security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

security flaw

Multiple format string vulnerabilities in PHP before 5.2.1 might allow attackers to execute arbitrary code via format string specifiers to 1 all of the print functions on 64-bit systems, and 2 the odbcresultall function...

Retrieve Windows Vista username and password-vulnerability warning-the black bar safety net

In Windows vista local administrator password of the hack in an article, we have introduced how to use the Elcom Soft of Proactive Password Auditor PPA to retrieve the lost or forgotten Windows Vista local administrator password, however, in relative terms, the PPA of the crack requires the user ...

CVE-2006-6300

Cross-site scripting XSS vulnerability in CuteNews 1.3.6 allows remote attackers to inject arbitrary web script or HTML via the result parameter...

Moderate nss_ldap security update

226-17 - temporarily disable fixes for 190256 and 206438 for security update 226-16 - include backported fix for off-by-one crasher in various result parsing functions Carsten Clashom, 206438 226-15 - don't suppress policy errors encountered during authentication if the specific policy error isn'...

CVE-2005-4726

The CVE-2005-4726 entry concerns MUTE 0.4, which uses improper flood protection algorithms. The Red Hat entry reiterates that remote attackers can obtain sensitive information (privacy leak and search result data) by manipulating a drop chain neighbor near the end of a message chain. The document...

CVE-2005-4726

MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information privacy leak and search result data by controlling a drop chain neighbor that is near the end of a message chain...

The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net

General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...

SHA-1 Broken

HA-1 Broken SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu mostly from Shandong University in China have been quietly circulating a paper describing their results: collisions in the the...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...

gnut gnutella client html injection

Hello I recently discovered a bug in gnut, a console/www Gnutella client for Linux and Windows, that allows the injection of html code in the Search Result Page of the Webfrontend. This is done by sharing a file with html tags embedded. testHR.mp3 for example More complex things are possible with...