4098 matches found
DEBIAN-CVE-2010-0562
The sdump function in sdump.c in fetchmail 6.3.11, 6.3.12, and 6.3.13, when running in verbose mode on platforms for which char is signed, allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an SSL X.509 certificate containing non-printabl...
Advisory: jBCrypt < 0.3 character encoding vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 jBCrypt security advisory ========================= jBCrypt is a Java implementation of OpenBSD's Blowfish password hashing algorithm, as described in "A Future-Adaptable Password Scheme" by Niels Provos and David Mazieres USENIX, 1999. Versions of...
Sendmail SSL certificate spoofing
It's possible to spoof SSL certificate by using NULL character in CN...
Ruby: Terminal Control Character Injection
Background Ruby is an interpreted scripting language for quick and easy object-oriented programming. It comes bundled with a HTTP server "WEBrick". Description Giovanni Pellerano, Alessandro Tanasi and Francesco Ongaro reported that WEBrick does not filter terminal control characters, for instanc...
CiviCRM 3.1 < Beta 5 - Multiple Cross-Site Scripting Vulnerabilities
Author: h00die [email protected] & Ch3nz [email protected] Software Link: http://sourceforge.net/projects/civicrm/files/civicrm-latest/3.1.beta1/civicrm-3.1.beta1-standalone.tar.gz/download Version: and from being in the same input box. In several cases it is possible to use multiple input boxes th...
CentOS 5 : kernel (CESA-2008:0957)
Updated kernel packages that resolve several security issues and fix various bugs are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. Updated 12th November 2008 The original packages distributed wi...
Joomla! Component com_kk - Blind SQL Injection
Joomla Component comkk Blind SQL Injection Vulnerability Author : Pyske | Bug Researchers Name : comkk Bug Type : Blind SQL Injection Infection : Admin login bilgileri alinabilir. Demo Vuln. : TRUE+ http://localhost/index.php?option=comkk&kat=1 and 1=1 FALSE-...
Sendmail Update Patches Memory Leak Flaws
Version 8.14.4 of Sendmail, the open source mail transfer agent MTA, includes fixes for several security vulnerabilities including some integer overflows, memory leaks and for the SSL NUL character problem disclosed in mid 2009. Read the full article. The H Security...
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
Joomla Airmonoblock Blind SQL Injection
Joomla Component comairmonoblock Blind SQL Injection Vulnerability Author : Pyske Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A and All Cyber-Warrior Name : comairmonoblock Bug Type : Blind SQL Injection Infection : Admin login bilgileri al?nabilir. Demo Vuln. : TRUE+...
Joomla WebcamXP Cross Site Scripting
Joomla Component comwebcamxp Cross Site Scripting Vulnerabilities Author : Pyske Name : comwebcamxp Home : www.cyber-warrior.org Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R and ALL Cyber-Warrior Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice :...
Joomla TP Jobs SQL Injection
Joomla Component comtpjobs Blind SQL injection Vulnerability author : FL0RiX Name : comtpjobs Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : TRUE+ » http://www.netchimera.com/index.php?option=comtpjobs&task=resadvsearch&keyword=&idc=1 and 1=1 FALSE- »...
Mandriva Security Advisory MDVSA-2009:189-1 (apache-mod_auth_mysql)
The remote host is missing an update to apache-modauthmysql announced via advisory MDVSA-2009:189-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Mozilla Firefox
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows?remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...
Joomla! Component FacileForms - Cross-Site Scripting
Joomla Component comfacileforms Cross Site Scripting Vulnerabilities Author : Pyske Greetz : Fl0riX , M-K-A , F0RTS3V3N , 3KB3R ,BARCOD3 and ALL Cyber-Warrior Name : comfacileforms Bug Type : Cross Site Scripting Infection : Yönetici ve User cookiekleri calinabilir. Bug Fix Advice : Zararl...
Joomla Carman Cross Site Scripting
Joomla Component comcarman Cross Site Scripting Vulnerability author :Fl0riX Greetz : BARCOD3 , Septemb0x, Deep-Power,DreamPower,Pyske,3kb3r Name : comcarman Bug Type : Cross Site Scripting Infection : Yönetici ve User cookieleri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir...
PHP 5.2.4 money_format 存在字符检查不严格
No description provided by source...
CVE-2009-4142
The htmlspecialchars function in PHP before 5.2.12 does not properly handle 1 overlong UTF-8 sequences, 2 invalid ShiftJIS sequences, and 3 invalid EUC-JP sequences, which allows remote attackers to conduct cross-site scripting XSS attacks by placing a crafted byte sequence before a special...