CVE-2012-0041: Improper Input Validation

The dissectpacket function in epan/packet.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a long packet in a capture file, as demonstrated by an airopeek file...

PT-2012-2273

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by providing a Novell capture fi...

CVE-2012-0068: Improper Input Validation

The lanalyzerread function in wiretap/lanalyzer.c in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash via a Novell capture file containing a record that is too small...

Fedora Update for ksnapshot FEDORA-2011-13417

Check for the Version of ksnapshot OpenVAS Vulnerability Test Fedora Update for ksnapshot FEDORA-2011-13417 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for wireshark FEDORA-2011-15290

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-15290 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Fedora Update for wireshark FEDORA-2011-12399

Check for the Version of wireshark OpenVAS Vulnerability Test Fedora Update for wireshark FEDORA-2011-12399 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Design/Logic Flaw

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

UBUNTU-CVE-2012-0647

WebKit in Apple Safari before 5.1.4 does not properly handle redirects in conjunction with HTTP authentication, which might allow remote web servers to capture credentials by logging the Authorization HTTP header...

PT-2012-2755

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 5.1.4 Description The issue is related to how WebKit in Apple Safari handles redirects in conjunction with HTTP authentication. This might allow remote web servers to capture credentials by logging the...

The Nose Knows

Researchers at Bath University have unveiled a system where noses, not fingerprints or irises, could be scanned and used for biometric authentication. Using a system called PhotoFace, first developed at the University of the West of England Bristol and Imperial College London, individuals had...

rpcap-brute NSE Script

Performs brute force password auditing against the WinPcap Remote Capture Daemon rpcap. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the creds library...

PT-2012-2259

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.10 Wireshark versions 1.6.x through 1.6.4 Description The issue allows remote attackers to cause a denial of service, resulting in an application crash, by sending a long packet in a capture file. This can ...

Lead Capture Page System 'message' Parameter Cross Site Scripting Vulnerability

Lead Capture Page System is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-0932

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2012-0932

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

CVE-2012-0932

CVE-2012-0932 concerns a cross-site scripting (XSS) vulnerability in Lead Capture Page System’s admin/login.php, exploitable via the message parameter. The issue allows remote attackers to inject arbitrary web script or HTML, as documented in multiple sources (NVD, OpenVAS, CVE listings). The rel...

CVE-2012-0932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in admin/login.php in Lead Capture Page System allows remote attackers to inject arbitrary web script or HTML via the message parameter...

PT-2012-2959

Name of the Vulnerable Software and Affected Versions Lead Capture Page System affected versions not specified Description The issue is related to a cross-site scripting XSS vulnerability. This vulnerability allows remote attackers to inject arbitrary web script or HTML via the message parameter ...