3464 matches found
DSA-1030-1 moodle - several
Bulletin has no description...
Design/Logic Flaw
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...
CVE-2006-0147
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...
CVE-2006-0147
The CVE-2006-0147 issue is a dynamic code evaluation vulnerability in ADOdb for PHP (tests/tmssql.php) prior to version 4.70, permitting remote attackers to execute arbitrary PHP functions via the do parameter (demonstrated with phpinfo). It affects multiple products that vendor-integrate ADOdb, ...
CVE-2006-0147: Undefined Security Weakness
Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including 1 Mantis, 2 PostNuke, 3 Moodle, 4 Cacti, 5 Xaraya, 6 PhpOpenChat, possibly 7 MAXdev MD-Pro, and 8 Simplog, allows remote attackers to execute arbitrary PHP...
Section network viagra intrusion detection system technology think-vulnerability warning-the black bar safety net
With the rapid development of Internet, the network security more and more by governments, businesses, and even personal attention. In the past, prevent network attacks the most common method is the firewall. However, relying solely on a firewall does not guarantee sufficient security, if the...
security flaw
Firefox 1.0.6 allows attackers to cause a denial of service crash via a Proxy Auto-Config PAC script that uses an eval statement. NOTE: it is not clear whether an untrusted party has any role in triggering this issue, so it might not be a vulnerability...
pear-XML_RPC -- remote PHP code injection vulnerability
A Hardened-PHP Project Security Advisory reports: When the library parses XMLRPC requests/responses, it constructs a string of PHP code, that is later evaluated. This means any failure to properly handle the construction of this string can result in arbitrary execution of PHP code. This new...
CVE-2005-1921
CVE-2005-1921 is a remote PHP code execution vulnerability in PEAR XML_RPC (<=1.3.0) and PHPXMLRPC (
FutureSoft TFTP Server 2000 Remote Denial of Service Exploit
Exploit for unknown platform in category dos / poc ============================================================ FutureSoft TFTP Server 2000 Remote Denial of Service Exploit ============================================================ / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit...
FutureSoft TFTP Server 2000 - Remote Denial of Service
FutureSoft TFTP Server 2000 - Remote Denial of Service / FutureSoft TFTP Server 2000 Remote Denial of Service Exploit http://www.futuresoft.com/products/lit-tftp2000.htm Bug Discovered by SIG^2 http://www.security.org.sg Exploit coded By ATmaCA Web: atmacasoft.com && spyinstructors.com E-Mail:...
CVE-2005-1813: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in FutureSoft TFTP Server Evaluation Version 1.0.0.1 allows remote attackers to read arbitrary files via a TFTP GET request containing 1 "../" dot dot slash or 2 ".." dot dot backslash sequences...
Microsoft Internet Explorer does not properly validate source of URL stored in Travel Log
Overview Microsoft Internet Explorer IE does not properly determine the source of script used in URLs stored in the "Travel Log." An attacker could exploit this vulnerability to evaluate script in different security domains. By causing script to be evaluated in the Local Machine Zone, the attacke...
CERT Advisory CA-2003-22 Multiple Vulnerabilities in Microsoft Internet Explorer
-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2003-22 Multiple Vulnerabilities in Microsoft Internet Explorer Original issue date: August 26, 2003 Last revised: -- Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Microsoft Windows systems running...
CVE-2001-0586: Undefined Security Weakness
TrendMicro ScanMail for Exchange 3.5 Evaluation allows a local attacker to recover the administrative credentials for ScanMail via a combination of unprotected registry keys and weakly encrypted passwords...
Extracting a 3DES key from an IBM 4758
Extracting a 3DES key from an IBM 4758 The IBM 4758 is an extremely secure crytographic co-processor. It is used by banking systems and in other security conscious applications to hold keying material. It is designed to make it impossible to extract this keying material unless you have the correc...
Linux news 4.11.00
Linux 2.4 Todo Вышла новая редакция текста Linux 2.4 Todo - списка того, чего должно быть сделано до выхода новой серии стабильных ядер - Linux 2.4. Эта редакция соответствует ядру Linux 2.4.0test10. Подробнее: http://linuxtoday.com/newsstory.php3?ltsn=2000-11-03-011-04-NW-KN NetCraft расширяет...
msie.5.0.bookmark.txt
http://www.wired.com/news/printversion/technology/story/19160.html?wnpg=all Another Privacy Hole in IE 5.0? by Chris Oakes 3:00 a.m. 16.Apr.99.PDT An obscure feature in Microsoft's Internet Explorer 5.0 Web browser informs Web sites when users bookmark their pages. The feature was discovered duri...
