Snort 2.4.x - URIContent Rules Detection Evasion

source: https://www.securityfocus.com/bid/18200/info Snort is reportedly prone to a vulnerability that may allow malicious packets to bypass detection. A successful attack can allow attackers to bypass intrusion detection and to carry out attacks against computers protected by Snort. This...

Design/Logic Flaw

Unspecified vulnerability in Mac OS X before 10.4.6, when running on an Intel-based computer, allows attackers with physical access to bypass the firmware password and log on in Single User Mode via unspecified vectors...

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass

Check Point VPN-1 SecureClient 4.0 4.1 - Policy Bypass source: https://www.securityfocus.com/bid/15757/info VPN-1 SecureClient is reported prone to a policy bypass vulnerability. This issue is due to a failure of the application to securely implement remote administrator-provided policies on...

Biz Mail Form 2.x - Unauthorized Mail Relay

source: https://www.securityfocus.com/bid/12620/info Biz Mail Form is prone to a vulnerability that allows the application to be abused as a mail relay. An attacker can exploit this issue to inject arbitrary SMTP headers by using CR and LF sequences. If successful, it becomes possible to abuse th...

Microsoft Windows COM Structured Storage Local Privilege Escalation Vulnerability

Description Microsoft Windows is reported prone to a local privilege escalation vulnerability when processing COM structured storage files. This issue may allow a local attacker to gain elevated privileges on a vulnerable computer. An attacker with local interactive access may craft an applicatio...

Vulnerabilities In Pablo Software Solutions FTP Service 1.2

Plaintext Password Vulnerability ------------------------------------ User info is stored in users.dat in plaintext. If the anonymous account is present it is by default the entire FTP server can be compromised ftp://somewhere/program files/pablo's ftp service/users.dat Default Anonymous Account...

PAFileDB SQL Injection Vulnerability & Ratings Cheat Fix

I recently found out that someone I knew was running this vuln application. After informing them it was vuln they were dissapointed at the fact that they could no longer use the program as the author has not supplied a fix. Anyway, here is a quick fix i threw together to take care of the problem...

Invision Power Board Plaintext Password Disclosure Vuln

Invision Power Board Plaintext Password Disclosure Vuln ------------------------------------------------------- Version: All? Problem: Invision Power Board gives an admin the option to create a pass protected forum. The problem with this is that the password is then stored in the cookie fully...

IE bookmark 'clever' feature not so clever after all

short: type the name of one of your bookmarksfavorites in the addressfield in IE, and IE will execute the bookmark. bit longer: its trivial to trick a user into accepting a bookmark for a popular site, uh, lets say www.hotmail.com .. or placing it yourself. effect: users wont be able to access...

Дырка в AOL Instant Messenger

При некоторых условиях на компьютере клиента может быть выполнен Javascript/VBScript...

SystemWizard Launch ActiveX Control lacks authentication

Overview Description The SystemWizard "Launch" ActiveX Control may allow attackers to execute arbitrary commands on systems where the control is installed. This control was shipped on HP Pavilion computers running Windows 98, as part of a diagnostic application named "SystemWizard" produced by...

SystemWizard Registry Object ActiveX Control lacks authentication

Overview Description The SystemWizard "Registry Object" ActiveX Control may allow attackers to modify the registry on systems where the control is installed. This control was shipped on HP Pavilion computers running Windows 98, as part of a diagnostic application named "SystemWizard" produced by...

Linux news 8.04.00

Atipa начнет выпуск Linux-компьютеров на базе процессоров Alpha В настоящее время львиная доля Linux-компьютеров работает на базе процессоров Intel. Желая несколько изменить сложившуюся ситуацию, компания Atipa объявила о своем намерении продвигать на рынок Linux-компьютеры на базе процессоров...

2019-02 Cumulative Update for Windows 10 Version 1703 for x86-based Systems (KB4487011)

2019-02 Cumulative Update for Windows 10 Version 1703 for x86-based Systems KB4487011...

Windows Vista

Windows Vista...

329170: Security Update

A security vulnerability has been identified that could allow an attacker to disrupt a facility by which security settings are applied to Windows-based computers in a corporate network. This could allow the attacker to loosen settings on his or her own computer or impose tighter ones on someone...