370 matches found
phpmyadmin -- SQL injection vulnerability
A phpMyAdmin security announcement report: phpMyAdmin used the $REQUEST superglobal as a source for its parameters, instead of $GET and $POST. This means that on most servers, a cookie with the same name as one of phpMyAdmin's parameters can interfere. Another application could set a cookie for t...
Raiders: CAPTCHA cracking-vulnerability warning-the black bar safety net
The so-called verification code, is a string of randomly generated numbers or symbols, to generate a picture, the pictures of Riga on some interference pixel to prevent OCR, and by the user to visually identify where the verification code information, The input form submission site verification,...
Update Protections against Recent Malware Threats (7-Nov-07)
Malware is a software designed to infiltrate or damage a computer system without the owner's informed consent. It is a general name for a variety of forms of hostile, intrusive, or annoying programs like Viruses, worms, Adware, Trojans, and spyware that exploit unprotected clients, using network...
Hijacking Bluetooth Headsets for Fun and Profit?
Hijacking Bluetooth Headsets for Fun and Profit? kfatdigitalmunitiondotcom http://www.digitalmunition.com/HijackHeadSet.txt A few years ago when I worked for SNOSoft my business partner 'Simon' was one of those guys who rocked out a Bluetooth Headset just about every time I talked to him on his...
[SA13918] Sun Java Plug-In Two Vulnerabilities
TITLE: Sun Java Plug-In Two Vulnerabilities SECUNIA ADVISORY ID: SA13918 VERIFY ADVISORY: http://secunia.com/advisories/13918/ CRITICAL: Highly critical IMPACT: Security Bypass, System access WHERE: From remote SOFTWARE: Sun Java SDK 1.4.x http://secunia.com/product/1661/ Sun Java SDK 1.3.x...
Sun Java JRE Plug-in Capability Arbitrary Package Access
The remote host is using a vulnerable version of Sun Java Runtime Plug-in, a web browser addon used to display Java applets. Two security issues have been reported in the remote version of this product : - An untrusted applet may escalate its privileges in order to read, write or execute files on...
3Ware 3DM denial of service attack
I've reported this to 3ware at least twice, and never received any response. Previously I didn't have a test case other than "run a nessus scan against the host". I've narrowed it down to a reproducible minimum test case now. If you connect to 3dm port 1080 on either linux or windows and send: GE...
PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change
source: https://www.securityfocus.com/bid/2544/info PHP-Nuke is a website creation/maintainence tool written in PHP3. A PHP-Nuke feature supporting cycling ad banners is subject to interference from a remote user. A querystring can be submitted to an unpatched server which allows the remote user ...
AIX 4.24.3 - netstat -Z Statistic Clearing
AIX 4.24.3 - netstat -Z Statistic Clearing source: https://www.securityfocus.com/bid/1660/info A vulnerability exists in versions 4.x. x of AIX, from IBM. Any local user can utilize the -Z command to netstat, without needing to be root. This will cause interface statistics to be reset. This could...
