Unfixed Redirect vulnerability at zirve100.com

Security researcher THE-SH0CK-B0Y, has submitted on 01/06/2007 a Redirect vulnerability affecting zirve100.com, which at the time of submission ranked 37453 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently unfixed. If...

Unfixed XSS vulnerability at www.alstrahost.com

Security researcher St@rExT, has submitted on 01/03/2007 a cross-site-scripting XSS vulnerability affecting www.alstrahost.com, which at the time of submission ranked 35426 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/03/2007. It is...

Snort 2.4.2 - Back Orifice Parsing Remote Buffer Overflow

/ THCsnortbo 0.3 - Snort BackOrifice PING exploit by [email protected] THC PUBLIC SOURCE MATERIALS Bug was found by Internet Security Systems http://xforce.iss.net/xforce/alerts/id/207 v0.3 - removed/cleaned up info for public release v0.2 - details added, minor changes v0.1 - first release Greetz to al...

[SECURITY] new version of fsp fixes security flaw

We have found that the fsp package introduces a possible security flaw. When the fsp package is installed it adds the ftp user without prompting the admin. This can enable anonymous FTP if you use the standard ftp or wu-ftpd as your FTP daemon. If you have have installed fsp and a FTP daemon and ...