CVE-2009-1578

CVE-2009-1578 affects SquirrelMail < 1.4.18 and NaSMail

How employees evade IT security controls

Prior to January of 2007, I had very little exposure to the vast array of applications that employees use while at work. Sure, I used IM, webmail and listened to music online, but I was being paid to do a job, not entertain myself. After joining Palo Alto Networks, and analyzing 18 months worth o...

Formshield Captcha - Older Version vulnerable to replay attacks

Replay attack on CAPTCHA Libraries Summary A CAPTCHA implementation that we tested were found to be vulnerable to replay attacks. The attack is explained in detail for Formshield – A popular DOT NET CAPTCHA implementation. NOTE: We discovered this during a Black Box engagement with one of our...

Mandriva Linux Security Advisory : evolution (MDVSA-2008:063)

Ulf Harnhammar of Secunia Research discovered a format string flaw in how Evolution displayed encrypted mail content. If a user were to open a carefully crafted email message, arbitrary code could be executed with the permissions of the user running Evolution. The updated packages have been patch...

What's on the cover of that Verizon breach report?

Psst! Psst! Ryan here. Did you notice that all the text on the cover of Verizon’s 2009 data breach report pdf is selectable? A little birdie tells me that’s no coincidence. Encrypted message, etc. Even better, the report contains some obvious clues to decrypt. And something about cash prizes for...

Code injection

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain 1 application server configuration, 2 database server configuration including encrypted passwords...

CVE-2008-6706

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain 1 application server configuration, 2 database server configuration including encrypted passwords...

CVE-2008-6706

Multiple unspecified vulnerabilities in the Web management interface in Avaya SIP Enablement Services SES 3.x and 4.0, as used with Avaya Communication Manager 3.1.x, allow remote attackers to obtain 1 application server configuration, 2 database server configuration including encrypted passwords...

Mandriva Update for evolution MDVSA-2008:063 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDVSA-2008:063 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Ubuntu Update for evolution vulnerability USN-583-1

Ubuntu Update for Linux kernel vulnerabilities USN-583-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerability USN-583-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu Update for enigmail vulnerability USN-427-1

Ubuntu Update for Linux kernel vulnerabilities USN-427-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4271.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for enigmail vulnerability USN-427-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RedHat Update for evolution RHSA-2008:0177-01

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2008:0177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for evolution CESA-2008:0177 centos4 x86_64

Check for the Version of evolution OpenVAS Vulnerability Test CentOS Update for evolution CESA-2008:0177 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Fedora Update for pam_mount FEDORA-2008-7973

Check for the Version of pammount OpenVAS Vulnerability Test Fedora Update for pammount FEDORA-2008-7973 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for pam_mount FEDORA-2008-7976

Check for the Version of pammount OpenVAS Vulnerability Test Fedora Update for pammount FEDORA-2008-7976 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Cusci IronPort Encryption Appliance / PostX multiple security vulnerabilities

Unauthorized access to encrypted messages, unauthorized access to administration interface...

VUPlayer 2.49 - '.asx' Universal Local Buffer Overflow

VUPlayer 2.49 .ASX File Universal Local Buffer Overflow Exploit By:Encrypt3d.M!nd This is an exploit for this Proof of Concept: http://milw0rm.com/exploits/7709 very easy one : Well i've Sent this since the poc published but str0ke had a brain fart : Greetz:Str0keGod Bless You bro,-=Mizo=-,L!0N,E...

squirrelmail: session hijacking - secure flag not set for HTTPS-only cookies

Squirrelmail 1.4.15 does not set the secure flag for the session cookie in an https session, which can cause the cookie to be sent in http requests and make it easier for remote attackers to capture this cookie...

Access online decryption[PHP source code]-vulnerability warning-the black bar safety net

You can only decrypt 2 0 0 0 or 9 7 MDB file ? /site:/ /If reproduced please retain this information / /by:7jdg QQ:7 2 5 9 5 6 1 / $file=$FILES'uploadfile''tmpname'; $oldname =$FILES'uploadfile''name'; $ext =via strtolowersubstrstrrchr$oldname, '.', 1; if $file if $ext != "the mdb" echo "your pas...