Lucene search
+L

4880 matches found

Atlassian
Atlassian
added 2007/10/22 6:2 a.m.24 views

Username upper case are not being restricted in some pages

Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...

3.1AI score
SaveExploits0Affected Software1
Atlassian
Atlassian
added 2007/10/22 6:2 a.m.24 views

Username upper case are not being restricted in some pages

Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...

3.1AI score
SaveExploits0
Atlassian
Atlassian
added 2007/10/22 6:2 a.m.22 views

Username upper case are not being restricted in some pages

Username must be created in lowercase in JIRA. At the moment, JIRA allows the username with the lowercase or uppercase letter in Login and Add Watcher pages. It should restrict the case-sensitive when the username is request from the login page or convert it to lower case. JIRA should have this...

3.1AI score
SaveExploits0Affected Software1
Fedora
Fedora
added 2007/06/04 11:51 p.m.17 views

[SECURITY] Fedora 7 Update: NetworkManager-0.6.5-3.fc7

NetworkManager attempts to keep an active network connection available at a ll times. It is intended only for the desktop use-case, and is not intended f or usage on servers. The point of NetworkManager is to make networking configuration and setup as painless and automatic as possible. If using ...

2.4AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/04/03 6:58 p.m.4 views

mysql-server create database privilege escalation

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...

3.6CVSS7.3AI score0.02809EPSS
SaveExploits1References4
zdt
zdt
added 2007/03/24 12:0 a.m.18 views

Mercury Mail 4.0.1 (LOGIN) Remote IMAP Stack Buffer Overflow Expl

Exploit for unknown platform in category remote exploits ==================================================================== Mercury Mail 4.0.1 LOGIN Remote IMAP Stack Buffer Overflow Exploit ==================================================================== !/usr/bin/perl...

7.1AI score
SaveExploits0
myhack58
myhack58
added 2007/03/22 12:0 a.m.24 views

Build not dead asp-Trojan-vulnerability warning-the black bar safety net

Author: black memory This article has been published in the hacker X-Files magazine tenth copyright of the hackers X-Files on all reproduced please specify the copyright Unexpected, a few days ago I discovered that I worked extremely hard to collect the asp Trojan, and actually not a few not to b...

7.1AI score
SaveExploits0
RedHat Linux
RedHat Linux
added 2007/02/19 7:41 p.m.9 views

mysql-server create database privilege escalation

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...

3.6CVSS7.5AI score0.02809EPSS
SaveExploits1References4
securityvulns
securityvulns
added 2007/02/11 12:0 a.m.48 views

[Full-disclosure] "0day was the case that they gave me"

"Alla pisteua gia sena, Alla phantasomouna, Nomisa pos magapouses, Kai geliomouna. Alla pisteua gia sena, Alla phantasomouna, Nomisa pos magapouses, Kai geliomouna." http://www.com-winner.com/0daywasthecasethattheygaveme.pdf http://www.com-winner.com/Allapisteua.mp3...

0.5AI score
SaveExploits0
Prion
Prion
added 2007/01/12 5:4 a.m.24 views

Directory traversal

F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via 1 a trailing null byte, 2 multiple leading slashes, 3 Unicode encoding, 4 URL-encoded directory traversal or same-directory characters, or 5 upper case letters in the domain name...

7.5CVSS7.2AI score0.03618EPSS
SaveExploits0References9Affected Software1
Cvelist
Cvelist
added 2007/01/11 2:0 a.m.39 views

CVE-2007-0187

F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via 1 a trailing null byte, 2 multiple leading slashes, 3 Unicode encoding, 4 URL-encoded directory traversal or same-directory characters, or 5 upper case letters in the domain name...

6.7AI score0.03618EPSS
SaveExploits0References9
NVD
NVD
added 2006/11/22 12:7 a.m.14 views

CVE-2006-6052

NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...

5CVSS6.7AI score0.01267EPSS
SaveExploits0References3
CVE
CVE
added 2006/11/22 12:0 a.m.37 views

CVE-2006-6052

NetEpi Case Manager before 0.98 is affected by an information-disclosure vulnerability where authentication error messages differ for valid vs invalid usernames, enabling remote enumeration of valid usernames. The CVE details indicate a network-exposed issue with low attack complexity and partial...

5CVSS7.1AI score0.01267EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2006/11/22 12:0 a.m.23 views

CVE-2006-6052

NetEpi Case Manager before 0.98 generates different error messages depending on whether or not a username is valid, which allows remote attackers to enumerate valid usernames...

6.7AI score0.01267EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2006/10/30 12:0 a.m.56 views

FreeBSD : mysql -- database 'case-sensitive' privilege escalation (a0e92718-6603-11db-ab90-000e35fd8194)

Michal Prokopiuk reports a privilege escalation in MySQL. The vulnerability causes MySQL, when run on case-sensitive filesystems, to allow remote and local authenticated users to create or access a database when the database name differs only in case from a database for which they have permission...

3.6CVSS8.1AI score0.02809EPSS
SaveExploits1References3
UbuntuCve
UbuntuCve
added 2006/08/18 8:4 p.m.32 views

CVE-2006-4226

MySQL before 4.1.21, 5.0 before 5.0.25, and 5.1 before 5.1.12, when run on case-sensitive filesystems, allows remote authenticated users to create or access a database when the database name differs only in case from a database for which they have permissions...

3.6CVSS7.2AI score0.02809EPSS
SaveExploits1References1
securityvulns
securityvulns
added 2006/08/17 12:0 a.m.42 views

[SA21506] MySQL Create Database Bypass and Privilege Escalation

---------------------------------------------------------------------- Hardcore Disassembler / Reverse Engineer Wanted! Want to work with IDA and BinDiff? Want to write PoC's and Exploits? Your nationality is not important. We will get you a work permit, find an apartment, and offer a relocation...

2AI score
SaveExploits0
securityvulns
securityvulns
added 2006/08/17 12:0 a.m.37 views

Multiple MySQL security vulnerabilities

Privilege escalation with stored routine, privilege escalation with creating a database with the name different only in case from existing one...

2.8AI score
SaveExploits0References1Affected Software1
NVD
NVD
added 2006/08/14 8:4 p.m.22 views

CVE-2006-4110

Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase or alternate case characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems...

4.3CVSS6.8AI score0.3938EPSS
SaveExploits2References8
Debian CVE
Debian CVE
added 2006/08/14 8:0 p.m.46 views

CVE-2006-4110

Apache 2.2.2, when running on Windows, allows remote attackers to read source code of CGI programs via a request that contains uppercase or alternate case characters that bypass the case-sensitive ScriptAlias directive, but allow access to the file on case-insensitive file systems...

4.3CVSS6.5AI score0.3938EPSS
SaveExploits2
Rows per page
Query Builder