FreeBSD : pycrypto -- vulnerable ElGamal key generation (f45c0049-be72-11e1-a284-0023ae8e59f0)

Dwayne C. Litzenberger of PyCrypto reports : In the ElGamal schemes for both encryption and signatures, g is supposed to be the generator of the entire Z^p group. However, in PyCrypto 2.5 and earlier, g is more simply the generator of a random sub-group of Z^p. The result is that the signature...

DSA-2480-3 request-tracker3.8 - regression

Bulletin has no description...

DEBIAN-CVE-2011-4459

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not properly disable groups, which allows remote authenticated users to bypass intended access restrictions in opportunistic circumstances by leveraging a group membership...

DEBIAN-CVE-2011-2084

Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to read 1 hashes of former passwords and 2 ticket correspondence history by leveraging access to a privileged account...

DEBIAN-CVE-2011-2082

The vulnerable-passwords script in Best Practical Solutions RT 3.x before 3.8.12 and 4.x before 4.0.6 does not update the password-hash algorithm for disabled user accounts, which makes it easier for context-dependent attackers to determine cleartext passwords, and possibly use these passwords...

DEBIAN-CVE-2011-4460

SQL injection vulnerability in Best Practical Solutions RT 2.x and 3.x before 3.8.12 and 4.x before 4.0.6 allows remote authenticated users to execute arbitrary SQL commands by leveraging access to a privileged account...

CVE-2011-5092

Best Practical Solutions RT 3.8.x before 3.8.12 and 4.x before 4.0.6 allows remote attackers to execute arbitrary code and gain privileges via unspecified vectors, a different vulnerability than CVE-2011-4458 and CVE-2011-5093...

Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability

This host is running Support Incident Tracker and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsitidparamxssvuln.nasl 5950 2017-04-13 09:02:06Z teissa $ Support Incident Tracker SiT! 'id' Parameter XSS Vulnerability Authors: Rachana Shetty Copyright: Copyright...

Debian Security Advisory DSA 2480-1 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-1. OpenVAS Vulnerability Test $Id: deb24801.nasl 6612 2017-07-07 12:08:03Z cfischer $ Description: Auto-generated from advisory DSA 2480-1 request-tracker3.8 Authors: Thomas Reinke Copyright: Copyright c 20...

Debian Security Advisory DSA 2480-1 (request-tracker3.8)

The remote host is missing an update to request-tracker3.8 announced via advisory DSA 2480-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective righ...

CVE-2012-2235

SiT! (Support Incident Tracker) is affected by a cross-site scripting (XSS) vulnerability in versions up to 3.65, triggered by the id parameter passed to index.php. The issue arises because the parameter is processed in an error message without proper sanitization, enabling remote attackers to in...

DSA-2480-1 request-tracker3.8 - several

Bulletin has no description...

DSA-2480-2 request-tracker3.8 - regression

Bulletin has no description...

Mozilla Products Multiple Vulnerabilities - May12 (Windows)

This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnmay12win.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Multiple Vulnerabilities - May12 Windows Authors: Rachana Shetty...

Support Incident Tracker Multiple Vulnerability

Exploit for php platform in category web applications Author : L3b-r1'z Title : Support Incident Tracker Multiple Vulnerability Email : email protected Site : Sec4Leb.Com Download : http://sourceforge.net/projects/sitracker/files/stable/3.65/sit3.65.tar.gz/download Xss Vuln + P0c : Open site and ...

Novell ZENworks Configuration Management Preboot Service Opcode 6c Vulnerability

Added: 04/06/2012 CVE: CVE-2011-3176 BID: 52659 OSVDB: 80231 Background Novell ZENworks Configuration Management is an IT desktop computer management suite that provides the ability to install, configure and administer desktop computers from a centralized location. The product is based on a...

Google Chrome Multiple Denial of Service Vulnerabilities (Mar 2012) - Windows

Google Chrome is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Rivettracker 1.03 SQL Injection

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords...

Rivettracker 1.03 - Multiple SQL Injections

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...

Rivettracker 1.03 - Multiple SQL Injections

Rivettracker 1.03 - Multiple SQL Injections Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames fo...