123 matches found
PHPValley Micro Jobs Site Script - Spoofing
PHPValley Micro Jobs Site Script - Spoofing source: https://www.securityfocus.com/bid/59536/info PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user. Attackers can exploit this issue to spoof another user; other attacks are also possible...
PHPValley Micro Jobs Site Script - Spoofing
source: https://www.securityfocus.com/bid/59536/info PHPValley Micro Jobs Site Script is prone to a vulnerability that allows attackers to spoof another user. Attackers can exploit this issue to spoof another user; other attacks are also possible. PHPValley Micro Jobs Site Script 1.01 is...
CVE-2012-2669
The main function in tools/hv/hvkvpdaemon.c in hypervkvpd, as distributed in the Linux kernel before 3.4.5, does not validate the origin of Netlink messages, which allows local users to spoof Netlink communication via a crafted connector message...
CVE-2012-3520
The Netlink implementation in the Linux kernel before 3.2.30 does not properly handle messages that lack SCMCREDENTIALS data, which might allow local users to spoof Netlink communication via a crafted message, as demonstrated by a message to 1 Avahi or 2 NetworkManager...
FreeBSD : mybb -- multiple vulnerabilities (beb6f4a8-add5-11de-8b55-0030843d3802)
mybb team reports : Input passed via avatar extensions is not properly sanitised before being used in SQL queries. This can be exploited to manipulate SQL queries by uploading specially named avatars. The script allows to sign up with usernames containing zero width space characters, which can be...
CVE-2006-5461
Avahi before 0.6.15 does not verify the sender identity of netlink messages to ensure that they come from the kernel instead of another process, which allows local users to spoof network changes to Avahi...
DeluxeBB mutiple vulnerabilities
====================================================================== Advisory : DeluxeBB mutiple vulnerabilities Release Date : July 18th, 2006 Application : DeluxeBB Version : Deluxe 1.07 and previous versions Platform : PHP Vendor URL : http://www.deluxebb.com/ Authors : Jessica Hope...
deluxeBB.txt
====================================================================== Advisory : DeluxeBB mutiple vulnerabilities Release Date : July 18th, 2006 Application : DeluxeBB Version : Deluxe 1.07 and previous versions Platform : PHP Vendor URL : http://www.deluxebb.com/ Authors : Jessica Hope...
[Full-disclosure] [ Suresec Advisories ] - Several MacOS X vulnerabilities
Buffer overflow in ping and traceroute. Vulnerability summary: The ping and traceroute programs used in Mac OS X are vulnerable to a buffer overflow when resolving a hostname. In the case of ping a hostname gets copied into a static buffer which is 80 bytes long. For traceroute the hostname gets...
Multiple Macromedia products licensgin service privilege escalation
Ilcensing service file has weak permisions and may be spoofed by local user...
CVE-2005-0831
PHP-Post allows remote attackers to spoof the names of other users by registering with a username containing hex-encoded characters...
CVE-2003-1071
The CVE-2003-1071 issue affects the Solaris wall daemon (rpc.walld) on Solaris 2.6–9. Local users can craft messages to logged-on users that appear to come from arbitrary UIDs by closing stderr before executing wall and supplying a spoofed From header. The attack is local and requires no authenti...
Linux PAM 0.77 - Pam_Wheel Module 'getlogin() Username' Spoofing Privilege Escalation
source: https://www.securityfocus.com/bid/7929/info A vulnerability has been discovered in the Linux-Pam pamwheel module. The problem exists in the way the module authenticates users under certain configurations. Specifically, if the module is configured to allow wheel group members to use the 's...
Php-Nuke:users and admins password hashes vulnerability
BUGSMAN: serving security from Italy since..hem..well, about 1 year ------------------------------------------------------------------------------------- Object: users & admins password hash retrieving Tested on Php-Nuke 5.6 e 6.5 Vulnerable versions: I've never seen a patch for this so potential...
Half-Life Server 1.1/3.1 - New Player Flood Denial of Service
source: https://www.securityfocus.com/bid/5076/info Half-Life is a popular game distributed and maintained by Valve Software. It includes features that allow users to game locally, or in distributed network environments. Valve Software also distributes a dedicated server product. A denial of...
CVE-2001-1357
Multiple vulnerabilities in phpMyChat before 0.14.5 exist in 1 input.php3, 2 handleinputH.php3, or 3 index.lib.php3 with unknown consequences, possibly related to user spoofing or improperly initialized variables...
CVE-2001-1357
CVE-2001-1357 affects phpMyChat prior to 0.14.5. Vulnerabilities are in three PHP files: input.php3, handle_inputH.php3, and index.lib.php3. The description notes unknown consequences with possible user spoofing or improperly initialized variables; no concrete impact or exploit details are provid...
CVE-2002-0315
fasttrack p2p, as used in 1 KaZaA, 2 grokster, and 3 morpheus allows remote attackers to spoof other users by modifying the username and network information in the message header...
CVE-2002-0315
The CVE-2002-0315 entry describes a flaw in the FastTrack P2P protocol used by KaZaA, Grokster, and Morpheus where remote attackers can spoof other users by modifying the username and network information in the message header. Affected software involves the FastTrack P2P components integrated int...