6315 matches found
SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6563)
This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues : - Mozilla developers and community members...
E-Xoopport Samsara 3.1 (eCal Module) - Blind SQL Injection
!/usr/bin/perl 0-Day E-Xoopport - Samsara \r\n"; exit; my $host = $ARGV0; my $usr = $ARGV1; my $pwd = $ARGV2; my $anickde = $ARGV3; my $anick = '0x'.EncHex$anickde; print "! Logging In...\r\n"; my %postdata = uname = "$usr", pass = "$pwd", op = "login" ; my $cookies = HTTP::Cookies-new autosave =...
Novell PlateSpin Orchestrate shell characters vulnerability
Shell characters vulnerability on graphs rendering...
Microsoft full system, The establishment of hidden accounts vulnerability-vulnerability warning-the black bar safety net
Publishing author: onlyguest Affected version: Microsoft series Official address: www.microsft.com Vulnerability type: design error Vulnerability Description: by special characters, the establishment of hidden accounts. The command line interface is not displayed,the user management panel in the...
smbind 0.4.7 - SQL Injection
smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password field: anything Sql query will result like this: SELECT ID FROM users WHERE username = 'admin'; ' A...
Joomla Lesson SQL Injection
Joomla Component lesson SQL Injection Vulnerability Author : Fl0riX Bug Researchers Greez: Sakkure-Kedesign And All My Friends Name : Joomla Comlesson Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Demo Vuln : http://www.musiccomm.com/index.php?option=comlesson&id=EXPLOIT...
CVE-2010-2813
functions/imapgeneral.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to the creation of many preferences file...
Design/Logic Flaw
functions/imapgeneral.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to the creation of many preferences file...
CVE-2010-2813
functions/imapgeneral.php in SquirrelMail before 1.4.21 does not properly handle 8-bit characters in passwords, which allows remote attackers to cause a denial of service disk consumption by making many IMAP login attempts with different usernames, leading to the creation of many preferences file...
Suspicious Characters in FTP User Name (CVE-2009-0542; CVE-2010-2453)
File Transfer Protocol is a popular protocol. FTP server may ask connecting users for their usernames and passwords. While the official FTP specification allows all characters in user names certain FTP servers fail to properly parse FTP usernames that contain special characters, most notably...
Short Passwords Open To Brute Force Attacks
A password of less than seven characters will soon be “hopelessly inadequate” even if it contains symbols as well as alphanumerical characters, according to computer scientists at the Georgia Tech Research Institute. Read the full article. The Register...
JaMP Player 4.2.2.0 - Denial of Service
JaMP Player 4.2.2.0 - Denial of Service Exploit Title: JaMP Player v4.2.2.0 .m3u DoS Date: 12 / 8 / 2010 Author: Oh Yaw Theng Software Link: http://www.topdownloads.net/software/jamp-player2219088.html?hl=&ia=0 Version: v4.2.2.0 Tested on: Windows XP SP 2 CVE : N / A !/usr/bin/python filename =...
tomcat handling of cookie values
Apache Tomcat 6.0.0 to 6.0.13, 5.5.0 to 5.5.24, 5.0.0 to 5.0.30, 4.1.0 to 4.1.36, and 3.3 to 3.3.2 does not properly handle the " character sequence in a cookie value, which might cause sensitive information such as session IDs to be leaked to remote attackers and enable session hijacking attacks...
CGI Generic On Site Request Forgery (OSRF)
The remote web server hosts CGI scripts that fail to adequately sanitize request strings with special characters like dots, slashes, backslashes, equal signs, question marks, etc. By leveraging this issue, an attacker may be able to cause arbitrary GET requests to be executed by a user when he...
CentOS 4 / 5 : firefox (CESA-2010:0547)
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings...
openSUSE Security Update : w3m (openSUSE-SU-2010:0393-1)
w3m did not handle embedded nul characters in the common name and in subject alternative names of x509 certificates. CVE-2010-2074 has been assigned to this issue. This update also turns on verification of x509 certificates by default which was not the case before. %NASLMINLEVEL 70300 C Tenable...
Moderate: Red Hat Security Advisory: openldap security update
Updated openldap packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...
McAfee VirusScan On-Access Scanner Long Filename Handling Buffer Overflow
McAfee Corporation is a major vendor of numerous anti-virus, network, and desktop security products which are deployed in consumer as well as enterprise environments. McAfee VirusScan is an AntiVirus application that offers protection against the latest computer virus threats. McAfee VirusScan...