kdebase kdm local file reading vulnerability

New kdebase packages are available for Slackware 10.0, 10.1, 10.2, and -current to fix a security issue with KDM the KDE login manager which could be exploited by a local attacker to read any file on the system. The official KDE security advisory may be found here:...

MD5 decrypt of the most fast method-vulnerability warning-the black bar safety net

In General, shaped like a 1e4dc79d489e86b2 the 1 6-bit or 3 2-bit password is the MD5 encrypted, of course, there are also special, such as the DVBBS on the landing when will first produce a 1 6-bit random password,of course, the password or the MD5 password in the form of a little difference, th...

ewsEngine <= 1.5.0(newscomments.php) Remote SQL Injection Vulnerability

Title : NewsEngine = 1.5.0newscomments.php Remote SQL Injection Vulnerability Author : ajann Vulnerability; $$$ http://target/path/newscomments.php Example: $$...

[slackware-security] firefox/thunderbird/seamonkey

New Firefox and Thunderbird packages are available for Slackware 10.2 and -current to fix security issues. In addition, a new Seamonkey package is available for Slackware -current to fix similar issues. More details about the issues may be found here:...

MD5 strengthen the authentication challenge Wang xiaoyun cracked-vulnerability warning-the black bar safety net

Dreaming think a strengthening of the md5 authentication method to Wake up a hurry to test it Earth people know that MD5 is the king of a small cloud break!!! Broken!!! Broken!!! Broken!!! Breaking theto shut up In fact,not broken but with their algorithm, in the number of hours it is possible to...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords...

CVE-2006-2755

Cross-site scripting XSS vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords...

CVE-2006-2755

Cross-site scripting XSS vulnerability in index.php in UBBThreads 5.x and earlier allows remote attackers to inject arbitrary web script or HTML via the debug parameter, as demonstrated by stealing MD5 hashes of passwords...

Sniffit common problems and prevention strategies an in-depth analysis-vulnerability warning-the black bar safety net

1. sniffit is both an excellent management tool is also a dangerous intrusion tool. May be the administrator to check the network end transmission something, to learn a variety of tcp/ip Protocol of the working method, can also be exploited by attackers, the main is to record the password. 2...

UBBThreads 5.x,6.x md5 hash disclosure

UBBThreads 5.x,6.x md5 hash disclosure ------------------------------------------- Using XSS such as the one reported earlier: http://site/ubbpath/index.php?debug=xss will allow you to inject javascript and steal MD5 Hashes from: http://site/ubbpath/editbasic.php The MD5 is automatically included...

UBBThreads-md5.txt

UBBThreads 5.x,6.x md5 hash disclosure ------------------------------------------- Using XSS such as the one reported earlier: http://site/ubbpath/index.php?debug=xss will allow you to inject javascript and steal MD5 Hashes from: http://site/ubbpath/editbasic.php The MD5 is automatically included...

FreeBSD : cyrus-sasl -- DIGEST-MD5 Pre-Authentication Denial of Service (408f6ebf-d152-11da-962f-000b972eb521)

Unspecified vulnerability in the CMU Cyrus Simple Authentication and Security Layer SASL library, has unknown impact and remote unauthenticated attack vectors, related to DIGEST-MD5 negotiation. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2223

RIPd in Quagga 0.98 and 0.99 before 20060503 does not properly implement configurations that 1 disable RIPv1 or 2 require plaintext or MD5 authentication, which allows remote attackers to obtain sensitive information routing state via REQUEST packets such as SEND UPDATE...

CVE-2006-2223

Removed by vendor...

[Full-disclosure] Quagga RIPD unauthenticated route table broadcast

Arhont Ltd - Information Security Advisory by: Konstantin V. Gavrilenko http://www.arhont.com Arhont ref: arh200604-1 Advisory: Quagga RIPD unauthenticated route table broadcast Class: design bug? Version: Tested on Quagga suite v0.98.5 v0.99.3Gentoo, 2.6.15 Model Specific: Other versions might...

PHP-Nuke <= All Version Administrator SQL Injection Exploit / By WiLdBoY

PHP-Nuke = All Version Administrator SQL Injection Exploit / By WiLdBoY Credit : WiLdBoY Server Adress: Example : http://www.sitename.com Admin Name: Example : Admin Password MD5: Example : 1ea52f26e7e0ce08e462f87f5e35096c ------------------------------ User Information.... Name: Example : Michal...

Ubuntu 4.10 / 5.04 / 5.10 : cyrus-sasl2 vulnerability (USN-272-1)

A Denial of Service vulnerability has been discovered in the SASL authentication library when using the DIGEST-MD5 plugin. By sending a specially crafted realm name, a malicious SASL server could exploit this to crash the application that uses SASL. Note that Tenable Network Security has extracte...

[SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1042-1 [email protected] http://www.debian.org/security/ Martin Schulze April 25th, 2006 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1042-1] New Cyrus SASL packages fix denial of service

-------------------------------------------------------------------------- Debian Security Advisory DSA 1042-1 [email protected] http://www.debian.org/security/ Martin Schulze April 25th, 2006 http://www.debian.org/security/faq -...