[Full-Disclosure] Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge)

Cross Site Scripting DOS (Zyxel B-420 Ethernet Bridge) Wird einer B-420 Ethernet Bridge folgende URL übergeben startet sie neu. http:///Forms/rpAuth_1?ZyXEL%20ZyWALL%20Seriestop.location.pathname = "" Wird das ganze noch einmal wiederholt startet sie nicht mehr neu, sondern hängt einfach bzw. ni

[Full-Disclosure] The Macallan mail solution 4.0.6.8 (Build 786) contains several vulnerabilities

The Macallan Mail Solution are vulnerable to the problems shown below: "Macallan Mail Solution Web Interface Authentication Bypass" similar to vulnerability reported earlier by Secunia http://secunia.com/advisories/10861/ Denial of Service when requesting an overly long URL starting with

[Full-Disclosure] ArGoSoft FTP Server reveals valid usernames and allows for brute force attacks

Vendor:   ArGoSoftDate: December 31, 2004Issue:    ArGoSoft FTP Server reveals valid usernames and allows for brute force attacksURL:  http://www.argosoft.com/ftpserver/Advisory: http://www.lovebug.org/argosoft_advisory.txt   Program Overview:   ArGoSoft FTP Server is a lightweight F

[Full-Disclosure] Just a thought (from an autoreply to another thread)

You know, people that set these auto-replies often give out a good amount of information (of the social engineering kind and otherwise), if someone were to apply themselves... Schwarzwaelder, Joerg wrote: I will not be in the office at least until January 9th, 2005. Please send - ssh, watchdog a

[Full-Disclosure] list noise

I also care about noise, and responding to stupid mails makes it worse. Every time people send stupid mails like the rm file thing, and people reply to the list, the author was successful in filling the list with crap for a day or so. If no one replies, then they dont get attention and the peop

[Full-Disclosure] Xanga Cross Site Scripting Vunerability - GNAA Security Center

Vendor: Xanga URL: http://www.xanga.com/ Versions: Current Remote: Yes Vendor notified: 04 Nov 2004 at 16:48 Vendor response: NONE Summary: ~~~ Xanga is a fully featured blogging system, it provides great control over look & feel of a users blog by allowing HTML with only basic checks. Xanga ha

RE: [Full-Disclosure] Multiple Backdoors found in eEye Products (IRISand SecureIIS)

--On Thursday, December 30, 2004 9:36 AM + Barrie Dempster <[EMAIL PROTECTED]> wrote: I'd have to agree with the eEye statement on this one. You sent out an advisory without disclosing the details, which offers no real benefit to anyone. Many people consider this responsible disclosure but th

[Full-Disclosure] Xanga Cookie Stealing Vunerability XSS - GNAA Security Center

Vendor: Xanga URL: http://www.xanga.com/ Versions: Current Remote: Yes vendor notified: 06 Oct 2004 at 14:08 Vendor response: NONE Summary: ~~~ Xanga is a fully featured blogging system, it provides great control over look & feel of a users blog by allowing HTML with only basic checks. Xanga h

[Full-Disclosure] Challenge

wolong of Keeptouch.net has issue a challenge to any security professionals  to test out his system as he believe he has achieve total anonymity by connecting though 3 proxy servers running behind firewall Yahoo! Mobile- Download the latest ringtones, games, and more!_

[Full-Disclosure] Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM

Cross Site Scripting Vulnerabilities and Possible Code Execution in SugarCRM Author: Jose Antonio Coret (Joxean Koret) Date: 2004 Location: Bas

[Full-Disclosure] Various Vulnerabilities in OWL Intranet Engine

Various Vulnerabilities in OWL Intranet Engine Author: Jose Antonio Coret (Joxean Koret) Date: 2004 Location: Basque Country --

[Full-Disclosure] Two Vulnerabilities in ViewCVS

--- Two Vulnerabilities in ViewCVS --- Author: Jose Antonio Coret (Joxean Koret) Date: 2004 Location: Basque Country -

[Full-Disclosure] Xanga Login Cookie stealing Vunerability - GNAA Security Center

Vendor: Xanga URL: http://www.xanga.com/ Versions: Current Remote: Yes vendor notified: 06 Oct 2004 at 14:08 Vendor response: NONE Summary: ~~~ Xanga is a fully featured blogging system, it provides great control over look & feel of a users blog by allowing HTML with only basic checks. Xang

Re: [Full-Disclosure] Just a thought (from an autoreply to another thread)

Indeed, but as mentioned in another FD post (something along the lines of "don't mind me, just getting the xmas auto replies") how many do we know aren't honey pots? or being closely monitored? It could alll be an elaborate scheme.. On Fri, 31 Dec 2004 23:14:43 -0500, Byron L. Sonne <[EMAIL PROTE