1478 matches found
SSL Certificate Information
This plugin connects to every SSL-related port and attempts to extract and dump the X.509 certificate. TRUSTED...
waraxe-2007-SA052.txt
waraxe-2007-SA052 - dBlog CMS Open Source database retrieval ==================================================================== Author: Janek Vind "waraxe" Date: 19. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-52.html Target software description:...
iyzi Forum s1 b2 (tr) SQL Injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
Exploit for unknown platform in category web applications =============================================================== iyzi Forum = 1.0 Beta 3 uyeayrinti.asp Remote SQL Injection ===============================================================...
iyzi Forum 1.0 Beta 3 - SQL Injection
iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...
iyzi Forum 1.0 Beta 3 - SQL Injection
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...
EEYE: McAfee ePolicy Orchestrator Remote Compromise
McAfee ePolicy Orchestrator Remote Compromise Release Date: July 13, 2006 Severity: High Remote Code Execution Vendor: McAfee Systems Affected: McAfee Common Management EPO Agent versions below version 3.5.5.438 Overview: McAfee ePolicy Orchestrator is the remote security management software for...
Ubuntu 4.10 / 5.04 : openssl weak default configuration (USN-179-1)
The current default algorithm for creating 'message digests' electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
APPLE-SA-2006-01-05 AirPort firmware update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2006-01-05 AirPort firmware update The following AirPort firmware updates are available: AirPort Express Firmware Update 6.3 for Mac OS X AirPort Express Firmware Update 6.3 for Windows AirPort Extreme Firmware Update 5.7 for Mac OS X AirPort...
Mandrake Linux Security Advisory : openssl (MDKSA-2005:179)
Yutaka Oiwa discovered vulnerability potentially affects applications that use the SSL/TLS server implementation provided by OpenSSL. Such applications are affected if they use the option SSLOPMSIESSLV2RSAPADDING. This option is implied by use of SSLOPALL, which is intended to work around various...
USN-179-1: openssl weak default configuration
The current default algorithm for creating "message digests" electronic signatures for certificates created by openssl is MD5. However, this algorithm is not deemed secure any more, and some practical attacks have been demonstrated which could allow an attacker to forge certificates with a valid...
xpl_detail.pl.txt
This is a multi-part message in MIME format. ------=NextPart000003201C5473D.B3E3E000 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://icis.digitalparadox.org/exploits/xpldetail.pl =20 !/usr/bin/perl use IO::Socket; use Getopt::Std; print "xASP NUKE...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...
SHA family hash functions cryptographic weakness
Cryptographic weakness found making real strength against coliisions: collisions in the the full SHA-1 in 269 hash operations, much less than the brute-force attack of 280 operations based on the hash length. Collisions in SHA-0 in 239 operations. Collisions in 58-round SHA-1 in 233 operations...
SHA-1 Broken
HA-1 Broken SHA-1 has been broken. Not a reduced-round version. Not a simplified version. The real thing. The research team of Xiaoyun Wang, Yiqun Lisa Yin, and Hongbo Yu mostly from Shandong University in China have been quietly circulating a paper describing their results: collisions in the the...
