USN-7656-1 erlang vulnerabilities

It was discovered that Erlang OTP’s SSH module incorrectly enforced strict KEX handshake hardening measures. A remote attacker able to intercept communications could possibly use this issue to insert optional messages into connections during the handshake. CVE-2025-46712 It was discovered that...

Improper Session Handling

php is vulnerable to improper session handling. The vulnerability exists as an attacker to create a cross-site cookie insertion attack if a victim follows an untrusted carefully-crafted URL...

The black hole of the ASP on-line system of a vulnerability-vulnerability warning-the black bar safety net

In the default case, the use of the vulnerability can be obtained on-line system where the server webshell ASP on-line system stored in the on-line IP information of the database extension the default for asp Write the configuration of the parameters is not checked, the setip. asp the relevant co...

Moderate: Red Hat Security Advisory: php security update

Updated PHP packages that fix several security issues are now available for Red Hat Application Stack. This update has been rated as having moderate security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. The...

[SA17307] ar-blog Script Insertion and Authentication Bypass Vulnerabilities

TITLE: ar-blog Script Insertion and Authentication Bypass Vulnerabilities SECUNIA ADVISORY ID: SA17307 VERIFY ADVISORY: http://secunia.com/advisories/17307/ CRITICAL: Moderately critical IMPACT: Security Bypass, Cross Site Scripting WHERE: From remote SOFTWARE: ar-blog 5.x...

[SA13329] Nuked-Klan "Links" Module Script Insertion Vulnerability

TITLE: Nuked-Klan "Links" Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13329 VERIFY ADVISORY: http://secunia.com/advisories/13329/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nuked-Klan 1.x http://secunia.com/product/1015/ DESCRIPTION:...

[SA12732] AWS MySQLguest Script Insertion Vulnerability

TITLE: AWS MySQLguest Script Insertion Vulnerability SECUNIA ADVISORY ID: SA12732 VERIFY ADVISORY: http://secunia.com/advisories/12732/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MySQLguest http://secunia.com/product/4008/ DESCRIPTION: BliZZard has...

Basit CMS Multiple Script XSS

Basit cms 1.0 has a cross-site scripting bug. An attacker may use it to perform a cross-site scripting attack on this host. In addition to this, it is vulnerable to a SQL insertion attack that could allow an attacker to get the control of your database. %NASLMINLEVEL 70300 written by K-Otik.com...

CVE-1999-1085

SSH 1.2.25, 1.2.23, and other versions, when used in in CBC Cipher Block Chaining or CFB Cipher Feedback 64 bits modes, allows remote attackers to insert arbitrary data into an existing stream between an SSH client and server by using a known plaintext attack and computing a valid CRC-32 checksum...