381 matches found
BeeSns microblogging system V0. 2 elevation of Privilege oday+exp and fix-vulnerability warning-the black bar safety net
| Publishing author: sub-meter Affected versions: BeeSns V0. 2 Official address: Vulnerabilitydescription: IP filter is not strict,causing the user can submit malicious parameters to enhance their own privileges This microblogging system style nice, personally prefer, the look code is found some...
ki Wiki CMS groupware local file include and cross-site scripting vulnerability-vulnerability warning-the black bar safety net
The attacker can through the browser to exploit these issues. The use of a cross-site scripting issues, an attacker must entice an unsuspecting user to click on a malicious URI. The local file vulnerability EXP: the http:// 网站...
Energizer DUO USB Battery Charger Software Allows Remote System Access
US-CERT is aware of a backdoor in the software for the Energizer DUO USB battery charger. This backdoor may allow a remote attacker to list directories, send and receive files, and execute programs on an affected system. The software, which has been discontinued, was available for both Windows an...
Discuz! 7.0-7.2 the background settings. inc. php to write shell vulnerability-vulnerability warning-the black bar safety net
Impact version Discuz! 7.0-7.2 Vulnerability details: if$operation == 'uc' && iswriteable'./ config.inc.php' && $isfounder $ucdbpassnew = $settingsnew'uc''dbpass' == '' ? UCDBPW : $settingsnew'uc''dbpass'; if$settingsnew'uc''connect' $ucdblink = @mysqlconnect$settingsnew'uc''dbhost',...
ewebeditor for php&asp version of the backend skips the authentication vulnerability-vulnerability warning-the black bar safety net
Affected versions:php v3. 8,asp v2. 8 eWebEditor is a WYSIWYG online editor. As the name suggests, is on the network using the WYSIWYG edit mode for editing illustrated articles, news, discussions stickers, circulars, notes and other word processing applications. ../ewebeditor/admin/config. php...
ASP-DEV Internal E-Mail System - Authentication Bypass
ASP-DEV Internal E-Mail System - Authentication Bypass --------------------------------------------------------- Portal Name: Internal E-Mail System Vendor : http://asp-dev.com/main.asp?page=41 Download : http://asp-dev.com/download.asp?did=4 Author : PouyaServer , [email protected]...
FreeBSD Ports: claws-mail, sylpheed-claws
The remote host is missing an update to the system as announced in the referenced advisory. VID d9867f50-54d0-11dc-b80b-0016179b2dd5 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Unfixed XSS vulnerability at www.greatlance.com
Security researcher BackDoor, has submitted on 06/09/2007 a cross-site-scripting XSS vulnerability affecting www.greatlance.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/09/2007. It is currentl...
On a write MD5 online hack website-vulnerability warning-the black bar safety net
| digital crack the better the letters to crack the better from 1 to 4 digits- seems off. American-British dictionary crack collection and IP address digital crack the better estimation is based dictionary crack this touches on that so badly,but in practice,many times here I can't find this is my...
HP-UX Security patch : PHNE_13468
The remote host is missing HP-UX Security Patch number PHNE13468 . Security Vulnerability with land on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16533; scriptversion"1.7...
[UNIX] WebAPP Directory Traversal and Encrypted DES Disclosure
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source...
APC Security Advisory – Denial of Service Vulnerability with PowerChuteBusinessEdition
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APC Security Advisory – Denial of Service Vulnerability with PowerChute Business Edition Problem Summary A non-privileged user could cause a denial of service attack on PowerChute Business Edition servers and agents, preventing authorized users from...
TEXT/PLAIN: ALERT("OUTLOOK EXPRESS")
Friday, July 25, 2003 Active Scripting and HTML in a plain text mail message: MIME-Version: 1.0 Content-Type: text/plain; Content-Transfer-Encoding: 7bit X-Source: 25.07.03 http://www.malware.com img dynsrc=javascript:alertfont color=redfoo The above is a legitimate RFC822 mail message in plain...
CVE-1999-1221
dxchpwd in Digital Unix OSF/1 3.x allows local users to modify arbitrary files via a symlink attack on the dxchpwd.log file...
Re: Passwords in Net.Commerce/WebSphere decryptable, any version
IBM Global Services Managed Security Services Outside Advisory Redistribution 8 MAR 2001 2:11 GMT MSS-OAR-E01-2001:087.1 =========================================================================== The MSS Outside Advisory Redistribution is designed to provide customers of IBM Managed Security...
Cayman DSL Router Unauthenticated Access
The remote router has no password. An intruder may connect to it and disable it easily. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10345; scriptversion "1.16"; scriptcveid"CVE-1999-0508"; scriptnameenglish:"Cayman DSL Router Unauthenticated Access";...