2902 matches found
Governs the granting of leave true when True also false-the“real”IP security risks-vulnerability warning-the black bar safety net
Let us look at the ASP code first: Function getIP Dim strIPAddr as string If Request. ServerVariables"HTTPXFORWARDEDFOR" = "" OR InStrRequest. ServerVariables"HTTPXFORWARDEDFOR", "unknown" 0 Then strIPAddr = Request. ServerVariables"REMOTEADDR" ElseIf InStrRequest...
The Windows environment via the MySQL to the SYSTEM status perform system commands-bug warning-the black bar safety net
Some time ago two about MySQL vulnerabilities in the MySQL CREATE FUNCTION mysql. func table allows injecting arbitrary function library vulnerability, the MySQL CREATE FUNCTION libc library allows arbitrary code execution vulnerabilities of a careful study of these two vulnerabilities, you can...
How To Protect Against Instant Messaging Vulnerabilities: Blocking Google Talk
Google Talk is an application used to call or send instant messages for Microsoft Windows operating systems. Instant messaging applications may risk an organization's security in the following ways:1. Vulnerabilities in IM applications could be exploited to compromise a user's system i.e MSN...
Do not think that the installation of a firewall,I political don't you-vulnerability warning-the black bar safety net
How to make tcp packets and udp packets through the firewall by this article httptunnel technology At the same time escaped the firewall shield, as well as the system's tracking test, we can seeNetworksafe to rely only on some or a few of the means are unreliable, while the security system of bli...
[SECURITY] [DSA 865-1] New hylafax packages fix insecure temporary files
-------------------------------------------------------------------------- Debian Security Advisory DSA 865-1 [email protected] http://www.debian.org/security/ Martin Schulze October 13th, 2005 http://www.debian.org/security/faq -...
worring about YaST in SuSE 9.3 and maybe lower
author: l0om email: email:l0om | a7 | excluded d07 org page: www.excluded.org worring about YaST in SuSE 9.3 and maybe lower iam wondering about the installation routine from SuSE linux 9.3 and maybe some lower verisons. YaST is creating a directory named...
ZipTorrent 1.3.7.3 - Local Proxy Password Disclosure
/================================================================ ZipTorrent 1.3.7.3 Local Proxy Password Disclosure Exploit by Kozan Discovered & Coded by Kozan Credits to ATmaCA Web: www.spyinstructors.com Mail: [email protected] Application: -------------------- ZipTorrent 1.3.7.3 and...
FreeBSD : php -- multiple vulnerabilities (d47e9d19-5016-11d9-9b5f-0050569f0001)
Secunia reports : Multiple vulnerabilities have been reported in PHP, which can be exploited to gain escalated privileges, bypass certain security restrictions, gain knowledge of sensitive information, or compromise a vulnerable system. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...
ZeroBoard Worm Source Code
No description provided by source. / The worm exploits a vulnerability in ZeroBoard, allowing an attacker to inject arbitrary PHP code. /str0ke / / ZeroBoard -1day INE w0rm / include stdio.h include unistd.h include stdlib.h include sys/socket.h include netdb.h include netinet/in.h include signal...
mysql security update
CentOS Errata and Security Advisory CESA-2005:348 Updated mysql-server packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This...
Important: Red Hat Security Advisory: mysql-server security update
Updated mysql-server packages that fix several vulnerabilities are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. MySQL is a multi-user, multi-threaded SQL database server. This update fixes several security risks in the MySQL...
Aventail ASAP Platform Management Console Detection
The remote host seems to be an Aventail SSL VPN appliance, and it allows connections to its web console management. Letting attackers know that you are using such a device will help them to focus their attacks or will make them change their strategy. In addition to this, an attacker may attempt a...
EEYE: Computer Associates License Manager Remote Vulnerabilities
Computer Associates License Manager Remote Vulnerabilities Release Date: 03/02/2005 Severity: High Remote Code Execution Vendor: Computer Associates Software Affected: The vulnerability exists if the CA License package version on the system is between v1.53 and v1.61.8. This package is included i...
CVE-2005-0616
Multiple cross-site scripting XSS vulnerabilities in the Download module for PostNuke 0.750 and 0.760-RC2 allow remote attackers to inject arbitrary web script or HTML via the 1 Program name, 2 File link, 3 Author name 4 Author e-mail address, 5 File size, 6 Version, or 7 Home page variables...
Insecure GFI Languard Network Security Scanner password storage
Password is stored in memory in cleartext...
Sybase Adaptive Server Enterprise < 12.5.4.0 Multiple Vulnerabilities
The remote host is running Sybase Adaptive Server Enterprise, a SQL server with network capabilities. The remote version of this software is earlier than 12.5.4.0. Such versions are affected by several unspecified security flaws. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...
glFTPd 1.x2.0 ZIP Plugins - Multiple Directory Traversal Vulnerabilities
glFTPd 1.x2.0 ZIP Plugins - Multiple Directory Traversal Vulnerabilities source: https://www.securityfocus.com/bid/12586/info It is reported that various ZIP related plugins supplied with the server contain multiple directory traversal vulnerabilities. These issues may allow remote attackers to...
GLSA-200501-16 : Konqueror: Java sandbox vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200501-16 Konqueror: Java sandbox vulnerabilities Konqueror contains two errors that allow JavaScript scripts and Java applets to have access to restricted Java classes. Impact : A remote attacker could embed a malicious Java appl...
IBM WebSphere Java Server Pages (JSP) source code leak
No description provided...
GLSA-200501-19 : imlib2: Buffer overflows in image decoding
The remote host is affected by the vulnerability described in GLSA-200501-19 imlib2: Buffer overflows in image decoding Pavel Kankovsky discovered that several buffer overflows found in the libXpm library see GLSA 200409-34 also apply to imlib see GLSA 200412-03 and imlib2. He also fixed a number...