US-CERT Warns About Free BlackBerry Spyware App

The U.S. Computer Emergency Readiness Team warned BlackBerry users on Tuesday about a new program called PhoneSnoop that allows someone to remotely eavesdrop on phone conversations. The PhoneSnoop application must be installed on the phone by someone who has physical access to it or by tricking t...

Wyse Rapport Hagent Fake Hserver Command Execution

$Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'timeout...

Adobe Reader FlateDecode filter TIFF Predictor integer overflow

Added: 10/27/2009 CVE: CVE-2009-3459 BID: 36600 OSVDB: 58729 Background Adobe Reader is free software for viewing PDF documents. Problem An integer overflow in the FlateDecode filter in Adobe Reader allows command execution when a user opens a PDF file containing specially crafted compressed...

GPG2/Kleopatra 2.0.11 malformed certificate PoC

No description provided by source. !/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of this...

GPG2/Kleopatra 2.0.11 - Malformed Certificate

!/usr/bin/env python GPG2/Kleopatra 2.0.11 - Malformed Certificate Crash PoC Note: Part of the GPG4Win Package v2.0.1 Found By: DrIDE Tested On: 7RC, XPSP3 Usage: Import the Cert into Kleopatra, GPG2.exe Crashes Seems to only check for the presense of this signature cert =...

GPG2/Kleopatra 2.0.11 malformed certificate PoC

Exploit for unknown platform in category local exploits =============================================== GPG2/Kleopatra 2.0.11 malformed certificate PoC =============================================== Title: GPG2/Kleopatra 2.0.11 malformed certificate PoC CVE-ID: OSVDB-ID: Author: DrIDE Published:...

nginx HTTP Request Remote Buffer Overflow Vulnerability

nginx is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

CVE-2009-3486

Multiple cross-site scripting XSS vulnerabilities in the J-Web interface in Juniper JUNOS 8.5R1.14 allow remote authenticated users to inject arbitrary web script or HTML via the host parameter to 1 the pinghost program, reachable through the diagnose program; or 2 the traceroute program, reachab...

Exploit Code Published for New Microsoft IIS FTP Flaw

There is exploit code circulating for a newly discovered vulnerability in the FTP service of Microsoft IIS, a flaw which could enable an attacker to run his own code on a remote server. The flaw mainly affects older versions of IIS, Microsoft’s Web server product, but the existence of a working...

Obama is Failing the Cybersecurity Test

That giant sucking sound you hear is the steady stream of talented security people and experienced policy makers getting out of Washington as quickly as possible as the Obama administration continues to be paralyzed by indecision and a lack of direction regarding cybersecurity. The latest chapter...

bind

New bind packages are available for Slackware 8.1, 9.0, 9.1, 10.0, 10.1, 10.2, 11.0, 12.0, 12.1, 12.2, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2009-0696 ISC has published...

US-CERT Technical Cyber Security Alert TA09-204A -- Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-204A Adobe Flash Vulnerability Affects Flash Player and Other Adobe Products Original release date: July 23, 2009 Last revised: -- Source: US-CERT Systems Affected Adobe Flash Player...

Wyse Device Manager Buffer Overflow

Wyse Device Manager is installed on the remote system. The installed version is affected by a buffer overflow vulnerability. By sending a specially crafted request to the server, it may be possible for an unauthorized attacker to crash the server or execute arbitrary commands on the remote system...

Wyse Rapport Hagent Fake Hserver - Command Execution (Metasploit)

$Id: hagentuntrustedhsdata.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Wyse Rapport Hagent Fake Hserver Command Execution

No description provided by source. $Id: hagentuntrustedhsdata.rb This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

US-CERT Technical Cyber Security Alert TA09-187A -- Microsoft Video ActiveX Control Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-187A Microsoft Video ActiveX Control Vulnerability Original release date: July 06, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows XP Microsoft Windows Server 200...

Hackers Pounce on Michael Jackson's Death

As night follows day, malicious hackers are following high-profile news around celebrity deaths to launch attacks. According to a warning from the U.S. Computer Emergency Response team, there are several spam campaigns, phishing attacks, and malicious code targeting the recent deaths of Michael...

Vulnerabilities and Attack Surface

From CERT Will Dormann Two recent US-CERT Vulnerability Notes cert.org describe similar issues in the Adobe Reader and Foxit Reader PDF viewing applications. The vulnerabilities, that both applications failed to properly handle JPEG2000 JPX data streams, were discovered as part of our Vulnerabili...

Debian DSA-1807-1 : cyrus-sasl2, cyrus-sasl2-heimdal - buffer overflow

"James Ralston discovered that the saslencode64 function of cyrus-sasl2, a free library implementing the Simple Authentication and Security Layer, suffers from a missing null termination in certain situations. This causes several buffer overflows in situations where cyrus-sasl2 itself requires th...