1108 matches found
CVE-2011-1034
The CVE-2011-1034 issue concerns IBM Rational Build Forge 7.0.2. The vulnerability is a Cross-site Scripting (XSS) in the UI, where an attacker can inject arbitrary script or HTML via the mod parameter to the fullcontrol program. The root cause is improper input handling in the UI component, enab...
CVE-2010-1323
MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...
CVE-2010-1323
MIT Kerberos 5 aka krb5 1.3.x, 1.4.x, 1.5.x, 1.6.x, 1.7.x, and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to modify user-visible prompt text, modify a response to a Key Distribution Center KDC, or forge a KRB-SAFE message via...
CVE-2010-4020
MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...
CVE-2010-4020
MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...
CVE-2010-1324
MIT Kerberos 5 aka krb5 1.7.x and 1.8.x through 1.8.3 does not properly determine the acceptability of checksums, which might allow remote attackers to forge GSS tokens, gain privileges, or have unspecified other impact via 1 an unkeyed checksum, 2 an unkeyed PAC checksum, or 3 a KrbFastArmoredRe...
Joomla Component com_ninjarsssyndicator SQL Injection Vulnerability
Exploit for php platform in category web applications =================================================================== Joomla Component comninjarsssyndicator SQL Injection Vulnerability =================================================================== Author : Expl0it Email & msn :...
OpenDocMan 1.2.5 - Cross-Site Scripting / SQL Injection
Security Advisory : Multiple vulnerabilities in OpenDocMan Discovered by == Amol Naik amolnaik4atgmail.com Overview -------------- OpenDocMan is a free document management system DMS designed to comply with ISO 17025 and OIE standard for document management. It features web based access, fine...
Mandrake Security Advisory MDVSA-2009:267 (xmlsec1)
The remote host is missing an update to xmlsec1 announced via advisory MDVSA-2009:267. OpenVAS Vulnerability Test $Id: mdksa2009267.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:267 xmlsec1 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...
Joomla GroupJive 1.8 B4 Remote File Inclusion
No description provided by source. Joomla Component groupjive 1.8 B4 RFI Vulnerability Author : M3NW5 Homepage : http://www.indonesiancoder.com contach : [email protected] Location : INDONESIA Achievo 1.3.4 Information Vendor : http://www.groupjive.org/ Scripts :...
iodined 0.4.2-2 - forged DNS packet Denial of Service
!/usr/bin/perl iodined http://www.wekk.net 2009-04-26 This exploit shuts down the iodined daemon using a forged DNS packet. It works on the last debian stable version 0.4.2-2. It produces a segmentation fault on the daemon side. use IO::Socket; use strict; my $pktheader =...
Next injection protection cross-site scripting request spoofing(CSRF)-vulnerability warning-the black bar safety net
Author: superhei, 出处 :ph4nt0m.org CSRFCross-site Request Forgery,cross-site request cheat in the past year nn2always fire, however, CSRF is very difficult to completely prevent, following some of my Bypass Preventingside note CSRF tricks...... CSRFCross-site Request Forgery,cross-site request che...
CVE-2008-2122
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
Code injection
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
CVE-2008-2122
IBM Rational Build Forge 7.0.2 allows remote attackers to cause a denial of service CPU consumption via a port scan, which spawns multiple bfagent server processes that attempt to read data from closed sockets...
CVE-2008-2122
CVE-2008-2122 affects IBM Rational Build Forge 7.0.2. A port scan can trigger multiple bfagent server processes that attempt to read from closed sockets, causing CPU consumption and a DoS (availability impact). Public references describe the issue as remote, with the impact described as partial (...
Phoenix View CMS Pre Alpha2 - SQL Injection / Local File Inclusion / Cross-Site Scripting
Phoenix View CMS = Pre Alpha2 Multiple Vulnerabilities LFISQLIXSS Found by : tw8 Date : 8.05.2008 Website && Forum : http://rstzone.org && http://rstzone.org/forum/ Bug type : LFI, SQLI & XSS Affected software description: Application : Phoenix View CMS Version : = Pre Alpha2 Vendor :...
IBM Rational Build Forge远程拒绝服务漏洞
BUGTRAQ ID: 29036 IBM Rational Build Forge提供了企业级构建管理和发布管理，能提高软件质量，加速中小企业的软件和系统交付。 Build Forge在处理大量恶意连接时存在漏洞，远程攻击者可能利用此漏洞导致服务不可用。 在使用端口扫描软件检查网络漏洞时，如果端口扫描器在Build Forge代理的端口打开了套接字的话，则扫描器关闭端口后代理应立即关闭套接字，但代理错误的解释了关闭的套接字，仍从已关闭的套接字读取垃圾数据，这可能导致生成大量无限循环的伪造bfagent进程，必须手动杀死这些进程才能保证系统的正常运行。 IBM Rational Buil...
Sql injection
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...
CVE-2008-2088
SQL injection vulnerability in admin/news.php in PHP Forge 3.0 beta 2 allows remote attackers to execute arbitrary SQL commands via the id parameter in the news module to admin.php...