392 matches found
DNP3 unsolicited response function code
...
SCADA DNP3 server unsolicited auth challenge response function code
...
Getting down to business
An exclusive gathering, the conference takes place in a single meeting room at Florida International University. Talks are short – most limited to around 30 minutes, with quite a few clocking in at around 15 minutes. The organizers also leave room for so-called unsolicited response sessions, wher...
Distributed Network Protocol v3 'Disable Unsolicited' Alert (SCADA) (deprecated)
Binary data 6247.prm...
How Facebook Ticker exposing your information and behavior without your knowledge
How Facebook Ticker exposing your information and behavior without your knowledge Nelson Novaes Neto , a Brazilian independent Security and Behavior Research have analyze a privacy issue in FacebookTicker that allows any person chasing you without your knowledge or consent . He explain that this ...
Expert: Eight Years Later, 'Snowshoe Spam' Suggests CAN SPAM Not Working
BARCELONA — If you thought the CAN SPAM Act of 2003 nailed the coffin closed on the legality of spamming in the U.S., you’d be wrong. In fact, CAN SPAM compliant spam e-mail – sometimes referred to as ‘Snowshoe Spam’ is a growing source of nuisance e-mail messages hitting inboxes in the U.S. and...
oscommerce authentication bypass
Exploit for php platform in category web applications This is a bug on old oscommerce / creloaded i just didn't find it in the exploit-db database on the search. Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id:...
osCommerce Authentication Bypass
Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id: tellafriend.php,v 1.1.1.1 2008/06/29 23:38:03 Tested on: linux When /tellafriend.php is called directly the user is redirected at /productinfo.php?productsid=0 where an...
osCommerce - Authentication Bypass
This is a bug on old oscommerce / creloaded i just didn't find it in the exploit-db database on the search. Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id: tellafriend.php,v 1.1.1.1 2008/06/29 23:38:03 Tested on: linux...
NuralStorm Webmail Multiple Security Vulnerabilities
NuralStorm Webmail is prone to multiple security vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Major Spam Network Fined Over $15 Million
A U.S. district court judge has ordered the largest “spam gang” in the world to pay nearly $15.2 million for sending unsolicited e-mail messages marketing male-enhancement pills, prescription drugs, and weight-loss supplements, according to the U.S. Federal Trade Commission. Read the full article...
JVN#08369659 Movable Type access restriction bypass vulnerability
Movable Type, a web log system from Six Apart KK, contains a vulnerability that allows a remote attacker to bypass access restrictions. Impact A remote attacker may send unsolicited email to arbitrary addresses or view information stored in Movable Type. Solution Update the Software Update to the...
Canadian Parliament considers anti-malware law
From Stop Badware Maxim Weinstein The Canadian House of Commons is considering bill C-27 gc.ca, the Electronic Commerce Protection Act. In addition to providing civil penalties for unsolicited commercial e-mail spam and the unauthorized interception of e-mail man in the middle attacks, it provide...
Fedora Update for spamassassin FEDORA-2007-584
Check for the Version of spamassassin OpenVAS Vulnerability Test Fedora Update for spamassassin FEDORA-2007-584 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
Fedora Update for spamassassin FEDORA-2007-0390
Check for the Version of spamassassin OpenVAS Vulnerability Test Fedora Update for spamassassin FEDORA-2007-0390 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...
Fedora Update for spamassassin FEDORA-2007-242
Check for the Version of spamassassin OpenVAS Vulnerability Test Fedora Update for spamassassin FEDORA-2007-242 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...
yum-rhn-plugin: does not verify SSL certificate for all communication with RHN server
yum-rhn-plugin in Red Hat Enterprise Linux RHEL 5 does not verify the SSL certificate for a file download from a Red Hat Network RHN server, which makes it easier for remote man-in-the-middle attackers to cause a denial of service loss of updates or force the download and installation of official...
HiFriend - 'cgi-bin/hifriend.pl' Open Email Relay
source: https://www.securityfocus.com/bid/30320/info HiFriend is prone to an open-email-relay vulnerability. An attacker could exploit this issue by constructing a script that would send unsolicited bulk email to an unrestricted amount of email addresses with a forged email address. !/usr/bin/per...
Kent Web PostMail vulnerable to third party mail relay
Overview Kent Web PostMail, form mail software that enables sending email from web pages, contains a vulnerability which may allow the third party to relay mail as it does not properly check input. Impact An attacker could possibly compromise the mail server to send an unsolicited email. Solution...
CVE-2007-5597
The hookcomments API in Drupal 4.7.x before 4.7.8 and 5.x before 5.3 does not pass publication status, which might allow attackers to bypass access restrictions and trigger e-mail with unpublished comments from some modules, as demonstrated by 1 Organic groups and 2 Subscriptions...