[Full-disclosure] [USN-211-1] Enigmail vulnerability

=========================================================== Ubuntu Security Notice USN-211-1 October 20, 2005 enigmail vulnerability CVE-2005-3256 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty Warthog Ubuntu...

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

DEBIAN-CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

CVE-2005-3256

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

CVE-2005-3256

Removed by vendor...

CVE-2005-3256: Undefined Security Weakness

The key selection dialogue in Enigmail before 0.92.1 can incorrectly select a key with a user ID that does not have additional information, which allows parties with that key to decrypt the message...

CVE-2005-3079: Undefined Security Weakness

PunBB before 1.2.8 allows remote attackers to perform "code inclusion" via the user language selection...

Microsoft Windows Explorer code execution

It's possible to execute script automatically on file selection...

[VulnWatch] File Selection May Lead to Command Execution (GM#015-IE)

GreyMagic Security Advisory GM015-IE ===================================== By GreyMagic Software. 19 Apr 2005. Available in HTML format at http://www.greymagic.com/security/advisories/gm015-ie/. Topic: File Selection May Lead to Command Execution. Discovery date: 18 Jan 2005. Affected application...

pabox20.txt

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

[XSS] paBox 2.0

pabox 2.0 no longer includes the Date and Time parameters in the POST data sent with your shout. The date and time parameters in previous versions were vulnerable to a cross site scripting attack. Now however in version 2.0 if you setup paBox to include an icon with your topic... eg: :winkface:...

CVE-2004-0355

Invision Power Board 1.3 Final allows remote attackers to gain sensitive information by selecting a file for "Personal Photo" that is not an image file, which displays the installation path in an error message...

RPC selection_svc Service In Use

Binary data 1032.prm...

phpBB profile.php Cross Site Scripting Vulnerability

Advisory Name : phpBB profile.php Cross Site Scripting Vulnerability Release Date : Mar 21,2004 Application : phpBB Version : phpBB 2.0.6d or others? Platform : PHP Vendor URL : http://www.phpbb.com/ Author : Cheng Peng Suapplesoupatmsn.com Proof of Conecpt: This vuln is in profile.php,when you...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

Exploit for unknown platform in category remote exploits ======================================================== MS Windows RPC DCOM Remote Exploit Universal Targets ======================================================== / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal...

MS Windows (RPC DCOM) Remote Exploit (Universal Targets)

No description provided by source. / Windows remote RPC DCOM exploit Coded by oc192 Includes 2 universal targets, 1 for win2k, and 1 for winXP. This exploit uses ExitThread in its shellcode to prevent the RPC service from crashing upon successful exploitation. It also has several other options...

Подмена подписанного документа в ECDSA

Серьёзная ошибка в ECDSA. В матаппарате новейшего американского стандарта ЭЦП известного как ECDSA DSA для эллиптических кривых 1 cтр. 25-30 существует серьёзная ошибка позволяющая выбрать такое значение секретного ключа, чтобы получить одинаковые подписи для разных документов. Это позволяет...

UDP Stress Tester Denial of Service Exploit

Exploit for unknown platform in category dos / poc =========================================== UDP Stress Tester Denial of Service Exploit =========================================== include include include include include include include include include define shit "BLEAHD" timet elapsed; long...