CVE-2010-4020

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

CVE-2010-4020

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

krb5: krb5 may accept authdata checksums with low-entropy derived keys (MITKRB5-SA-2010-007)

MIT Kerberos 5 aka krb5 1.8.x through 1.8.3 does not reject RC4 key-derivation checksums, which might allow remote authenticated users to forge a 1 AD-SIGNEDPATH or 2 AD-KDC-ISSUED signature, and possibly gain privileges, by leveraging the small key space that results from certain one-byte...

CVE-2010-3828

The vulnerability CVE-2010-3828 affects Apple iOS before 4.2 in iAd Content Display. A crafted URL in an ad can enable man-in-the-middle attackers to make calls, indicating potential traffic manipulation via the ad. From the provided documents, there are no explicit exploitation details or confir...

CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367

Cross-site scripting XSS vulnerability in search.cgi in AD-EDIT2 before 3.0.9 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2010-2367

The CVE-2010-2367 entry concerns AD-EDIT2 prior to version 3.0.9, with a cross-site scripting (XSS) vulnerability in search.cgi that can allow remote attackers to inject arbitrary script/HTML via unspecified vectors. Affected product: AD-EDIT2 (CMS). Root cause: XSS in the search.cgi handler; imp...

AD-EDIT2 vulnerable to cross-site scripting

Overview AD-EDIT2 contains a cross-site scripting vulnerability. AD-EDIT2 is a Contents Management System CMS software. AD-EDIT2 contains a cross-site scripting vulnerability. Seiei Higa of IT College Okinawa reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#69191943: AD-EDIT2 vulnerable to cross-site scripting

AD-EDIT2 is a Contents Management System CMS software. AD-EDIT2 contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the Software Update to the latest version according to the information provided by the developer...

restrict the access to JIRA for specific pairs "user account - host"

to be able to restrict the access to JIRA for specific pairs "user account - host" also to provide: 1. specify checkbox user account - "any host" 2. specify multiple hosts for one user account 3. to use Windows AD containers such distribution groups and computer groups in tool of the coding of...

restrict the access to JIRA for specific pairs "user account - host"

to be able to restrict the access to JIRA for specific pairs "user account - host" also to provide: 1. specify checkbox user account - "any host" 2. specify multiple hosts for one user account 3. to use Windows AD containers such distribution groups and computer groups in tool of the coding of...

OpenX Ad Server Flaw Exploitable

A critical security flaw in current and older versions of the popular open source OpenX ad server allows attackers to remotely compromise a server. Read the full article. The H Security...

Ad Bard Network Cross Site Scripting

============================================================================== Ad Bard Networkadbard.net - network-wide Cross Site Scripting Vulnerability ============================================================================== 1. OVERVIEW A famous advertising network for free/open-source...

SmartASP Ad SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================= SmartASP Ad SQL Injection Vulnerability ======================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

CjwSoft Asp Banner Multiple Vulnerability

Exploit for asp platform in category web applications ========================================= CjwSoft Asp Banner Multiple Vulnerability ========================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ ...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Impact Software AdPeeps - Cross-Site Scripting HTML Injection

Impact Software AdPeeps - Cross-Site Scripting HTML Injection source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied inp...

Impact Software AdPeeps - Cross-Site Scripting / HTML Injection

source: https://www.securityfocus.com/bid/42071/info Impact Software Ad Peeps is prone to multiple cross-site scripting vulnerabilities and multiple HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in dynamically generated content...

ZeeAdbox 2.x - SQL Injection

ZeeAdbox 2.x - SQL Injection ======================================================= ZeeAdbox v2x SQL Injection Vulnerability ======================================================= Name : ZeeAdbox v2x -SQL iNj3cti0n Vulnerabilty Date : july 23,2010 Critical Level :VERY HIGH vendor URL :??...