1 thread parameter to messageboard.php, 2 member parameter to profile.php, 3 pid parameter to gallery/index.php, and the 4...
Family Connections CMS <= 1.9 (member) SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
Design/Logic Flaw
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...
CVE-2009-0144
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...
CVE-2009-0144
CFNetwork in Apple Mac OS X 10.5 before 10.5.7 does not properly parse noncompliant Set-Cookie headers, which allows remote attackers to obtain sensitive information by sniffing the network for "secure cookies" that are sent over unencrypted HTTP connections...
Family Connections CMS 1.9 SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ WEB: http://www.familycms.com/index.php | |--DOWN...
(GET var 'member') BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS <= v1.9 -->
!/usr/bin/perl -------------------------------------------------------------------------------- GET var 'member' BLIND SQL INJECTION EXPLOIT --FAMILY CONNECTIONS = v1.9 -- -------------------------------------------------------------------------------- CMS INFORMATION: --WEB:...
Family Connections CMS 1.9 - SQL Injection
!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...
Family Connections CMS <= 1.9 (member) SQL Injection Exploit
Exploit for unknown platform in category web applications ============================================================ Family Connections CMS WEB: http://www.familycms.com/index.php | |--DOWNLOAD: http://www.familycms.com/download.php | |--DEMO: http://www.familycms.com/demo/index.php |...