HoneyDrive 3 - The Premier Honeypot Linux Distro

HoneyDrive is the premier honeypot Linux distro. It is a virtual appliance OVA with Xubuntu Desktop 12.04.4 LTS edition installed. It contains over 10 pre-installed and pre-configured honeypot software packages such as Kippo SSH honeypot, Dionaea and Amun malware honeypots, Honeyd low-interaction...

MGASA-2014-0307 Updated file packages fix security vulnerability

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule, due to an incomplete fix for CVE-2013-7345...

Updated file packages fix security vulnerability

file before 5.19 does not properly restrict the amount of data read during a regex search, which allows remote attackers to cause a denial of service CPU consumption via a crafted file that triggers backtracking during processing of an awk rule, due to an incomplete fix for CVE-2013-7345...

exlibris.colgate.edu XSS vulnerability

Vulnerable URL: http://exlibris.colgate.edu/feed/feed2js.php?src=%22%3E%3CIFRAME%20SRC=%22javascript:alert%28%27XSSPOSED%27%29;%22%3E%3C/IFRAME%3E&utf=y&img=y&targ=y&num=1&desc=347 Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly...

ISPConfig 3.0.54p1 Local Root

Exploit Title: ISPConfig 3 authenticated admin Localroot vulnerability Date: 7/25/14 Exploit Author: mra Vendor Homepage: http://wwwispconfig.org Version: 3.0.54p1 Tested on: ubuntu, centos irc.criten.net elite-chat While logged in as admin user: 1 add a shell user 2 under option set gid to...

Design/Logic Flaw

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

CVE-2014-0972

The kgsl graphics driver for the Linux kernel 3.x, as used in Qualcomm Innovation Center QuIC Android contributions for MSM devices and other products, does not properly prevent write access to IOMMU context registers, which allows local users to select a custom page table, and consequently write...

Ubuntu: Security Advisory (USN-2294-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MGASA-2014-0297 Updated avidemux packages fix security issues in the bundles ffmpeg

Updated avidemux packages fix security vulnerabilities: Avidemux built with a bundled set of FFmpeg libraries. The bundled FFmpeg versions have been updated to 0.9.4 in Mageia 3 and 1.2.7 in Mageia 4 to fix several security issues and other bugs fixed upstream in FFmpeg. For the Mageia 3 update,...

Updated live555, vlc & mplayer packages fix several issues

Updated live, mplayer, and vlc packages fix security vulnerabilities: The live555 RTSP streaming server and client libraries before 2013.11.29 are vulnerable to buffer overflows in RTSP command parsing that potentially allow for arbitrary code execution when connected to a malicious client or...

CVE-2014-2363

Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request...

CVE-2014-2363 Morpho Itemiser 3 Hard-Coded Credential

Morpho Itemiser 3 8.17 has hardcoded administrative credentials, which makes it easier for remote attackers to obtain access via a login request...

openSUSE Security Update : dbus-1 (openSUSE-SU-2014:0926-1)

CVE-2014-3532 CVE-2014-3533 bnc885241 fdo80163 fdo79694 fdo80469 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2014-465. The text description of this plugin is C SUSE LLC...

Joomla Youtube Gallery Component - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Joomla component comyoutubegallery - SQL Injection vulnerability Google Dork: inurl:index.php?option=comyoutubegallery Date: 15-07-2014 Exploit Author: Pham Van Khanh email protected Vendor Homepage:...

Security fix for the ALT Linux 6 package adobe-flash-player version 3:11-alt31

3:11-alt31 built July 16, 2014 Sergey V Turchin in task 125148 --- July 16, 2014 Sergey V Turchin - new version ALT30190 - security fixes: CVE-2014-0537, CVE-2014-0539, CVE-2014-4671...

JVN#80583739: Cybozu Garoon vulnerable to cross-site scritping

Cybozu Garoon provided by Cybozu, Inc. is a groupware. Cybozu Garoon contains an issue in the function "Notices portlet", which may result in a cross-site scripting vulnerability CWE-79. Impact An arbitrary script may be executed on the web browser of a user that is logged on. Solution Update the...

Facebook Popup Trigger (Turn your visitors to visit your sites automatically)

To all spammy, you couldn't share your flagged links on facebook? Don't worry, with this instruction, you can by pass to share the link. This is not just only about bypass of linkshrim. This is all about opening Popup of any of your pages to open for your visitors as well. All you need is "https"...

CVE-2014-3482 rubygem-activerecord: SQL injection vulnerability in 'bitstring' quoting

SQL injection vulnerability in activerecord/lib/activerecord/connectionadapters/postgresqladapter.rb in the PostgreSQL adapter for Active Record in Ruby on Rails 2.x and 3.x before 3.2.19 allows remote attackers to execute arbitrary SQL commands by leveraging improper bitstring quoting. It was...

Methodus 3 Web Server File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7908/info The Methodus 3 Web Server component is prone to a file disclosure vulnerability. It is possible for remote attackers to retrieve resources outside of the web root directory via directory traversal attacks. This...

Microsoft MPEG Layer-3 - Remote Command Execution Exploit

No description provided by source. ''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | Day 5 Binary Analysis | | | | || / \ || | | | || ||// \/|/ http://www.exploit-db.com/moaub-5-microsoft-mpeg-layer-3-audio-stack-based-overflow/...