CVE-2013-2145

The cpansign verify functionality in the Module::Signature module before 0.72 for Perl allows attackers to bypass the signature check and execute arbitrary code via a SIGNATURE file with a "special unknown cipher" that references an untrusted module in Digest/...

pass active Defense-vulnerability warning-the black bar safety net

自身 文件 A.EXE内部 包含 一 个 签名 文件 Asg.exe,释放 Asg.exe 为 B.EXE,改 自己 的 名字 为 C.EXE,把 B.EXE 改成 A.EXE,perform their own malicious code portion of the... Discover many active Defense when prompted will say this file has signature...

Mandrake Linux Security Advisory : gnupg (MDKSA-2006:043)

Tavis Ormandy discovered it is possible to make gpg incorrectly return success when verifying an invalid signature file. The updated packages have been patched to address this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...

Invision Power Board COLOR SML Tag XSS

According to the version number in its banner, the installation of Invision Power Board on the remote host reportedly does not sufficiently sanitize the 'COLOR' SML tag. A remote attacker may exploit this vulnerability by adding a specially crafted 'COLOR' tag with arbitrary JavaScript to any...