6485 matches found
Integrity Clientless Security (ICS) Update 3.7.54.0
Check Point Integrity Clientless Security ICS for Connectra prevents users with potentially harmful software from accessing your network and requires that they conform to the organization?s antivirus and firewall policies. For more information, please refer to Connectra documentation and to ICS...
[SA18544] MyBB "Allow HTML in Signatures" Script Insertion Security Issue
TITLE: MyBB "Allow HTML in Signatures" Script Insertion Security Issue SECUNIA ADVISORY ID: SA18544 VERIFY ADVISORY: http://secunia.com/advisories/18544/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyBB formerly MyBulletinBoard 1.x...
Integrity Clientless Security (ICS) Update 3.7.52.0
Check Point Integrity Clientless Security ICS for Connectra prevents users with potentially harmful software from accessing your network and requires that they conform to the organization?s antivirus and firewall policies. For more information, please refer to Connectra documentation and to ICS...
Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)
The current default algorithm for creating 'message digests' electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
See through cyber attacks magic: Log Parser-vulnerability warning-the black bar safety net
“Log Parser”is the most useful free Web Services Tools. It uses SQL-style Query mode analysisWeb serverlog file, and then returns a report that shows records that match the query all of the content. You can use Log Parser to create a search query, find trying to attack yourWeb serverand execute...
Integrity Clientless Security (ICS) Update 3.7.50.0
Check Point Integrity Clientless Security ICS for Connectra prevents users with potentially harmful software from accessing your network and requires that they conform to the organization?s antivirus and firewall policies. For more information, please refer to Connectra documentation and to ICS...
CVE-2005-4828
Kolab Server 2.0.0 and 2.0.1 does not properly handle when a large email is sent with a "." in the wrong place, which causes kolabfilter to add another ".", which might break clear-text signatures and attachments. NOTE: it is not clear whether this issue crosses privilege boundaries, so this migh...
CVE-2005-3427
The Cisco Management Center MC for IPS Sensors IPS MC 2.1 can omit port field values while generating the Cisco IOS IPS configuration file, wich can cause some signatures to be disabled and makes it easier for attackers to escape detection...
Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)
Yutaka Oiwa discovered vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various...
CVE-2005-1600
A "mathematical flaw" in the implementation of the El Gamal signature algorithm for LibTomCrypt 1.0 to 1.0.2 allows attackers to generate valid signatures without having the private key...
CVE-2005-0673
Cross-site scripting XSS vulnerability in usercpregister.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the 1 allowhtml, 2 allowbbcode, or 3 allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are process...
CVE-2005-0673
Cross-site scripting XSS vulnerability in usercpregister.php for phpBB 2.0.13 allows remote attackers to inject arbitrary web script or HTML by setting the 1 allowhtml, 2 allowbbcode, or 3 allowsmilies parameters to inject HTML into signatures for personal messages, possibly when they are process...
invision203.txt
Invision Power Board v2.0.3 XSS vulnerabilities found more at user signature. when Admin read attacker topics, admin will lost his passhash example...
Security Flaw with Digital signatures in Microsoft Outlook
On 10/21/2004 the following vulnerability was reported to Microsoft: Security Flaw with Digital signatures in Microsoft Outlook - Emails in Microsoft Outlook digitally signed with S/MIME using either a commercial personal certificate like Verisign or using a certificate issued by MS Certificate...
Invision Power Boards 1.3.1 FINAL XSS Exploit
Description: Lack of checking in the SML codes. Exploit: Put this into any signature or post on an invision forum: COLOR=IMGhttp://aaa.aa/=aaa.jpg/IMGstyle=background:url"javascript:document.location.replace'http://www.hackthissite.org';" /color Fix: I'm not good at regexes :...
Hydra: CVS
This plugin runs Hydra to find CVS accounts and passwords by brute force. To use this plugin, enter the 'Logins file' and the 'Passwords file' under the 'Hydra NASL wrappers options' advanced settings block. TRUSTED...
Quicktime < 6.5.2
The remote Mac OS X host is running a version of Quicktime that is older than Quicktime 6.5.2. The remote version of this software reportedly fails to check bounds properly when decoding BMP images, leading to a heap overflow. If a remote attacker can trick a user into opening a maliciously craft...
[slackware-security] xine-lib
New xine-lib packages are available for Slackware 10.0 and -current to fix security issues. For more details, see: http://www.xinehq.de/index.php/security/XSA-2004-4 http://www.xinehq.de/index.php/security/XSA-2004-5 Here are the details from the Slackware 10.0 ChangeLog:...
GLSA-200404-05 : ipsec-tools contains an X.509 certificates vulnerability.
The remote host is affected by the vulnerability described in GLSA-200404-05 ipsec-tools contains an X.509 certificates vulnerability. racoon a utility in the ipsec-tools package does not verify digital signatures on Phase1 packets. This means that anybody holding the correct X.509 certificate...