2009 matches found
zeromq: Man-in-the-middle downgrade and replay attack
CVE-2014-7202 downgrade attack A bug in streamengine.cpp allows man-in-the-middle attackers to conduct downgrade attacks via a crafted connection request. - CVE-2014-7203 replay attack libzmq did not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks...
CVE-2014-4114
creationtimestamp| type| source ---|---|--- 2014-10-14 10:29:22+00:00| seen| MISP/543cfad1-5780-4e69-b6de-474f950d210b 2014-10-14 11:40:40+00:00| seen| MISP/543d042c-3504-42d2-b2ef-44c6950d210b 2014-10-14 14:18:05+00:00| seen| MISP/543d0bd9-02d8-43b1-9feb-4286950d2109 2014-10-20 00:00:00+00:00|...
Assessing Risk for the October 2014 Security Updates
Today we released eight security bulletins addressing 24 unique CVE’s. Three bulletins have a maximum severity rating of Critical, and five have a maximum severity rating of Important. This table is designed to help you prioritize the deployment of updates appropriately for your environment...
UBUNTU-CVE-2014-7203
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...
CVE-2014-7203
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...
Design/Logic Flaw
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...
CVE-2014-7203
libzmq aka ZeroMQ/C++ 4.0.x before 4.0.5 does not ensure that nonces are unique, which allows man-in-the-middle attackers to conduct replay attacks via unspecified vectors...
Kyle and Stan Malvertising Network Nine Times Bigger
The Kyle and Stan malvertising network has a much bigger reach than first reported—about nine times bigger. In the two weeks since Cisco’s first report on the malicious ad distribution campaign, researchers had a chance to look closer at telemetry data, connect more dots and learn that nearly 6,5...
Passera - Tool to generate strong unique passwords for each website
A simple tool that allows users to have strong unique passwords for each website, without the need to store them either locally or with an online service. It is available as a command-line tool for Linux/Mac/Windows and an Android app. Passera turns any entered text into a strong password up to 6...
IFRAME sandbox same-origin access through redirect — Mozilla
Mozilla developer Boris Zbarsky discovered an issue where network-level redirects cause an sandbox to forget its unique origin and behave as if the allow-same-origin keyword were applied. This allows the sandboxed content to access other content from the same origin without explicit approval...
CVE-2014-4856
Cross-site scripting XSS vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party informati...
Cross site scripting
Cross-site scripting XSS vulnerability in the Polldaddy Polls & Ratings plugin before 2.0.25 for WordPress allows remote attackers to inject arbitrary web script or HTML via vectors related to a ratings shortcode and a unique ID. NOTE: some of these details are obtained from third party informati...
Browser Password Remover - Browser Website Login Password Removal Software
Browser Password Remover is the free software to quickly display and remove all the stored website login passwords from popular browsers. Most of the web browsers allow users to remember passwords and stores them into local database file. This file and all the stored passwords within it can be...
OpenLD <= 1.2.2 (index.php id) Remote SQL Injection Vulnerability
No description provided by source. --==+================================================================================+==-- --==+ OpenLD = 1.2.2 SQL Injection Exploit +==-- --==+================================================================================+==-- DISCOVERED BY: Cody CypherXero...
Seattle Lab Software Emurl 2.0 Email Account Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/1203/info Emurl software creates a unique identifier for each user, based on their account name. This identifier is encoded using the ascii value of each character in the account name and augmented by its position. By usi...
Lowest Unique Bid Auction - SQL Injection Vulnerabilities
No description provided by source. | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page:...
Particle Blogger <= 1.2.0 (post.php postid) Remote SQL Injection Exploit
No description provided by source. !-- Particle Blogger All Version Post.PHP PostID Remote SQL Injection Exploit Type : SQL Injection Release Date : 2007-03-16 Product / Vendor : Particle Soft http://blogger.particlesoft.net/ Bug : http://localhost/script/post.php?postid=-SQL Inj- Particle Blogge...
Winamp <= 5.3 (WMV File) Remote Denial of Service Exploit
No description provided by source. !/usr/bin/perl --------------------------------- Winamp = WMV 5.3 Buffer Overflow DOS Exploit 0-DAY --------------------------------- Type : Buffer Overflow - DOS Release Date : 2007-04-16 Product / Vendor : Winamp Media Player http://www.winamp.com/ Exploit :...
Unique Ads Banner.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/22164/info Unique Ads is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
Security feature bypass
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a unique security issue, and some vulnerability databases had associated inapplicable details with this ID. Notes: none...