Design/Logic Flaw

Check Point Web Intelligence does not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

CVE-2007-2688

The CVE-2007-2688 issue affects Cisco’s Intrusion Prevention System (IPS) and IOS with Firewall/IPS Feature Set. The vulnerability arises from improper handling of certain full-width and half-width Unicode encodings, which could allow remote attackers to evade detection of HTTP traffic. What’s af...

CVE-2007-2688

The Cisco Intrusion Prevention System IPS and IOS with Firewall/IPS Feature Set do not properly handle certain full-width and half-width Unicode character encodings, which might allow remote attackers to evade detection of HTTP traffic...

By modifying the characteristics to evade antivirus checks-vulnerability warning-the black bar safety net

Today the rare is I in the school room and RUB into the machine, installed Norton and wheat coffee. Anyway, haven't for these two antivirus ever madefree kill, so just change it for the better. The positioning process on a free, given the feature code location: Norton: the starting offset 000B9A4...

n.runs-SA-2007.004 - PHProjekt 5.2.0 - Cross Site Scripting and Filter Evasion

n.runs AG http://www.nruns.com/ security at nruns.com n.runs-SA-2007.004 14-Mar-2007 Vendor: Mayflower GmbH, http://www.mayflower.de Affected Products: PHProjekt 5.2.0 Vulnerability: Cross Site Scripting and Filter Evasion Risk: HIGH Vendor communication: 2006/12/31 initial notification of...

NetProxy <= 4.03 Web Filter Evasion / Bypass Logging Exploit

No description provided by source. !/usr/bin/perl Application: NetProxy 4.03 http://www.grok.co.uk/netproxy/index.html Description: NetProxy includes a powerful web cache to boost performance and reduce online costs. There is also an application-level firewall to protect your network from unwante...

NetProxy 4.03 - Web Filter Evasion / Bypass Logging

!/usr/bin/perl Application: NetProxy 4.03 http://www.grok.co.uk/netproxy/index.html Description: NetProxy includes a powerful web cache to boost performance and reduce online costs. There is also an application-level firewall to protect your network from unwanted access, full access logging to...

CVE-2006-7013

QueryString.php in Simple Machines Forum SMF 1.0.7 and earlier, and 1.1rc2 and earlier, allows remote attackers to more easily spoof the IP address and evade banning via a modified X-Forwarded-For HTTP header, which is preferred instead of other more reliable sources for the IP address. NOTE: the...

Cisco Security Advisory: Multiple IOS IPS Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple IOS IPS Vulnerabilities Advisory ID: cisco-sa-20070213-iosips http://www.cisco.com/warp/public/707/cisco-sa-20070213-iosips.shtml Revision 1.0 For Public Release 2007 February 13 1600 UTC GMT -...

CVE-2006-6433

Xerox WorkCentre and WorkCentre Pro before 12.060.17.000, 13.x before 13.060.17.000, and 14.x before 14.060.17.000 does not record accurate timestamps, which makes it easier for remote attackers to avoid detection when an audit tries to rely on these timestamps...

Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Multiple Vulnerabilities in Cisco Secure Desktop Advisory ID: cisco-sa-20061108-csd Revision 1.0 For Public Release 2006 November 08 1600 UTC GMT - ----------------------------------------------------------------------- Summar...

CVE-2006-5807

Cisco Secure Desktop CSD before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion"...

CVE-2006-5807

Cisco Secure Desktop CSD before 3.1.1.45 allows local users to escape out of the secure desktop environment by using certain applications that switch to the default desktop, aka "System Policy Evasion"...

CVE-2006-5807

CVE-2006-5807 affects Cisco Secure Desktop (CSD) prior to version 3.1.1.45. The issue allows local users to escape the secure desktop environment by launching certain applications that switch to the default desktop, referred to as System Policy Evasion. The vulnerability is local in scope with pa...

CVE-2006-5703

Cross-site scripting XSS vulnerability in tiki-featuredlink.php in Tikiwiki 1.9.5 allows remote attackers to inject arbitrary web script or HTML via a url parameter that evades filtering, as demonstrated by a parameter value containing malformed, nested SCRIPT elements...

Serendipity -- XSS Vulnerabilities

The Serendipity Team reports: Serendipity failed to correctly sanitize user input on the media manager administration page. The content of GET variables were written into JavaScript strings. By using standard string evasion techniques it was possible to execute arbitrary JavaScript. Additionally...

Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

Cisco Intrusion Prevention System DoS and protection bypass

Malformed SSLv2 handshake DoS, fragmented packets filtering evasion...

Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Intrusion Prevention System Management Interface Denial of Service and Fragmented Packet Evasion Vulnerabilities Document ID: 71558 Advisory ID: cisco-sa-20060920-ips...

You can also when hackers create the perfect IE the page Trojan-vulnerability warning-the black bar safety net

If you want to create the perfect IE web Trojan, first of all have to give our perfect to develop a standard, I personally think that a perfect ＩＥ web Trojans should have at least the following four characteristics: A: you can hide from antivirus software and the hunted; the Two: you can avoid th...