CVE-2011-2687

Drupal 7.x before 7.3 allows remote attackers to bypass intended nodeaccess restrictions via vectors related to a listing that shows nodes but lacks a JOIN clause for the node table...

rsync excluded content access restrictions bypass via symlinks

Unspecified vulnerability in rsync before 3.0.0pre6, when running a writable rsync daemon, allows remote attackers to bypass exclude, excludefrom, and filter and read or write hidden files via 1 symlink, 2 partial-dir, 3 backup-dir, and unspecified 4 dest options...

CVE-2011-2395: Undefined Security Weakness

The Neighbor Discovery ND protocol implementation in Cisco IOS on unspecified switches allows remote attackers to bypass the Router Advertisement Guarding functionality via a fragmented IPv6 packet in which the Router Advertisement RA message is contained in the second fragment, as demonstrated b...

PT-2011-2935

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the Same Origin Policy via unspecified vectors. Recommendations For versions prior to 10.0.648.127, update to version 10.0.648.127 or later to...

PT-2011-2936

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 10.0.648.127 Description The issue allows remote attackers to bypass the pop-up blocker in Google Chrome via unknown vectors. Recommendations For versions prior to 10.0.648.127, update to version 10.0.648.127 or...

qemu-kvm: Setting VNC password to empty string silently disables all authentication

qemu-kvm before 0.11.0 disables VNC authentication when the password is cleared, which allows remote attackers to bypass authentication and establish VNC sessions...

PT-2010-5110

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 4.2 Description The issue allows remote attackers to bypass the remote image loading setting in Mail via an HTML LINK element with a DNS prefetching property. This can be demonstrated by an HTML e-mail message that...

flash-plugin: security bulletin APSB10-26

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictio...

DEBIAN-CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

Aqar Script 1.0 - Remote Bypass

Aqar Script 1.0 - Remote Bypass ======================================================================================== | Title : Aqar Script V.1 Remote By pass Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered By AqarScript | Tested o...

Aqar Script V.1 Remote By pass Exploit

Exploit for php platform in category web applications ====================================== Aqar Script V.1 Remote By pass Exploit ====================================== ======================================================================================== | Title : Aqar Script V.1 Remote By...

Aqar Script 1.0 - Remote Bypass

======================================================================================== | Title : Aqar Script V.1 Remote By pass Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered By AqarScript | Tested on: windows SP2 Français V.Pnx2 2...

CVE-2009-4810

The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...

DEBIAN-CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

CVE-2010-1238: Undefined Security Weakness

MoinMoin 1.7.1 allows remote attackers to bypass the textcha protection mechanism by modifying the textcha-question and textcha-answer fields to have empty values...

CVE-2010-0728

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client...

UBUNTU-CVE-2010-0286

Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...

CVE-2010-0230: Undefined Security Weakness

SUSE Linux Enterprise 10 SP3 SLE10-SP3 and openSUSE 11.2 configures postfix to listen on all network interfaces, which might allow remote attackers to bypass intended access restrictions...

RoseOnlineCMS 3 B1 SQL Injection

'/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS ! Download: http://sourceforge.net/projects/rosecms/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : " method="post" Username: Password: ?php ifisset$POST'submit' // username and password sent from signup form $USER =...

kernel: e1000 issue reported at 26c3

drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a craft...