Unfixed Redirect vulnerability at calllendar.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Redirect vulnerability affecting calllendar.com, which at the time of submission ranked 26217722 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed. If...

CVE-2011-4601

familyfeedbag.c in the oscar protocol plugin in libpurple in Pidgin before 2.10.1 does not perform the expected UTF-8 validation on message data, which allows remote attackers to cause a denial of service application crash via a crafted 1 AIM or 2 ICQ message associated with buddy-list addition...

Unfixed Frame Redirect vulnerability at deperiodistas.com

Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting deperiodistas.com, which at the time of submission ranked 667889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...

KLA10157 ACE vulnerability in Final Draft

A buffer overflow was found in Final Draft. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely a via specially designed file. Original advisories - Exploitation Public exploits exist for this vulnerability. Related products...

Linux kernel 2.6.x KVM 'create_pit_timer()'函数本地拒绝服务漏洞

Bugtraq ID: 51172 CVE ID：CVE-2011-4622 Linux是一款开放源代码的操作系统。 用户空间可创建PIT但忘记了设置irqchips，在这种情况下本地攻击者可以通过PIT IRQs使主机崩溃： codeBUG: unable to handle kernel NULL pointer dereference at 0000000000000128 IP: ffffffffa10f6280 kvmsetirq+0x30/0x170 kvm ... Call Trace: ffffffffa11228c1 pitdowork+0x51/0xd0 kvm...

CVE-2011-4596

OpenStack Nova vulnerability CVE-2011-4596 affects OpenStack Nova before 2011.3.1 when EC2 API and the S3/RegisterImage image-registration method are enabled. It allows remote authenticated users to overwrite arbitrary files via a crafted tarball or manifest. Impact details in the reference CVSS ...

CVE-2011-1392

CVE-2011-1392 affects the IBM Rational Rhapsody/BB FlashBack ActiveX control (BB FlashBack Recorder.dll). The IBM advisory and ZDI/OpenVAS entries describe remote code execution via the ActiveX control when invoked in Internet Explorer, exploiting functions Start(), PauseAndSave(), InsertMarker()...

CVE-2011-1391

CVE-2011-1391 concerns the Blueberry FlashBack ActiveX control (BB FlashBack Recorder.dll) used with IBM Rational Rhapsody for Windows. The IBM Security Bulletin details a vulnerability where uninitialized pointers passed to InsertMarker() in BB FlashBack Recorder.dll can be exploited to remotely...

CVE-2011-1388

The CVE-2011-1388 issue affects IBM Rational Rhapsody for Windows (BB FlashBack ActiveX control, BB FlashBack Recorder.dll). The published details describe remote code execution via the BB FlashBack Recorder.dll ActiveX control when invoked from Internet Explorer, with uninitialized pointers pass...

In Possible Targeted Attack, Amnesty International Web Site Found Serving Malware

Amnesty International’s United Kingdom website was compromised late last week and was being used to exploit a known Java runtime environment hole on machines belonging to unwitting visitors to the site, according to Barracuda Labs researcher, Paul Royal. Citing historical data, Royal claims that...

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4895

Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...

CVE-2011-4896

Tor before 0.2.2.24-alpha continues to use a reachable bridge that was previously configured but is not currently configured, which might allow remote attackers to obtain sensitive information about clients in opportunistic circumstances by monitoring network traffic to the bridge port...

CVE-2011-4894

Tor before 0.2.2.34, when configured as a bridge, uses direct DirPort access instead of a Tor TLS connection for a directory fetch, which makes it easier for remote attackers to enumerate bridges by observing DirPort connections...

CVE-2011-2769

Tor before 0.2.2.34, when configured as a bridge, accepts the CREATE and CREATEFAST values in the Command field of a cell within an OR connection that it initiated, which allows remote relays to enumerate bridges by using these values...

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...

CVE-2011-4894

CVE-2011-4894 affects Tor prior to 0.2.2.34 when run as a bridge. The issue is that DirPort connections are used directly for directory fetches instead of a Tor TLS connection, which can enable remote observers to enumerate bridges by monitoring DirPort activity. The available connected documents...

CVE-2011-4896

Technical details (affected products, versions, root cause, fixes) are not provided in the connected documents. The CVE description remains the only published detail. Monitor for official updates.

CVE-2011-4897

Tor before 0.2.2.25-alpha, when configured as a relay without the Nickname configuration option, uses the local hostname as the Nickname value, which allows remote attackers to obtain potentially sensitive information by reading this value...