Geeklog exploit

Following is an example of how MySQL SQL injections can be exploited, and also how suppressing error messages isn't sufficient as a solution, as proposed in some earlier postings. It was also included in Geeklog 1.3.8-1sr1 security update even though the developers noted it's not a complete...

[Full-Disclosure] Postfix 1.1.12 remote DoS / Postfix 1.1.11 bounce scanning

Good morning list, ,--. ,--. /-- / ======================================================= ' a a ======== 1. Posfix 1.1.12 remote DoS CAN-2003-0540 . ,---. , ========================================================oo'========= There is a remotely exploitable denial of service vulnerability in...

IGMP denial of service vulnerability

Topic : IGMP denial of service vulnerability Date : June 14, 2002 Credit : krishna, arun, [email protected] Site : http://www.cs.ucsb.edu/krishna/igmpdos/ Description ------------ The IGMP report suppression mechanism can be exploited for launching an insider denial of service attack against a ho...

Security holes in Powerboard forum

Product : Powerboards http://powerboards.sourceforge.net/ Versions : 2.2b and less ? Problems : - Cross Site Scripting - Path disclosure - Access to the administration - Access to users accounts without password - Recovery of admins/users passwords - Suppression of messages - Writing on the hard...