[SA18499] WB News "name" Script Insertion Vulnerability

TITLE: WB News "name" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18499 VERIFY ADVISORY: http://secunia.com/advisories/18499/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: WB News 1.x http://secunia.com/product/6866/ DESCRIPTION: DragoN has...

[SA18219] MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability

TITLE: MediaWiki Hardcoded Placeholder String Security Bypass Vulnerability SECUNIA ADVISORY ID: SA18219 VERIFY ADVISORY: http://secunia.com/advisories/18219/ CRITICAL: Less critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: MediaWiki 1.x...

Instant Photo Gallery SQL inj. vuln.

Instant Photo Gallery SQL inj. vuln. Vuln. dicovered by : r0t Date: 30 nov. 2005 Orginal advisory:http://pridels.blogspot.com/2005/11/instant-photo-gallery-sql-inj-vuln.html Vendor:http://www.instantphotogallery.com affected version:v1 and prior Product Description: Instant Photo Gallery is a new...

CVE-2005-3733

Technical details for CVE-2005-3733 are not publicly provided in the connected documents. The sources reference related CVEs (CVE-2005-3666/3667/3668/3732) but do not specify Juniper JUNOS/E-series specifics or IKEv1 conditions for this CVE.

CVE-2005-3666

Technical details (affected implementations, exact root cause, impact, and fixes for CVE-2005-3666) are not publicly available in the provided documents. Monitor for updates as new information becomes available.

[SA16970] CJ LinkOut "123" Cross-Site Scripting Vulnerability

TITLE: CJ LinkOut "123" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA16970 VERIFY ADVISORY: http://secunia.com/advisories/16970/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: CJ LinkOut 1.x http://secunia.com/product/5770/ DESCRIPTION: Psymera has...

smf105.txt

Simple Machine Forum 1-0-5 possibly prior versions user IP address / information disclosure software: site: http://www.simplemachines.org/ information disclosure: a user can choose an sumbit an avatar url like this: http://evilsite/image.php where image.php is a file like this: When forum users...

[SA16506] Mantis Cross-Site Scripting and SQL Injection Vulnerabilities

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

[slackware-security] xine-lib

New xine-lib packages are available for Slackware 10.0 and -current to fix security issues. For more details, see: http://www.xinehq.de/index.php/security/XSA-2004-4 http://www.xinehq.de/index.php/security/XSA-2004-5 Here are the details from the Slackware 10.0 ChangeLog:...

SNMP Version 1 Agent Detection

Binary data 1430.prm...

NTP Server Protocol Version 1 Detection

Binary data 1150.prm...

NTP Server Protocol Version 1 Detection

Binary data 1146.prm...

php-Board (php)

Informations : °°°°°°°°°°°°°° Website : http://www.hp-planet.de Version : 1 Problem : Informations disclosure PHP Code/Location : °°°°°°°°°°°°°°°°°°° login.php : ----------------------------------------- function passwd2$user $password="nicht registriert"; if fileexists"user/".$user.".txt" $fp =...

SSH Protocol Version 1 Session Key Retrieval

The remote SSH daemon supports connections made using the version 1.33 and/or 1.5 of the SSH protocol. These protocols are not completely cryptographically safe so they should not be used. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10882; scriptversion"1.37";...

[SECURITY] [DSA-091-1] OpenSSH UseLogin vulnerability

Package : ssh Problem type : influencing login Debian-specific: no If the UseLogin feature is enabled in for ssh local users could pass environment variables including variables like LDPRELOAD to the login process. This has been fixed by not copying the environment of UseLogin is enabled. Please...

CVE-2001-0471

CVE-2001-0471 applies to SSH1 (SSH server 1.2.30 or earlier). The issue is that SSH1 SSH Daemon does not log repeated login attempts, which could allow remote attackers to carry out brute-force-style account compromises without detection. Multiple connected sources (NVD/Nessus/OpenVAS entries) co...

[SECURITY] [DSA-046-1] exuberant-ctags uses insecure temporary files

-----BEGIN PGP SIGNED MESSAGE----- - ------------------------------------------------------------------------ Debian Security Advisory DSA-046-1 [email protected] http://www.debian.org/security/ Wichert Akkerman April 15, 2001 -...

SSHD-1 Logging Vulnerability

Crimelabs, Inc. www.crimelabs.net Security Note Crimelabs Security Note CLABS200101 Title: SSH-1 Brute Force Password Vulnerability Date: 5 February, 2001 Vendors: Any supported by SSH-1 Versions: At least ssh-1.2.27 and 1.2.30 Not Affected: OpenSSH Severity: Medium to High Author: Jose Nazario...