Telecom Italia Alice Pirelli routers Backdoor from internal LAN/WAN

No description provided by source. saxdax & drpepperONE Discovered embedded backdoor to activate telnet/ftp/tftp/web extended admin interface with Admin privileges, from internal network lan on Alice ADSL CPE Modem/Router, manufactered by Pirelli based on Broadcom platform. saxdax & drpepperONE...

Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability

No description provided by source. Joomla 1.5.x Remote Admin Password Change Author: d3m0n [email protected] Greets: GregStar, gorion, d3d!k Polish "hackers" used this bug to deface turkish sites BUAHAHHA nice 0-day pff File : /components/comuser/controller.php Line : 379-399 function confirmreset //...

Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla 1.5.x Token Remote Admin Change Password Vulnerability =============================================================== Joomla 1.5.x Remote Admin Password Change Greets:...

[SECURITY] Fedora 8 Update: openvrml-0.17.6-6.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 8 Update: openvrml-0.17.6-3.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 8 Update: openvrml-0.17.5-5.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 7 Update: openvrml-0.16.7-4.fc7

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 8 Update: openvrml-0.17.5-2.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 7 Update: openvrml-0.16.7-3.fc7

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

CVE-2007-6602: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in app/models/identity.php in NoseRub 0.5.2 and earlier allows remote attackers to execute arbitrary SQL commands via the username field to the login script...

HP Info Center ActiveX Control Multiple Remote Vulnerabilities

The remote host contains the HP Quick Launch Button software, part of the HP Info Center software installed by default on many HP and Compaq laptop models. The version of this software on the remote host includes an ActiveX control that reportedly contains three insecure methods - 'GetRegValue',...

[SECURITY] Fedora 8 Update: openvrml-0.16.7-2.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 7 Update: openvrml-0.16.7-2.fc7

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 7 Update: openvrml-0.16.6-6.fc7

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 8 Update: openvrml-0.16.6-8.fc8

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

[SECURITY] Fedora 7 Update: openvrml-0.16.6-3.fc7

OpenVRML is a VRML/X3D support library, including a runtime and facilities for reading and displaying VRML and X3D models...

JVN#35677737 Fingerprint Authentication Software for Sony Pocket Bit installs hidden folders and files

Some models of Sony Pocket Bit series contain Fingerprint Authentication Software. Fingerprint Authentication Software installs hidden folders and files, that is, the folders and files are not visible using ordinary system tools. Impact A remote attacker could use hidden folders for unintended...

Important: kernel security update

kernel-2.4.21-50.EL - improve IGMP join processing during bonding failover Andy Gospodarek - fix EHCI period handling for high-speed USB HID devices Pete Zaitcev kernel-2.4.21-49.EL - fix dput crash regression caused in -47.5.EL Eric Sandeen - add ifcfg-bond0 documentation in bonding.txt Andy...

Bluetooth DoS by obex push

Hello, during a course project studying security and privacy related to Bluetooth, we discovered a simple but effective DoS attack using OBEX push. Using ussp-push 1, it is possible to send out files very quickly. By continuously trying to push a ?le, the target is ?ooded with prompts whether to...

CVE-2007-0387: Undefined Security Weakness

SQL injection vulnerability in models/category.php in the Weblinks component for Joomla! SVN 20070118 comweblinks allows remote attackers to execute arbitrary SQL commands via the catid parameter...