120 matches found
Fedora 20 : phpMyAdmin-4.2.6-1.fc20 (2014-8581)
phpMyAdmin 4.2.6.0 2014-07-17 =============================== - Undefined index warning with referenced column. - $cfg'MaxExactCount' is ignored when BROWSING is back - Multi Column sorting improved user experience - Server validation does not work while in setup/mysqli - Undefined variable when...
CVE-2014-0478
APT before 1.0.4 does not properly validate source packages, which allows man-in-the-middle attackers to download and install Trojan horse packages by removing the Release signature...
CVE-2013-4339
WordPress before 3.6.1 does not properly validate URLs before use in an HTTP redirect, which allows remote attackers to bypass intended redirection restrictions via a crafted string...
[Subterfuge] Beta Version 4.2
Automated Man-in-the-Middle Attack Framework Abstract: Enter Subterfuge, a Framework to take the arcane art of Man-in-the-Middle Attack and make it as simple as point and shoot. A beautiful, easy to use interface which produces a more transparent and effective attack is what sets Subterfuge apart...
The cloud from the enterprise built Station system through the kill oday-vulnerability warning-the black bar safety net
Saying boring to code the site the next set of program analysis Can be to the cloud from the enterprise built Station system, download the number very much so look up First saw it in the background of the login. the asp file. A look at the side of there ass and... if request. Form"submit""" then ...
Unfixed XSS vulnerability at www.unisono.es
Security researcher vlan7, has submitted on 14/01/2010 a cross-site-scripting XSS vulnerability affecting www.unisono.es, which at the time of submission ranked 2514673 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is currently...
Unfixed Frame Redirect vulnerability at www.interactieveborden.nl
Security researcher SaMTHG, has submitted on 25/10/2008 a Frame Redirect vulnerability affecting www.interactieveborden.nl, which at the time of submission ranked 17728199 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/09/2009. It is...
kyocera-traversal.txt
Kyocera Command Center Directory Traversal Vulnerability Version: I've tested this vulnerability to Kyocera Command Center embedded in FS-118MFP system Linux embedded printer but I suppose that other Kyocera printers may be vulnerable Vulnerability: Directory Traversal Risk: Critical Description...
Unfixed XSS vulnerability at www.tinmanskey.com
Security researcher Feralas, has submitted on 05/09/2008 a cross-site-scripting XSS vulnerability affecting www.tinmanskey.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/07/2009. It is currently...
Unfixed XSS vulnerability at www.caenlamer.fr
Security researcher TreX, has submitted on 20/12/2007 a cross-site-scripting XSS vulnerability affecting www.caenlamer.fr, which at the time of submission ranked 625309 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/01/2008. It is currently...
phpfss-traverse.txt
PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...
[Full-disclosure] PHP File Sharing System 1.5.1
PHP File Sharing System - Directory traversal +--------------------------------------------+ Author: Jonas Thambert Date: 2007-10-13 URL: http://sourceforge.net/projects/phpfilesadmin/ Vendor Notified. Version: 1.5.1 latest - Description - PHP File Sharing System is vulnerable to directory...
Fixed XSS vulnerability at www.vergelijk.nl
Security researcher A3on, has submitted on 01/06/2007 a cross-site-scripting XSS vulnerability affecting www.vergelijk.nl, which at the time of submission ranked 11410 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/06/2007. It is currently...
Cfengine Detection
Cfengine is a language-based system for testing and configuring Unix systems attached to a TCP/IP network. TRUSTED...
SRT2003-08-22-104 - Wireless Intrusion dection remote root compromise
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SRT2003-07-07-0831.txt
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
[Full-Disclosure] SRT2003-07-07-0913 - Abnormal suid behavior in several applications
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SRT2003-06-13-1009.txt
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
SRT2003-03-31-1219 - SAP world writable server binaries
Secure Network Operations, Inc. http://www.secnetops.com Strategic Reconnaissance Team [email protected] Team Lead Contact [email protected] Our Mission: Secure Network Operations offers expertise in Networking, Intrusion Detection Systems IDS, Software Security Validation, and...
CVE-2003-1326
Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."...