Lucene search
K

6 matches found

The Hacker News
The Hacker News
added 2010/11/27 1:30 a.m.6 views

Remotely Access Devices Behind Firewalls, NAT or Mobile Gateways using YALER

Sometimes you got to access devices that are behind a firewall or protected networks. You could do that via VPNs etc. You can also use Yaler, that requires minmal setup! All it takes is a few lines of code make your embedded system or mobile device accessible behind a firewall, a NAT or a mobile...

7AI score
Exploits0
Prion
Prion
added 2007/09/18 10:17 p.m.7 views

Design/Logic Flaw

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

5CVSS7.2AI score0.00465EPSS
Exploits0References5Affected Software1
NVD
NVD
added 2007/09/18 10:17 p.m.10 views

CVE-2007-4960

Argument injection vulnerability in the Linden Lab Second Life secondlife:// protocol handler, as used in Internet Explorer and possibly Firefox, allows remote attackers to obtain sensitive information via a '" ' double-quote space sequence followed by the -autologin and -loginuri arguments, whic...

5CVSS6.7AI score0.00465EPSS
Exploits0References5
NVD
NVD
added 2007/09/18 10:17 p.m.15 views

CVE-2007-4961

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

7.5CVSS7.7AI score0.0028EPSS
Exploits1References2
Prion
Prion
added 2007/09/18 10:17 p.m.12 views

Authentication flaw

The logintosimulator method in Linden Lab Second Life, as used by the secondlife:// protocol handler and possibly other Second Life login mechanisms, sends an MD5 hash in cleartext in the passwd field, which allows remote attackers to login to an account by sniffing the network and then sending...

4.3CVSS7.5AI score0.0028EPSS
Exploits1References2
CVE
CVE
added 2007/09/18 10:0 p.m.40 views

CVE-2007-4960

The CVE-2007-4960 entry concerns an argument-injection vulnerability in Linden Lab’s Second Life secondlife:// protocol handler, used by Internet Explorer (and possibly Firefox). The issue allows a remote attacker to craft a sequence consisting of a quote space ('" ') followed by -autologin and -...

5CVSS6.7AI score0.00465EPSS
Exploits0References5Affected Software1
Rows per page
Query Builder