possible SQL injection in Subdreamer

//==========================================// GHC - Subdreamer - ADVISORY // Product: Subdreamer Version: Subdreamer Light // URL: www.subdreamer.com VULNERABILITY CLASS: SQL injection //==========================================// Product Description "Powered by PHP and MySQL, Subdreamer provid...

SHA family hash functions cryptographic weakness

Cryptographic weakness found making real strength against coliisions: collisions in the the full SHA-1 in 269 hash operations, much less than the brute-force attack of 280 operations based on the hash length. Collisions in SHA-0 in 239 operations. Collisions in 58-round SHA-1 in 233 operations...

Microsoft Internet Explorer 5.0.1 - Mouse Event URI Status Bar Obfuscation

source: https://www.securityfocus.com/bid/12541/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue presents itself when a HREF tag contains certain mouse events. This issue may be leveraged by an attacker to display false information in the status bar or U...

GLSA-200501-21 : HylaFAX: hfaxd unauthorized login vulnerability

The remote host is affected by the vulnerability described in GLSA-200501-21 HylaFAX: hfaxd unauthorized login vulnerability The code used by hfaxd to match a given username and hostname with an entry in the hosts.hfaxd file is insufficiently protected against malicious entries. Impact : If the...

WebWasherCONNECT.txt

WebWasher Classic - HTTP CONNECT weakness ========================================= WebWasher Classic ================= WebWasher Classic is a well known HTTP-URL/Popup/Script filtering proxy which is free for non commercial use. WebWasher Classic supports two modes, a client mode, where it only...

WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access

WebWasher Classic 2.22.3 - HTTP CONNECT Unauthorized Access source: https://www.securityfocus.com/bid/12394/info It is reported that WebWasher Classic is prone to a weakness that may allow remote attackers to connect to arbitrary ports on a vulnerable computer. This weakness may be combined with...

SiteMinder smpwservicescgi.exe Arbitrary Site Redirect

The remote host is running Netegrity SiteMinder, an access management solution. The remote version of this software is vulnerable to a page injection flaw that may allow an attacker to trick users into sending him their credentials via a link to the 'smpwservicescgi.exe' program with a rogue TARG...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could...

Microsoft Windows Media Player 9.0 - ActiveX Control File Enumeration

source: https://www.securityfocus.com/bid/12032/info The Windows Media Player ActiveX control is prone to a security weakness that may allow a malicious Web page to enumerate files that exist on the client computer. This could aid in further attacks. This issue is reported to affect Windows Media...

Microsoft Windows Media Player 9.0 - ActiveX Control Media File Attribute Corruption

source: https://www.securityfocus.com/bid/12031/info The Windows Media Player ActiveX control is prone to a security weakness. The issue is that the control may be abused by a Web page to change attributes of media files such as MP3. An attacker can influence attributes such as the artist, song...

[SA13438] Winmail Server Installation Path Disclosure Weakness

TITLE: Winmail Server Installation Path Disclosure Weakness SECUNIA ADVISORY ID: SA13438 VERIFY ADVISORY: http://secunia.com/advisories/13438/ CRITICAL: Not critical IMPACT: Exposure of system information WHERE: From remote SOFTWARE: Winmail Server 4.x http://secunia.com/product/4370/ DESCRIPTION...

Cherokee Web Server Port Bind Privilege Drop Weakness

The remote host is running Cherokee - a fast and tiny web server. The remote version of this software is vulnerable to remote command execution due to a lack of web requests sanitization, especially shell metacharacters. Additionally, this version fails to drop root privileges after it binds to...

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an...

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation

source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users th...

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anch...

Microsoft Windows XP - Weak Default Configuration

Microsoft Windows XP - Weak Default Configuration // source: https://www.securityfocus.com/bid/11410/info Microsoft Windows XP Service Pack 2 is reported prone to a weak default configuration vulnerability. Internet Connection Firewall ICF includes functionality that controls what binaries are...

AJ-Fork Permission Weakness Information Disclosure

Binary data 2342.prm...

Debian DSA-273-1 : krb4 - Cryptographic weakness

A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for...

Debian DSA-269-1 : heimdal - Cryptographic weakness

A cryptographic weakness in version 4 of the Kerberos protocol allows an attacker to use a chosen-plaintext attack to impersonate any principal in a realm. Additional cryptographic weaknesses in the krb4 implementation permit the use of cut-and-paste attacks to fabricate krb4 tickets for...

Debian DSA-429-1 : gnupg - cryptographic weakness

Phong Nguyen identified a severe bug in the way GnuPG creates and uses ElGamal keys for signing. This is a significant security failure which can lead to a compromise of almost all ElGamal keys used for signing. This update disables the use of this type of key. %NASLMINLEVEL 70300 C Tenable Netwo...