Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration

Asterisk 1.8.4.1 - SIP REGISTER Request User Enumeration source: https://www.securityfocus.com/bid/48008/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisk 1.8.4.1...

CVE-2011-2171: Undefined Security Weakness

Unspecified vulnerability in the dbugs package in Google Chrome OS before R12 0.12.433.38 Beta has unknown impact and attack vectors...

CVE-2011-2164: Undefined Security Weakness

Multiple unspecified vulnerabilities in Adobe Photoshop before 12.0.4 have unknown impact and attack vectors...

CVE-2011-2162: Undefined Security Weakness

Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...

CVE-2011-2163: Undefined Security Weakness

Unspecified vulnerability in Virtualization Manager 1.2.2 in IBM Systems Director 1.2.2 has unknown impact and attack vectors...

Multiple ZyWALL USG Products Remote Security Bypass Vulnerability

Multiple ZyWALL USG products are prone to a security-bypass vulnerability. Successful exploits may allow attackers to bypass certain security restrictions and perform unauthorized actions. Note: Reportedly, the firmware is also prone to a weakness that allows password-protected upgrade files to b...

Multiple ZyWALL USG Products Remote Security Bypass Vulnerability - Active Check

Multiple ZyWALL USG products are prone to a security bypass vulnerability. Note: Reportedly, the firmware is also prone to a weakness that allows password-protected upgrade files to be decrypted with a known plaintext attack. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might ...

OpenID Warns of Serious Bugs in Some Implementations

OpenID Warns of Serious Bugs in Some Implementations Amidst the fallout of the latest bungled password service kerfuffle at LastPass, comes a warning from the OpenID foundation of a critically serious flaw in certain deployments of the product to suffer a certain level of inter-process data...

OpenID Warns of Serious Bug in Some Implementations

The OpenID Foundation is warning users about a weakness in the software that could enable an attacker to change some of the data that’s exchanged between parties that use OpenID. The group is telling sites that implement OpenID to update to a new version in order to fix the problem. The bug in...

CVE-2009-5074: Undefined Security Weakness

Unspecified vulnerability in the MojoX::Dispatcher::Static implementation in Mojolicious before 0.991250 has unknown impact and attack vectors...

Asterisk 1.8.x - SIP INVITE Request User Enumeration

source: https://www.securityfocus.com/bid/47676/info Asterisk is prone to a user-enumeration weakness. An attacker may leverage this issue to harvest valid usernames, which may aid in brute-force attacks. This issue affects Asterisks 1.8. The following request is available: INVITE sip:192.168.2.1...

Microsoft fixed SMB NTLM relay attacks

Microsoft fixed NTLM proxing vulnerability: credentials used for one services could be forwardedto different one. Attack is known for many years as NTLM weakness...

Synergy 1.4 Protocol Cleartext Weakness Proof Of Concept

Exploit Title: Synergy Protocol cleartext weakness PoC Date:April 5th 2011 Author: Sw1tCh Software Link: http://synergy-foss.org/ Version: 1.4 -= Info =- Synergy is Free and Open Source Software that lets you easily share your mouse and keyboard between multiple computers, where each computer has...

CVE-2011-1559: Undefined Security Weakness

Unspecified vulnerability in the IBM Web Interface for Content Management aka WEBi 1.0.4 before FP3 has unknown impact and attack vectors...

Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass

source: https://www.securityfocus.com/bid/47124/info Perl is prone to a security-bypass weakness that occurs when laundering tainted input. Attackers can leverage this issue to bypass security checks in perl applications that rely on TAINT mode protection functionality. This opens such applicatio...

Installation Path Disclosure Weakness in Joomla!

High-Tech Bridge SA Security Research Lab has discovered a weakness in Joomla! which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Joomla! The weakness exists due to application reveals the full path to installation directory in...

Multiple Vulnerabilities in Viscacha

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Viscacha which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Viscacha 1.1 The vulnerability exists due to...

CVE-2011-1505: Undefined Security Weakness

Unspecified vulnerability in IBM Lotus Quickr 8.1 before 8.1.0.27 services for Lotus Domino has unknown impact and attack vectors, aka SPR ESEO8DQME2...

Apache HTTP Server ETag Header Information Disclosure Weakness

A weakness has been discovered in the Apache HTTP Server if configured to use the FileETag directive. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

CVE-2011-0322: Undefined Security Weakness

Unspecified vulnerability in EMC RSA Access Manager Server 5.5.x, 6.0.x, and 6.1.x allows remote attackers to access resources via unknown vectors...