940 matches found
Unfixed XSS vulnerability at www.ncsuretytech.com
Security researcher xylitol, has submitted on 24/05/2008 a cross-site-scripting XSS vulnerability affecting www.ncsuretytech.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/06/2008. It is current...
CVE-2008-1985
creationtimestamp| type| source ---|---|--- 2008-04-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31701 2009-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10427...
CenterIM <= 4.22.3 Remote Command Execution Vulnerability:
Application: CenterIM http://www.centerim.org/index.php/MainPage Versions: centerim = 4.22.3 OS: Linux Bug: Execution of shell commands Exploit: remote Date: 15 March 2008 Author: Brian Fonfara w00 eMail: [email protected] Web: newb.kicks-ass.net 1 Bug 2 Exploit ======= 1 Bug ======= Received...
BeContent 031 - id SQL Injection
BeContent 031 - id SQL Injection Founder By Cr@zyKing HackShow.Us BeContent v.031 id Remote Sql Vuln. Down : http://code.google.com/p/becontent/downloads/list?idmenu=9 Exploit: news.php?id=-3+union+select+1,concatws0x3a,username,password,3,4+from+users Greatz : Barakuda GraBBerZ team &...
Debian Security Advisory DSA 1333-1 (libcurl3-gnutls)
The remote host is missing an update to libcurl3-gnutls announced via advisory DSA 1333-1. OpenVAS Vulnerability Test $Id: deb13331.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1333-1 Authors: Thomas Reinke Copyright: Copyright c 2007 E-Soft Inc...
Ubuntu 6.06 LTS / 6.10 / 7.04 : curl vulnerability (USN-484-1)
It was discovered that the GnuTLS certificate verification methods implemented in Curl did not check for expiration and activation dates. When performing validations, tools using libcurl3-gnutls would incorrectly allow connections to sites using expired certificates. Note that Tenable Network...
curl TLS certificates spoofing
Certificate's activation adn expire dates are not checked if GnuTLS verification method is used...
[SECURITY] [DSA 1333-1] New libcurl3-gnutls packages fix certificate handling
------------------------------------------------------------------------ Debian Security Advisory DSA-1333 [email protected] http://www.debian.org/security/ Steve Kemp July 18th, 2007 - ------------------------------------------------------------------------ Package : libcurl3-gnutls...
USN-484-1: curl vulnerability
It was discovered that the GnuTLS certificate verification methods implemented in Curl did not check for expiration and activation dates. When performing validations, tools using libcurl3-gnutls would incorrectly allow connections to sites using expired certificates...
Ubuntu 4.10 / 5.04 / 5.10 : mailman vulnerabilities (USN-242-1)
Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...
USN-242-1: mailman vulnerabilities
Aliet Santiesteban Sifontes discovered a remote Denial of Service vulnerability in the attachment handler. An email with an attachment whose filename contained invalid UTF-8 characters caused mailman to crash. CVE-2005-3573 Mailman did not sufficiently verify the validity of email dates. Very lar...
[Full-disclosure] [USN-242-1] mailman vulnerabilities
=========================================================== Ubuntu Security Notice USN-242-1 January 16, 2006 mailman vulnerabilities CVE-2005-3573, CVE-2005-4153 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 4.10 Warty...
SSL/TLS: Certificate Expiry
The remote server SPDX-FileCopyrightText: 2005 George A. Theall Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.15901";...
CVE-2005-2506
CVE-2005-2506 describes an algorithmic complexity vulnerability in CoreFoundation on Mac OS X 10.3.9 and 10.4.2. The issue arises in the handling of crafted Gregorian dates, allowing an attacker to trigger excessive CPU usage and cause a denial of service. The affected component is CoreFoundation...
CVE-2005-2506
Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service CPU consumption via crafted Gregorian dates...
CVE-2005-2506
Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service CPU consumption via crafted Gregorian dates...
CVE-2005-2506: Undefined Security Weakness
Algorithmic complexity vulnerability in CoreFoundation in Mac OS X 10.3.9 and 10.4.2 allows attackers to cause a denial of service CPU consumption via crafted Gregorian dates...
FreeBSD-SA-03:02.openssl
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================= FreeBSD-SA-03:02.openssl Security Advisory The FreeBSD Project Topic: OpenSSL timing-based SSL/TLS attack Category: core Module: openssl Announced: 2003-02-25 Credits: Brice...
