1342 matches found
New AES Attack, 200-Year-Old Cipher Key Big Week in Crypto
It’s been quite a week in the world of cryptography. For a field in which advancements are measured in the smallest of terms and major breakthroughs can take decades, the three big news stories involving cryptography in the last few days comprise an epochal event. Perhaps the most interesting of...
New attack produces quicker SHA-1 collisions
From The H Security Australian researchers have described a new and faster way of provoking collisions of the SHA-1 hash algorithm. With their method, a collision can be found using only 252 attempts. This makes practical attacks feasible and could have an impact on the medium-term use of the...
SSL Certificate Signed Using Weak Hashing Algorithm
The remote service uses an SSL certificate chain that has been signed using a cryptographically weak hashing algorithm e.g. MD2, MD4, MD5, or SHA1. These signature algorithms are known to be vulnerable to collision attacks. An attacker can exploit this to generate another certificate with the sam...
Apple Mac OS X Java Applet HMAC供给器处理远程代码执行漏洞
BUGTRAQ ID: 31379 CVE ID：CVE-2008-3637 CNCVE ID：CNCVE-20083637 Apple Mac OS X是一款商业性质的操作系统。 Apple Mac OS X Java Applet HMAC供给器使用未初始化变量，远程攻击者可以利用漏洞以应用程序上下文执行任意代码。 基于HASH的消息验证代码HMAC供给器用于生成MD5和SHA-A HASH，其中存在一个错误检查可导致使用未初始化变量。构建恶意的Java applet，诱使用户访问，可导致任意代码执行。 Apple Mac OS X Server 10.5.5 Apple Mac O...
SSL Certificate Information
This plugin connects to every SSL-related port and attempts to extract and dump the X.509 certificate. TRUSTED...
waraxe-2007-SA052.txt
waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...
iyzi Forum s1 b2 (tr) SQL Injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
Exploit for unknown platform in category web applications =============================================================== iyzi Forum = 1.0 Beta 3 uyeayrinti.asp Remote SQL Injection ===============================================================...
iyzi Forum 1.0 Beta 3 - SQL Injection
iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...
iyzi Forum 1.0 Beta 3 - SQL Injection
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
EEYE: McAfee ePolicy Orchestrator Remote Compromise
McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...
Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)
The current default algorithm for creating 'message digests' electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
APPLE-SA-2006-01-05 AirPort firmware update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2006-01-05 AirPort firmware update The following AirPort firmware updates are available: AirPort Express Firmware Update 6.3 for Mac OS X AirPort Express Firmware Update 6.3 for Windows AirPort Extreme Firmware Update 5.7 for Mac OS X AirPort...
Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)
Yutaka Oiwa discovered vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various...
USN-179-1: openssl weak default configuration
The current default algorithm for creating "message digests" electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
xpl_detail.pl.txt
This is a multi-part message in MIME format. ------=NextPart000003201C5473D.B3E3E000 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://icis.digitalparadox.org/exploits/xpldetail.pl =20 !/usr/bin/perl use IO::Socket; use Getopt::Std; print "xASP NUKE...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...
SHA family hash functions cryptographic weakness
Cryptographic weakness found making real strength against coliisions: collisions in the the full SHA-1 in 269 hash operations, much less than the brute-force attack of 280 operations based on the hash length. Collisions in SHA-0 in 239 operations. Collisions in 58-round SHA-1 in 233 operations...
SHA-1 Broken
HA-1 Broken SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu mostly from Shandong University in China have been quietly circulating a paper describing their results: collisions in the the...