Adcycle 0.77/0.78 AdLibrary.pm Session Access Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2393/info Adcycle is a package of perl scripts available from Adcycle.com. The scripts are designed to manage banner ad rotation through a web interface, backended with a MySQL database. A problem with the suite could all...

Squid Web Proxy 2.3 Reverse Proxy Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3062/info Squid is a free client-side web proxy that retrieves cached web pages for quick browsers and a reduction in bandwidth consumption. Squid servers, when configured as an HTTP accelerator only, may allow remote...

Wei Feng network passport design defect,the presence of leakage of user privacy risk-vulnerability warning-the black bar safety net

Wei Feng network passport design defect, enter any one of the Wei Feng network registered user name, you can get the user registered email address and other private information Due to audience characteristics significantly, in the mobile Internet boom may have prompted some of thehackingmalicious...

Ubuntu Update for nvidia-graphics-drivers USN-1420-1

Ubuntu Update for Linux kernel vulnerabilities USN-1420-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14201.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nvidia-graphics-drivers USN-1420-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH,...

Mibbit AJAX IRC client service Hacked

Mibbit AJAX IRC client service Hacked Mibbit AJAX IRC client service being hacked. The proof of hack is further backed up by Mibbit's official statement. Mibbit is a web-based client for modern web browsers that supports Internet Relay Chat IRC. Mibbit connects to IRC from anywhere on almost any...

Hackers Shut Down Six Websites, Including Credit-Card Sharing Forums

A group of hackers recently attacked and took offline several websites belonging to credit-card sharing groups, security experts, and other hacking communities that had neglected basic security practices. On Christmas morning, the administrators of six websites discovered their sites had been...

SA-CONTRIB-2010-089 - Simplenews Content Selection - Cross Site Scripting

This module allows you to select content from your website and send a newsletter with the selected content. The module does not sanitize some of the user-supplied data before displaying it, leading to a Cross Site Scripting XSS vulnerability that may lead to a malicious user gaining full...

D-BUS message bus system session hijack

Malicious local user can connect to another user's session bus...

WinXP Pro(Gold) Insecure System Restore File Permissions

WinXP ProGold Insecure System Restore File Permissions On the Windows XP ProfessionalGold, the "System Restore" files are not protected properly by NTFS ACL, so every local user can access these important files. System Restore files are stored in the "System Volume Information" directory, and thi...

FreeBSD-SA-01:32.ipfilter

-----BEGIN PGP SIGNED MESSAGE----- ============================================================================= FreeBSD-SA-01:32 Security Advisory FreeBSD, Inc. Topic: IPFilter may incorrectly pass packets REVISED Category: core Module: IPFilter Announced: 2001-04-16 Revised: 2001-04-19 Credits:...

IBM AIX 4.3.x - usrliblpdpiobe Local Buffer Overflow

IBM AIX 4.3.x - usrliblpdpiobe Local Buffer Overflow / source: https://www.securityfocus.com/bid/2037/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists which can allow a local user elevated priviledges. The problem exists in the piobe program. Due to the...

NetZero ZeroPort 3.0 - Weak Encryption Method

NetZero ZeroPort 3.0 - Weak Encryption Method // source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file...

NetZero ZeroPort 3.0 - Weak Encryption Method

// source: https://www.securityfocus.com/bid/1483/info Netzero is a free internet service provider which requires its users to run the application ZeroPort in order to log onto the network. The username and password is stored locally in a text file called id.dat and is inadequately encrypted. The...

SCO Unixware 7.1 - varmail Permissions

SCO Unixware 7.1 - varmail Permissions source: https://www.securityfocus.com/bid/849/info Certain versions of SCO's UnixWare only 7.1 was tested ship with the /var/mail/ directory with permission 777-rwxrwxrwx . This in effect allows malicious users to read incoming mail for users who do not yet...

netscape.passwd.txt

Possible Netscape Crypto Security Flaw Haze [email protected] Sun, 14 Feb 1999 21:13:46 -0600 When you go into Netscape Messenger and check your mail, the software stores the password you used in the registry and encrypts it. It remains there for as long as netscape is open. The login and password is...