4880 matches found
Username upper case are not being restricted in some pages
Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...
Username upper case are not being restricted in some pages
Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...
Username upper case are not being restricted in some pages
Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...
[SECURITY] Fedora 7 Update: NetworkManager-0.6.5-3.fc7
NetworkManager attempts to keep an active network connection available at a ll times. It is intended only for the desktop use-case, and is not intended f or usage on servers. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using ...
mysql-server create database privilege escalation
MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...
Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Expl
Exploit for unknown platform in category remote exploits ==================================================================== Mercury Mail 4.0.1 LOGIN Remote IMAP Stack Buffer Overflow Exploit ==================================================================== !/usr/bin/perl...
Build not dead asp-Trojan-vulnerability warning-the black bar safety net
Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...
mysql-server create database privilege escalation
MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...
[Full-disclosure] "0day was the case that they gave me"
"Alla pisteua gia sena, Alla phantasomouna, Nomisa pos magapouses, Kai geliomouna. Alla pisteua gia sena, Alla phantasomouna, Nomisa pos magapouses, Kai geliomouna." http://www.com-winner.com/0daywasthecasethattheygaveme.pdf http://www.com-winner.com/Allapisteua.mp3...
Directory traversal
F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via 1 a trailing null byte, 2 multiple leading slashes, 3 Unicode encoding, 4 URL-encoded directory traversal or same-directory characters, or 5 upper case letters in the domain name...
CVE-2007-0187
F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via 1 a trailing null byte, 2 multiple leading slashes, 3 Unicode encoding, 4 URL-encoded directory traversal or same-directory characters, or 5 upper case letters in the domain name...
CVE-2006-6052
NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...
CVE-2006-6052
NetEpi Case Manager before 0.98 is affected by an information-disclosure vulnerability where authentication error messages differ for valid vs invalid usernames, enabling remote enumeration of valid usernames. The CVE details indicate a network-exposed issue with low attack complexity and partial...
CVE-2006-6052
NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...
FreeBSD : mysql -- database 'case-sensitive' privilege escalation (a0e92718-6603-11db-ab90-000e35fd8194)
Michal Prokopiuk reports a privilege escalation in MySQL. The vulnerability causes MySQL, when run on case-sensitive filesystems, to allow remote and local authenticated users to create or access a database when the database name differs only in case from a database for which they have permission...
CVE-2006-4226
MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...
[SA21506] MySQL Create Database Bypass and Privilege Escalation
---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...
Multiple MySQL security vulnerabilities
Privilege escalation with stored routine, privilege escalation with creating a database with the name different only in case from existing one...
CVE-2006-4110
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase or alternate case characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems...
CVE-2006-4110
Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase or alternate case characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems...