CVE-2007-1823

CVE-2007-1823 affects T-Mobile voice mail systems, where remote attackers can retrieve or remove messages or reconfigure mailboxes by spoofing CNID (Caller ID). The vulnerability stems from CNID-based authentication allowing remote abuse, leading to complete confidentiality, integrity, and availa...

CVE-2007-1051

Comodo Firewall Pro (formerly Comodo Personal Firewall) 2.4.17.183 and earlier is affected by a vulnerability where a weak CRC32 hashing is used to identify trusted modules, allowing local attackers to bypass protections by substituting modified modules with the same CRC32. Root cause: weak modul...

CVE-2006-6849

CVE-2006-6849 affects Cahier de texte (CDT) 2.2. The vulnerability is in administration/index.php where the authentication failure handling does not exit properly, allowing remote attackers to perform unauthorized administrative actions. This is a network‑vector issue with low complexity and no a...

Hang the overflow type net horse a trick-vulnerability warning-the black bar safety net

Has been cross-domain script-type net horse than the overflow-type network of the horse are popular, the reason is overflow type net horse will consume a large amount of system resources causing IE freezes or even crash. Think about if a spill type net horse hung slightly with the flow of the sit...

CVE-2006-6143

The RPC library in Kerberos 5 1.4 through 1.4.4, and 1.5 through 1.5.1, as used in Kerberos administration daemon kadmind and other products that use this library, calls an uninitialized function pointer in freed memory, which allows remote attackers to cause a denial of service crash and possibl...

CVE-2006-6620

Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6623

Sygate Personal Firewall 5.6.2808 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6622

Soft4Ever Look 'n' Stop LnS 2.05p2 before 20061215 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6622

Soft4Ever Look 'n' Stop (LnS) 2.05p2 (pre-20061215) is affected. The flaw arises because LnS relies on the Process Environment Block (PEB) to identify a target process, enabling local attackers to spoof PEB fields (ImagePathName, CommandLine, WindowTitle) and bypass the software’s process control...

CVE-2006-6619

CVE-2006-6619 affects AVG Anti-Virus plus Firewall 7.5.431. The vulnerability arises from the product using the Process Environment Block (PEB) to identify a process, allowing a local attacker to bypass the product’s controls by spoofing the PEB fields: ImagePathName, CommandLine, and WindowTitle...

CVE-2006-6621

Filseclab Personal Firewall 3.0.0.8686 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6619

AVG Anti-Virus plus Firewall 7.5.431 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-6620

Comodo Personal Firewall 2.3.6.81 relies on the Process Environment Block PEB to identify a process, which allows local users to bypass the product's controls on a process by spoofing the 1 ImagePathName, 2 CommandLine, and 3 WindowTitle fields in the PEB...

CVE-2006-5864

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...

openssh43p1DoS.txt

!/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat fifo=/tmp/nc.$$ make the fifos mkfifo $fifo.in mkfifo...

OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service

OpenSSH 4.3 p1 - Duplicated Block Remote Denial of Service !/bin/bash OpenSSH CRC compensation attack detection DoS PoC. Tavis Ormandy Yes, I really did implement crc-32 in bash. usage: script victim hostname hostname=$1:-localhost port=$2:-22 where the fifo is created to communicate with netcat...

Mambocom_hotornot-1.2.2.txt

------=Part26246633113660.1158601122097 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline Mambo comhotornot open u'r browser http://victim.xxx/components/comhotornot/uploadfile.php? - upload u'r shell c99shell.php or r57shell.p...

CVE-2006-4567

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious...

LAN-tapping, anti-tool details-vulnerability warning-the black bar safety net

Editor's Note:This article is the defense of the meaning is greater than the attack. Within the same LAN, using the same type of tools to each other to attack, the result is-Can the Internet! Each other understand, and consciously for the download speed limit,“the harmonious Internet”is the right...