ReBB 1.0 - Image Tag Cross-Agent Scripting

source: https://www.securityfocus.com/bid/4220/info ReBB is web forum software which will run on most Unix and Linux variants, as well as Microsoft Windows operating systems. It is written in PHP and may be back-ended by a number of databases. ReBB allows users to include images in forum messages...

IkonBoard 2.173.03.1 - Image Tag Cross-Agent Scripting

IkonBoard 2.173.03.1 - Image Tag Cross-Agent Scripting source: https://www.securityfocus.com/bid/4182/info Ikonboard is a Web Bulletin Board Service BBS software package written in Perl which runs on Unix and Linux variants. Ikonboard allows users to include images in forum messages using image...

DeleGate 7.7.1 - Cross-Site Scripting

source: https://www.securityfocus.com/bid/3749/info DeleGate is a proxy server which runs on Linux , Unix, Microsoft Windows and OS/2 platforms. It is capable of translating a number of protocolsHTTP, FTP, NNTP, POP, Telnet, etc. between client and server. DeleGate is prone to cross-site scriptin...

CVE-2001-0884

Cross-site scripting vulnerability in Mailman email archiver before 2.08 allows attackers to obtain sensitive information or authentication credentials via a malicious link that is accessed by other web users...

CVE-2001-0003

Web Extender Client WEC in Microsoft Office 2000, Windows 2000, and Windows Me does not properly process Internet Explorer security settings for NTLM authentication, which allows attackers to obtain NTLM credentials and possibly obtain the password, aka the "Web Client NTLM Authentication"...

CVE-1999-0248

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...

CVE-1999-0248

The CVE-1999-0248 entry concerns sshd 1.2.17, where a race condition in the authentication agent mechanism can allow an attacker to steal another user’s credentials. The vulnerability is documented across multiple sources (NVD, Red Hat, CVE List, EUVD) without providing explicit exploit code or c...

Security Bulletin (MS00-076)

Microsoft Security Bulletin MS00-076 - -------------------------------------- Patch Available for "Cached Web Credentials" Vulnerability Originally posted: October 12, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Internet Explorer. Und...

Security Bulletin (MS00-067)

Microsoft Security Bulletin MS00-067 - --------------------------------------- Patch Available for "Windows 2000 Telnet Client NTLM Authentication" Vulnerability Originally posted: September 14, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in the...

Nokia 7110 Wap Browser Hole

Ok, so this may be slighly off topic for this forum, but I though id post it anyway. The nokia 7110 wap browser will happily pass form varibles that were entered once to another site later on in the same session? Not sure how long it stores them for The problem is that the Nokia recognises forms...

CVE-1999-0248

A race condition in the authentication agent mechanism of sshd 1.2.17 allows an attacker to steal another user's credentials...

PT-1998-1010 · Openssh · Openssh

Name of the Vulnerable Software and Affected Versions: OpenSSH affected versions not specified Description: The issue allows stolen credentials from SSH clients via the ssh-agent program. This enables other local users to access remote accounts belonging to the ssh-agent user. Recommendations: At...