CVE-2008-3028

Multiple cross-site scripting XSS vulnerabilities in the Send-A-Card srsendcard extension 2.2.2 and earlier for TYPO3 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2008-3028

CVE-2008-3028 affects the TYPO3 Send-A-Card extension (sr_sendcard) 2.2.2 and earlier. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. The documents identify TYPO3 extension as the affected ...

Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Vulnerability in Cisco IOS with OSPF, MPLS VPN, and Supervisor 32, Supervisor 720, or Route Switch Processor 720 Advisory ID: cisco-sa-20080326-queue http://www.cisco.com/warp/public/707/cisco-sa-20080326-queue.shtml Revision...

[SECURITY] Fedora 8 Update: kvm-60-2.fc8

KVM for Kernel-based Virtual Machine is a full virtualization solution for Linux on x86 hardware. Using KVM, one can run multiple virtual machines running unmodified Linux or Windows images. Each virtual machine has private virtualized hardware: a network card, disk, graphics adapter, etc...

Dell Remote Access Card DoS

nmap scan causes SSH service to crash...

Debian Security Advisory DSA 336-1 (kernel-source-2.2.20, kernel-image-2.2.20-i386)

The remote host is missing an update to kernel-source-2.2.20, kernel-image-2.2.20-i386 announced via advisory DSA 336-1. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Cell Phone Signal hijacking-vulnerability warning-the black bar safety net

Interesting article, this concept has long been proposed, but very few people described so fine. And to be able to implement the“attacker”requirements, high. GSM in the one-way authentication issues in 3G（WCDMA network will be overwritten, since the certification no longer is a 3-tuple, but the...

RHEL 5 : coolkey (RHSA-2007:0631)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2007:0631 advisory. coolkey contains the driver support for the CoolKey and Common Access Card CAC Smart Card products. The CAC is used by the U.S. Government. Steve Gru...

Low: Red Hat Security Advisory: coolkey security and bug fix update

Updated coolkey packages that fix a security issue and various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having low security impact by the Red Hat Security Response Team. coolkey contains the driver support for the CoolKey and Common Access Card CAC Smar...

Fedora 7 : xen-3.1.0-6.fc7 (2007-2270)

Fixes a security flaw in pygrub handling of config files and a denial-of-service case in ne2k NIC for QEMU. Fixes the case of disappearing network cards in fully-virtualized guests. NB, it only fixes it for guests created after this errata is installed & XenD restarted. Any pre-existing guests ma...

Unfixed XSS vulnerability at www.albatoul.net

Security researcher S0m.ph, has submitted on 29/10/2007 a cross-site-scripting XSS vulnerability affecting www.albatoul.net, which at the time of submission ranked 118912 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is current...

SuSE Security Update: Kernel Update for SUSE Linux 10.1 (kernel-4193)

This kernel update brings the kernel to the one shipped with SLES 10 Service Pack 1 and also fixes the following security problems: - CVE-2007-2242: The IPv6 protocol allows remote attackers to cause a denial of service via crafted IPv6 type 0 route headers IPV6RTHDRTYPE0 that create network...

openSUSE 10 Security Update : kernel (kernel-4487)

This kernel update fixes the following security problems : - CVE-2007-3105: Stack-based buffer overflow in the random number generator RNG implementation in the Linux kernel before 2.6.22 might allow local root users to cause a denial of service or gain privileges by setting the default wake-up...

Cart32 Arbitrary File Download Vulnerability

======================================================================== = Cart32 Arbitrary File Download Vulnerability = = Vendor Website: = http://www.cart32.com = = Affected Version: = -- All releases prior to and including v6.3 = = Public disclosure on Thursday 4th October 2007 =...

CVE-2007-4360

Unspecified vulnerability in Dell Remote Access Card 4 DRAC4 with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service SSH daemon crash via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana Mocanada SSH vulnerabili...

Design/Logic Flaw

Unspecified vulnerability in Dell Remote Access Card 4 DRAC4 with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service SSH daemon crash via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana Mocanada SSH vulnerabili...

CVE-2007-4360

Unspecified vulnerability in Dell Remote Access Card 4 DRAC4 with firmware 1.50 Build 02.16 allows remote attackers to cause a denial of service SSH daemon crash via certain network traffic, as demonstrated by an "nmap -O" scan with nmap 4.03, possibly related to a Mocana Mocanada SSH vulnerabili...

A few words on the card bar active Defense-vulnerability warning-the black bar safety net

Private Sub FormLoad Date = Date - 5 0 0 0 End Sub Private Sub Timer1timer Procedure Date = Date + 5 0 0 0 End End Sub Very simple few words,the timer is set for 1 5 seconds! Run the program date by the correct date minus 5 0 0 0 day,and then after 1 after 5 seconds and plus 5 0 0 0 day! Restore...

Sql injection

SQL injection vulnerability in login.asp in CodeWidgets Pay Roll - Time Sheet and Punch Card Application With Web Interface allows remote attackers to execute arbitrary SQL commands via the Password parameter...

payroll-sql.txt

A R I A - S E C U R I T Y Pay Roll - Time Sheet and Punch Card Application With Web Interface SQL Injection Vendor: http://www.codewidgets.com http://target.com/PATH/login.asp Username: admin Password: anything' OR 'x'='x Credits: Aria-Security Team http://aria-security.net...