CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

CVE-2012-0811

CVE-2012-0811 affects PostfixAdmin (postfixadmin) prior to 2.3.5. The vulnerability allows remote authenticated users to execute arbitrary SQL commands via the pw parameter to the pacrypt function when mysql_encrypt is configured, or via unspecified vectors used in backup.php-generated backups. I...

Cloak & Encrypt < 2.0 - Cross-Site Scripting (XSS)

The url-cloak-encrypt WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

CVE-2014-4563

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

CVE-2014-4563

Affected software : WordPress plugin URL Cloak & Encrypt (url-cloak-encrypt)

CVE-2014-4563: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in go.php in the URL Cloak & Encrypt url-cloak-encrypt plugin 2.0 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the url parameter...

NSHC Papyrus 2.0 - Heap Overflow Vulnerability

No description provided by source. !/usr/bin/python Title: NSHC Papyrus Heap Overflow Vulnerability Date: 13\08\2011 Author: wh1ant Software Link: http://file.atfile.com/ftp/data/03/PapyrusSetup.exe Version: 2.0 Tested On: windows XP SP3 South Korea / windows XP SP3 English VMware Workstation CVE...

Microsoft SQL Server 2000 Password Encrypt Procedure Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5014/info A buffer overflow vulnerability has been reported in SQL Server 2000. The vunerability is a result of an unchecked buffer when using the password encrypt procedure. This procedure is used by administrators to...

CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

CXF: UsernameTokens are sent in plaintext with a Symmetric EncryptBeforeSigning policy

It was discovered that UsernameTokens were sent in plain text by an Apache CXF client that used a Symmetric EncryptBeforeSigning password policy. A man-in-the-middle attacker could use this flaw to obtain the user name and password used by the client application using Apache CXF...

WordPress URL Cloak & Encrypt Plugin <= 2.0 - XSS

Because of this vulnerability in go.php, the attackers can inject arbitrary web script or HTML via the "url" parameter. Solution Update the plugin...

codeigniter -- multiple vulnerabilities

The CodeIgniter changelog reports: Security: The xorencode method in the Encrypt Class has been removed. The Encrypt Class now requires the Mcrypt extension to be installed. Security: The Session Library now uses HMAC authentication instead of a simple MD5 checksum...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...

CVE-2014-3842: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the iMember360 plugin 3.8.012 through 3.9.001 for WordPress allow remote attackers to inject arbitrary web script or HTML via the 1 decrypt or 2 encrypt parameter...

Code injection

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

CVE-2014-2319

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

CVE-2014-2319: Undefined Security Weakness

The Encrypt Files feature in ConeXware PowerArchiver before 14.02.05 uses legacy ZIP encryption even if the AES 256-bit selection is chosen, which makes it easier for context-dependent attackers to obtain sensitive information via a known-plaintext attack...

How to use PGP encryption with Mozilla Thunderbird Email client

In my last article, we have learnt that how to encrypt our Emails using Gnu Privacy Guard. Previously we used Microsoft Outlook as a desktop mail client and a GpgOL plugin to handle encryption decryption of our communication. Since Microsoft is a US-based company, that has to follow all the laws ...