FreeBSD : FreeBSD -- pam_ssh improperly grants access when user account has unencrypted SSH private keys (eda151d8-4638-11e1-9f47-00e0815b8da8)

The OpenSSL library call used to decrypt private keys ignores the passphrase argument if the key is not encrypted. Because the pamssh module only checks whether the passphrase provided by the user is null, users with unencrypted SSH private keys may successfully authenticate themselves by providi...

House GOP Task Force Favors Private Incentives, Fewer Regulations for Cybersecurity

A House GOP task force called on Congress this week to adopt voluntary incentives – rather than federal requirements – to get private companies to further develop their cyber security. The GOP proposes a combination of tax credits, grants, insurance and rules set by non-regulatory agencies as a w...

Experts Discuss Stuxnet's Long-Term Impact on Cybersecurity

Stuxnet has both fascinated and horrified the cybersecurity community throughout 2010. Its multiple zero-day exploits, stealth capabilities, and precise control over industrial machinery mark it as a prime example of advanced cyber threats. Stuxnet represents both a nightmare and a dream for...

Joomla Grants SQL Injection

========================================================= Joomla Component Joomla! 1.6 b13 grants SQL Injection ========================================================= +Title : Joomla Component Joomla! 1.6 b13 grants SQL Injection +Software : Joomla! 1.6 b13 +Vendor :...

mysql: multiple insufficient table name checks

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

National Science Foundation: Time for Web Makeover

The National Science Foundation NSF has doled out grants worth up to $32 million in total to a pack of universities dedicated to rethinking everything about the Internet from from its core routing system to its security architecture and addressing the emergence of cloud computing and an...

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

Directory traversal

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

CVE-2010-1848

CVE-2010-1848 affects MySQL 5.0 up to 5.0.91 and MySQL 5.1 before 5.1.47. It stems from a directory traversal via a ".." in a table name, allowing remote authenticated users to bypass table-grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tab...

mysql: multiple insufficient table name checks

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

CVE-2010-1848

Directory traversal vulnerability in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote authenticated users to bypass intended table grants to read field definitions of arbitrary tables, and on 5.1 to read or delete content of arbitrary tables, via a .. dot dot in a table name...

Unfixed XSS vulnerability at ibs.colorado.edu

Security researcher SeYMeN, has submitted on 18/07/2008 a cross-site-scripting XSS vulnerability affecting ibs.colorado.edu, which at the time of submission ranked 5671 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/07/2008. It is currently...

Oracle 10g CTX_DOC.MARKUP SQL Injection Exploit

No description provided by source. // / Oracle 10g CTXDOC.MARKUP SQL Injection Exploit / // / sploit grant DBA to unprivileged user / // / BY Sh2kerR Digital Security / // / tested on oracle 10.1.0.2.0 / // // / Date of Public EXPLOIT: October 23, 2007 / / Written by: Alexandr "Sh2kerr" Polyakov ...

CVE-2006-5492

Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...

CVE-2006-5492

Technical details for CVE-2006-5492 are not publicly available in the provided documents. No affected products, components, or exploit specifics are disclosed here. Monitor for updated information from official sources.

CVE-2006-5492

Unspecified vulnerability in Maerys Archive Maarch before 2.0.1 allows remote authenticated users to obtain sensitive information document contents via unspecified attack vectors related to "grants."...