CVE-2005-4726

MUTE 0.4 uses improper flood protection algorithms, which allows remote attackers to obtain sensitive information privacy leak and search result data by controlling a drop chain neighbor that is near the end of a message chain...

CVE-2005-4726

The CVE-2005-4726 entry concerns MUTE 0.4, which uses improper flood protection algorithms. The Red Hat entry reiterates that remote attackers can obtain sensitive information (privacy leak and search result data) by manipulating a drop chain neighbor near the end of a message chain. The document...

The latest hacking techniques: the XSS cross-site scripting attack detailed description-vulnerability warning-the black bar safety net

General description A simple description of what isXSSattack How to findXSSvulnerability ForXSSattack the General idea From internal attacks: How to find the internalXSSvulnerability How to construct attack How to use The junction of any instances of attacks, such as DVBBS&BBSXP From external...

SHA-1 Broken

HA-1 Broken SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu mostly from Shandong University in China have been quietly circulating a paper describing their results: collisions in the the...

Mandrake Linux Security Advisory : xinetd (MDKSA-2001:076)

An audit has been performed on the xinetd 2.3.0 source code by Solar Designer for many different possible vulnerabilities. The 2.3.1 release incorporated his patches into the xinetd source tree. The audit was very thorough and found and fixed many problems. This xinetd update includes his audit...

gnut gnutella client html injection

Hello I recently discovered a bug in gnut, a console/www Gnutella client for Linux and Windows, that allows the injection of html code in the Search Result Page of the Webfrontend. This is done by sharing a file with html tags embedded. testHR.mp3 for example More complex things are possible with...