screen password protection bypass

Some key sequences allow access to locked console...

Microsoft Internet Explorer and Mozilla Firefox multiple security vulnerabilities

Internet Explorer race conditions allow cross domain access. Mozilla Firefox IFRAME cross domain access. Mozilla file download dialogs delay protection bypass. MSIE address bar spoofing...

Sun JRE / JDK multiple security vulnerabilities

Buffer and integer overflows in JPG and BMP processing, sandbox protection bypass with system classes...

Multiple personal firewalls uncommon process identifier protection bypass

Two lower bits of process identifier are not ignored in hooked OpenProcess functions, making it possible to access protected application by using process id no divisible by 4...

Deutsche Telekom Speedport w700v protection bypass

Bruteforce protection is implemented as client-side script...

PHP-Nuke SQL注入保护绕过和多个SQL注入漏洞

PHP-Nuke是一款基于PHP的WEB应用程序。 PHP-Nuke不正确过滤用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是对于"/"字符缺少充分的过滤，使用"%2f"可绕过输入检查，进行SQL注入攻击。 PHP-Nuke 8.0 .3.3b 目前没有解决方案提供： http://www.phpnuke.org http://www.example.com/nuke/?%2f http://www.example.com/html80/?%2f/UNION%2f/SELECT...

PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections

PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass Multiple SQL Injections source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A...

PHP-Nuke 8.0.3.3b - SQL Injection Protection Bypass / Multiple SQL Injections

source: https://www.securityfocus.com/bid/23528/info PHP-Nuke is prone to multiple SQL-injection vulnerabilities because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, acce...

SecuStick USB flash drive protection bypass

File access does not dependant on authentication, making it's possible to bypass authentication for file access...

CVE-2007-0734: Improper Restriction of Operations within the Bounds of a Memory Buffer

fsck, as used by the AirPort Disk feature of the AirPort Extreme Base Station with 802.11n before Firmware Update 7.1, and by Apple Mac OS X 10.3.9 through 10.4.9, does not properly enforce password protection of a USB hard drive, which allows context-dependent attackers to list arbitrary...

Microsoft Windows Vista protected process protection bypass

It's possible to set or remove process protection...

CVE-2007-1762

Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs before checking them against the phishing site blacklist, which allows remote attackers to bypass phishing protection via multiple / slash characters in the URL...

PHP read_file safe_mode protection bypass

It's possible to bypass protection by using php://../../ prefix to filename...

CVE-2007-1736: Undefined Security Weakness

Mozilla Firefox 2.0.0.3 does not check URLs embedded in 1 object or 2 iframe HTML tags against the phishing site blacklist, which allows remote attackers to bypass phishing protection...

CVE-2007-1538: Undefined Security Weakness

McAfee VirusScan Enterprise 8.5.0.i uses insecure permissions for certain Windows Registry keys, which allows local users to bypass local password protection via the UIP value in 1 HKEYLOCALMACHINE\SOFTWARE\McAfee\DesktopProtection or 2 HKEYLOCALMACHINE\SOFTWARE\Network Associates\TVD\VirusScan...

Linux netfilter multiple security vulnerabilities

Protection bypass with fragmented IPv6 packets, denial of service...

PHP filtering extension multiple security vulnerabilities

Buffer underflow, filtering protection bypass...

Plash sandbox protection bypass

It's possible to execute any command via /dev/tty device...

CVE-2007-1395

Incomplete blacklist vulnerability in index.php in phpMyAdmin 2.8.0 through 2.9.2 allows remote attackers to conduct cross-site scripting XSS attacks by injecting arbitrary JavaScript or HTML in a 1 db or 2 table parameter value followed by an uppercase end tag, which bypasses the protection...

CVE-2007-1332: Undefined Security Weakness

Multiple cross-site request forgery CSRF vulnerabilities in TKS Banking Solutions ePortfolio 1.0 Java allow remote attackers to perform unspecified restricted actions in the context of certain accounts by bypassing the client-side protection scheme...