flash-plugin: security bulletin APSB10-26

Adobe Flash Player before 9.0.289.0 and 10.x before 10.1.102.64 on Windows, Mac OS X, Linux, and Solaris, and 10.1.95.1 on Android, does not properly handle unspecified encodings during the parsing of a cross-domain policy file, which allows remote web servers to bypass intended access restrictio...

DEBIAN-CVE-2010-2940

The authsend function in providers/ldap/ldapauth.c in System Security Services Daemon SSSD 1.3.0, when LDAP authentication and anonymous bind are enabled, allows remote attackers to bypass the authentication requirements of pamauthenticate via an empty password...

Aqar Script 1.0 - Remote Bypass

Aqar Script 1.0 - Remote Bypass ======================================================================================== | Title : Aqar Script V.1 Remote By pass Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered By AqarScript | Tested o...

Aqar Script 1.0 - Remote Bypass

======================================================================================== | Title : Aqar Script V.1 Remote By pass Exploit | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Script : Powered By AqarScript | Tested on: windows SP2 Français V.Pnx2 2...

Aqar Script V.1 Remote By pass Exploit

Exploit for php platform in category web applications ====================================== Aqar Script V.1 Remote By pass Exploit ====================================== ======================================================================================== | Title : Aqar Script V.1 Remote By...

CVE-2009-4810

The Secure Remote Password SRP implementation in Samhain before 2.5.4 does not check for a certain zero value where required by the protocol, which allows remote attackers to bypass authentication via crafted input...

DEBIAN-CVE-2010-0098

ClamAV before 0.96 does not properly handle the 1 CAB and 2 7z file formats, which allows remote attackers to bypass virus detection via a crafted archive that is compatible with standard archive utilities...

CVE-2010-0728

smbd in Samba 3.3.11, 3.4.6, and 3.5.0, when libcap support is enabled, runs with the CAPDACOVERRIDE capability, which allows remote authenticated users to bypass intended file permissions via standard filesystem operations with any client...

UBUNTU-CVE-2010-0286

Unspecified vulnerability in the OpenID Identity Authentication extension in TYPO3 4.3.0 allows remote attackers to bypass authentication and gain access to a backend user account via unknown attack vectors in which both the attacker and victim have an OpenID provider that discards identities...

RoseOnlineCMS 3 B1 SQL Injection

'/ -.- --------------------oOO------OOo------------------- | RoseOnlineCMS ! Download: http://sourceforge.net/projects/rosecms/files/ ! Date: 16.01.2010 ! Remote: yes ! Code : " method="post" Username: Password: ?php ifisset$POST'submit' // username and password sent from signup form $USER =...

kernel: e1000 issue reported at 26c3

drivers/net/e1000/e1000main.c in the e1000 driver in the Linux kernel 2.6.32.3 and earlier handles Ethernet frames that exceed the MTU by processing certain trailing payload data as if it were a complete frame, which allows remote attackers to bypass packet filters via a large packet with a craft...

WebSphere 7.0.0.5 远程绕过CSIv2访问限制

No description provided by source...

Zabbix Agent < 1.6.7 Remote Bypass Vulnerability

No description provided by source. Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob nicob nicob net Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, server...

Zabbix Agent < 1.6.7 Remote Bypass Vulnerability

Exploit for unknown platform in category web applications ================================================ Zabbix Agent Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network service...

Mandriva Security Advisory MDVSA-2009:259-1 (snort)

The remote host is missing an update to snort announced via advisory MDVSA-2009:259-1. OpenVAS Vulnerability Test $Id: mdksa20092591.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:259-1 snort Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Zabbix Agent 1.6.7 - Remote Bypass

Zabbix Agent 1.6.7 - Remote Bypass Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other...

Zabbix Agent < 1.6.7 - Remote Bypass

Zabbix Agent : Bypass of EnableRemoteCommands=0 From: Nicob Date: Sun, 13 Dec 2009 16:28:30 +0100 From Wikipedia : "Zabbix is a network management system application ... designed to monitor and track the status of various network services, servers, and other network hardware." Zabbix Agent : Bypa...

Fedora 11 : proftpd-1.3.2b-1.fc11 (2009-11649)

This update fixes CVE-2009-3639, in which proftpd's modtls, when the dNSNameRequired TLS option is enabled, does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 client certificate. This allows remote attackers to bypass intended...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...

OpenJDK proxy mechanism allows non-authorized socket connections (6801497)

The proxy mechanism implementation in Sun Java Runtime Environment JRE in JDK and JRE 6 before Update 15, and JDK and JRE 5.0 before Update 20, allows remote attackers to bypass intended access restrictions and connect to arbitrary sites via unspecified vectors, related to a declaration that lack...