CVE-2013-3428

CVE-2013-3428 affects Cisco Secure Access Control System (ACS). The web interface does not properly suppress error-condition details due to insufficient filtering of error output, allowing remote authenticated users to obtain sensitive information via an error-triggering request (Bug ID CSCue6595...

We Are Being Held in Cyber Handcuffs

Hello my Princes of Peace, Warriors of the Revolution, Princesses of the cause, I want you to take two minutes and watch this video: This video is the epitome of the ignorance and arrogance of governments all over the world in response to our cyber war revolution. As you will see, the power peopl...

Gary McKinnon

For more than a year between February of 2001 and March of 2002, a British national, Gary McKinnon, was allegedly able to hack into nearly 100 United States military and NASA computers. Prosecutors have accused McKinnon of having committed the “biggest military computer hack of all time.” McKinno...

Mandriva Update for acpid MDKA-2007:129 (acpid)

Check for the Version of acpid OpenVAS Vulnerability Test Mandriva Update for acpid MDKA-2007:129 acpid Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

DEBIAN-CVE-2007-5686

initscripts in rPath Linux 1 sets insecure permissions for the /var/log/btmp file, which allows local users to obtain sensitive information regarding authentication attempts. NOTE: because sshd detects the insecure permissions and does not log certain events, this also prevents sshd from logging...

CVE-2007-3550

Microsoft Internet Explorer 6.0 and 7.0 are identified as affected. The vulnerability allows remote attackers to manipulate Zone settings by injecting certain metacharacters (e.g., wildcards) via JavaScript to fill Zones with arbitrary domains, leading to a denial of service through website suppr...

[Full-disclosure] Advisory : Internet Explorer Zone Domain Specification Dos and Page suppressing.

Advisory : Internet Explorer Zone Domain Specification Dos and Page Suppressing Severity : Intermediate Version : IE 6.0 - 7.0 Dated : 18 June 2007 Explanation: The vulnerability is present in handling of domain names with different parameters sub domains when specified in the Intranet zone and...

Fedora Core 5 : postgresql-8.1.4-1.FC5.1 (2006-578)

Mon May 22 2006 Tom Lane 8.1.4-1.FC5.1 - Update to PostgreSQL 8.1.4 includes fixes for CVE-2006-2313, CVE-2006-2314; see bug 192173 - Update to PyGreSQL 3.8 - Update to jdbc driver build 406 - Suppress noise from chcon, per bug 187744 Note that Tenable Network Security has extracted the preceding...

eNM-0.0.1.txt

easy notes manager eNM version 0.0.1, available at http://217.172.179.216/evandor/html/index.php?id=103 is affected by multiple sql injection vulnerability due to a missing check of the user supplied input. An attacker can bypass the authentication procedure and get a full dump of the database...

fuseXSS.txt

This was discovered by myself over the weekend. I cant find out what versions of fusebox this vulnerability is in but seeing as it affects the main fusebox page I can only assume it is the latest v4.1.0 and possibly some older versions. According to the Fusebox site, What is Fusebox? Fusebox is a...

pear-XML_RPC -- information disclosure vulnerabilities

The pear-XMLRPC release notes reports that the following issues has been fixed: Eliminate path disclosure vulnerabilities by suppressing error messages when eval'ing. Eliminate path disclosure vulnerability by catching bogus parameters submitted to XMLRPCValue::serializeval...

Geeklog exploit

Following is an example of how MySQL SQL injections can be exploited, and also how suppressing error messages isn't sufficient as a solution, as proposed in some earlier postings. It was also included in Geeklog 1.3.8-1sr1 security update even though the developers noted it's not a complete...

[Full-Disclosure] Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning

Good morning list, ,--. ,--. /-- / ======================================================= ' a a ======== 1. Posfix 1.1.12 remote DoS CAN-2003-0540 . ,---. , ========================================================oo'========= There is a remotely exploitable denial of service vulnerability in...

IGMP denial of service vulnerability

Topic : IGMP denial of service vulnerability Date : June 14, 2002 Credit : krishna, arun, [email protected] Site : http://www.cs.ucsb.edu/krishna/igmpdos/ Description ------------ The IGMP report suppression mechanism can be exploited for launching an insider denial of service attack against a ho...

Security holes in Powerboard forum

Product : Powerboards http://powerboards.sourceforge.net/ Versions : 2.2b and less ? Problems : - Cross Site Scripting - Path disclosure - Access to the administration - Access to users accounts without password - Recovery of admins/users passwords - Suppression of messages - Writing on the hard...