FreeBSD Ports: putty

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

8E6 Technologies R3000 - Host Header Internet Filter Security Bypass

source: https://www.securityfocus.com/bid/30541/info 8e6 Technologies R3000 Internet Filter is prone to a vulnerability that allows attackers to bypass URI filters. Attackers can exploit this issue by sending specially crafted HTTP request packets for an arbitrary website. Successful exploits all...

CVE-2008-3361

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

CVE-2008-3361

Stack-based buffer overflow in IntelliTamper 2.07 allows remote web sites to execute arbitrary code via a long HTTP Server header...

PYSEC-2008-4

Open redirect vulnerability in the search script in Trac before 0.10.5 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter, possibly related to the quickjump function...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and 12.1 to fix security issues. More details about the issues may be found on the Mozilla site: http://www.mozilla.org/security/known-vulnerabilities/firefox20.html Here are the details from the Slackware 12.1 ChangeLog:...

GLSA-200807-08 : BIND: Cache poisoning

The remote host is affected by the vulnerability described in GLSA-200807-08 BIND: Cache poisoning Dan Kaminsky of IOActive has reported a weakness in the DNS protocol related to insufficient randomness of DNS transaction IDs and query source ports. Impact : An attacker could exploit this weaknes...

CVE-2008-3173

Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist becaus...

CVE-2008-1589

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a 1 self-signed or 2 invalid certificate, which makes it easier for remote attackers to spoof web sites...

CVE-2008-1589

Safari on Apple iPhone before 2.0 and iPod touch before 2.0 misinterprets a menu button press as user confirmation for visiting a web site with a 1 self-signed or 2 invalid certificate, which makes it easier for remote attackers to spoof web sites...

Mozilla Foundation Security Advisory 2008-22

Mozilla Foundation Security Advisory 2008-22 Title: XSS through JavaScript same-origin violation Impact: High Announced: July 1, 2008 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.0 Firefox 2.0.0.15 SeaMonkey 1.1.10 Description Mozilla contributor mozbugra4 submitted a set ...

XSS through JavaScript same-origin violation — Mozilla

Mozilla contributor mozbugra4 submitted a set of vulnerabilities which allow scripts from one document to be executed in the context of a different document. These vulnerabilities could be used by an attacker to violate the same-origin policy and perform an XSS attack against arbitrary sites,...

CVE-2008-2878

CVE-2008-2878 is an open redirect vulnerability in rss_getfile.php of Academic Web Tools (AWT YEKTA), affecting versions 1.4.3.1 and 1.4.2.8 and earlier. The flaw allows remote attackers to redirect users to arbitrary websites and facilitate phishing via a URL supplied in the file parameter. The ...

emucms-sql.txt

AUTHOR : TurkishWarriorr HOME : http://www.1923turk.org Dork : Powered by emuCMS exploit : index.php?page=category&catid=-9999+union+all+select+1,concatuser,char58,passw ,char58,email,3,null,null,null,7,8,9,10,11,null +from+users-- Test Sites...

CVE-2008-1947.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2008-1947: Tomcat host-manager XSS vulnerability Severity: Low Vendor: The Apache Software Foundation Versions Affected: Tomcat 5.5.9 to 5.5.26 Tomcat 6.0.0 to 6.0.16 This issue has been fixed in the source repositories for each version and will b...

CVE-2008-1580

CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information Subject data from personally identifiable certificates, and use arbitrary certificates...

CVE-2008-1580

CFNetwork in Safari in Apple Mac OS X before 10.5.3 automatically sends an SSL client certificate in response to a web server's certificate request, which allows remote web sites to obtain sensitive information Subject data from personally identifiable certificates, and use arbitrary certificates...

weblosninger-sqlxss.txt

Viva IsLaM sql / xss Multiple Vulnerabilities weblosning V1, V2,V3,V4 Script Name : Weblosning V1, V2,V3,V4 Demo http://www.simpelside.dk/ AuTh0r: Mr.SQL H0ME : WwW.PaL-HaCkEr.CoM Email : [email protected] V1 ::V2 :: V3 :: V4 D0rk : allinurl: "index2.php?id" ==== SQL :::::::: 1 =====...

WebUD arbitrary program execution vulnerability

Overview WebUD, a web accessibility support tool, contains a vulnerability in its components that are automatically executed on it, which may allow execution of arbitrary code when a user accesses a malicious website. Impact A remote attacker could execute an arbitrary program, or read or overwri...

JVN#76788395 Sony mylo COM-2 does not verify server SSL certificate

Sony mylo COM-2, a mobile terminal equipped with a web browser and media palyer, contains a vulnerability where it does not verify the server certificate when connecting to a server via SSL/TLS. Impact Normally, when a client connects to a web server through a SSL/TLS connection, it would verify...