PT-2008-2975

Name of the Vulnerable Software and Affected Versions Plone CMS versions prior to 3 Description The issue allows remote attackers to obtain access by sniffing the network, as a base64 encoded form of the username and password is placed in the ac cookie for all user accounts. Recommendations For...

Unfixed XSS vulnerability at www3.ac-nancy-metz.fr

Security researcher SpyHackerz, has submitted on 04/12/2007 a cross-site-scripting XSS vulnerability affecting www3.ac-nancy-metz.fr, which at the time of submission ranked 16172 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/12/2007. It is...

Microsoft Word object pointer memory corruption vulnerability

Overview A memory corruption vulnerability in Microsoft Word could allow a remote attacker to execute arbitrary code with the privileges of the user running Word. Description Microsoft Word contains a memory corruption vulnerability. According to Microsoft Security Bulletin MS06-027:When a user...

CVE-2003-1264: Undefined Security Weakness

TFTP server in Longshine Wireless Access Point WAP LCS-883R-AC-B, and in D-Link DI-614+ 2.0 which is based on it, allows remote attackers to obtain the WEP secret and gain administrator privileges by downloading the configuration file config.img and other files without authentication...

Linux news 20.11.00

Следующий шаг ядра стабильной ветки - 2.2.18pre22 Следующий шаг на пути к 2.2.19. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-19-009-04-NW-KN Linux 2.4.0-test11 Вышло очередное тестовое ядро... Подробнее: ftp://ftp.kernel.org/pub/linux/kernel/v2.4/ AC Kernel Patch 2.2.x 2.2.18pre...