5094 matches found
[SECURITY] Fedora 15 Update: mumble-1.2.3-2.fc15
Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...
Oracle fcgi-bin/echo Cross Site Scripting
Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...
XSS in Oracle default fcgi-bin/echo
Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...
nping-brute NSE Script
Performs brute force password auditing against an Nping Echo service. See for Echo Mode documentation. Script Arguments passdb, unpwdb.passlimit, unpwdb.timelimit, unpwdb.userlimit, userdb See the documentation for the unpwdb library. creds.service, creds.global See the documentation for the cred...
[ECHO_ADV_113$2010] BSI Hotel Booking System Admin Login Bypass Vulnerability
----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability ----------------------------------------------------------------------------------------- Author : K-159 Date : September, 22th 2010...
BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass
BSI Hotel Booking System Admin 1.42.0 - Authentication Bypass ----------------------------------------------------------------------------------------- ECHOADV113$2010 BSI Hotel Booking System Admin Login Bypass Vulnerability...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
DEBIAN-CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
Code injection
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
CVE-2010-2529
Unspecified vulnerability in ping.c in iputils 20020927, 20070202, 20071127, and 20100214 on Mandriva Linux allows remote attackers to cause a denial of service hang via a crafted echo response...
HAVECMS 2.0 Beta <= SQL Injection Vulnerability
Exploit for php platform in category web applications =============================================== HAVECMS 2.0 Beta = SQL Injection Vulnerability =============================================== Author: Aurel 666 Exploit Title: SQL Injection Vendor url:http://havecms.jember.info/ Indonesia...
Rogue Gateway Detection: Sender
This module send a series of TCP SYN and ICMP ECHO requests to each internal target host, spoofing the source address of an external system running the roguerecv module. This allows the system running the roguerecv module to determine what external IP a given internal system is using as its defau...
SuSE9 Security Update : SLES9-SP4: Security update for yast2-mail-server (YOU Patch Number 11602)
If you go to YaST -- Mail Server -- FetchMail and select add account window. While entering the password for the remote user, it shows the password. Now the password field echoes '', instead of plain text. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is...
CVE-2009-1683
The Telephony component in Apple iPhone OS 1.0 through 2.2.1 and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to cause a denial of service device reset via a crafted ICMP echo request, which triggers an assertion error related to a "logic issue."...
PT-2009-4167 · Apple · Ios +1
Name of the Vulnerable Software and Affected Versions: Apple iPhone OS versions 1.0 through 2.2.1 iPhone OS for iPod touch versions 1.1 through 2.2.1 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reset, via a crafted ICMP echo request. This is...
[ECHO_ADV_110$2009] Firefox (GNU/Linux version) <= 3.0.10 Denial Of Services
/ / | | / // / | | Y / | / / /| / / / / / / .OR.ID ECHOADV110$2009 -------------------------------------------------------------------------------- ECHOADV110$2009 Firefox GNU/Linux version = 3.0.10 Denial Of Services -------------------------------------------------------------------------------...
JBoss directory traversal
Directory traversal in echo/Echo...
[DSECRG-09-013] IBM WebSphere Application Server 7.0 Multiple XSS Vulnerabilities
Digital Security Research Group DSecRG Advisory DSECRG-09-013 !!! official advisory: !!! http://dsecrg.com/pages/vul/DSECRG-09-013.html Application: IBM WebSphere Application Server Versions Affected: 7.0 and 6.1 Vendor URL: http://www.ibm.com/websphere/ Bug: Multiple XSS Vulnerabilities Exploits...
NextApp Echo XML解析本地文件泄露漏洞
BUGTRAQ ID: 34060 Echo是用于构建基于Web应用的平台。 Echo引擎没有正确地过滤XML输入，所有发送给Echo框架的XML请求都是由JavaScript创建的并通过POST HTTP请求发送给服务器。以下是典型的请求示例： ---cut here--- client-message xmlns="http://www.nextapp.com/products/echo2/climsg" trans-id="3" focus="c25"message-part xmlns="" processor="EchoPropertyUpdate"property...
SEC Consult SA-20090305-0 :: NextApp Echo XML Injection Vulnerability
SEC Consult Security Advisory 20090305-0 ======================================================================== title: NextApp Echo XML Injection Vulnerability program: NextApp Echo vulnerable version: Echo2 2.1.1 homepage: http://echo.nextapp.com/site/echo2 found: Feb. 2008 by: Anonymous / SEC...