PT-2011-1743

Name of the Vulnerable Software and Affected Versions Joomla! component com jscalendar versions 1.5.1 through 1.5.4 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the ev id parameter in a details action to the "index.php" endpoint...

Unfixed XSS vulnerability at www.minuto90.com

Security researcher AlexAltea, has submitted on 22/04/2011 a cross-site-scripting XSS vulnerability affecting www.minuto90.com, which at the time of submission ranked 150392 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.hosting24.com

Security researcher Mudkip, has submitted on 15/04/2011 a cross-site-scripting XSS vulnerability affecting www.hosting24.com, which at the time of submission ranked 11447 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is current...

Waledac: March, 2010

Though not nearly as large or important a botnet, Waledac – which counted fewer than 100,000 infected hosts at its height – was notable for the tactics that researchers used to dismantle the botnet. Microsoft worked with a group of researchers at the University of Mannheim, the University of Vien...

Unfixed XSS vulnerability at franmore.cafe24.com

Security researcher invisiblehacker, has submitted on 04/03/2011 a cross-site-scripting XSS vulnerability affecting franmore.cafe24.com, which at the time of submission ranked 2310 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It ...

Real Player 14.0.2.633 Denial Of Service

!/usr/bin/perl +Exploit Title: Real player 14.0.2.633 Buffer overflow/DOS Exploit +Software Link: www.soft32.com/download122615.html +Software: Real player +Version: 14.0.2.633 +Tested On: WIN-XP SP3 + Date : 31.03.2011 + Hour : 13:37 PM Similar Bug was found by cr4wl3r in MediaPlayer Classic...

Debian DSA-2208-1 : bind9 - denial of service

It was discovered that BIND, a DNS server, contains a race condition when processing zones updates in an authoritative server, either through dynamic DNS updates or incremental zone transfer IXFR. Such an update while processing a query could result in deadlock and denial of service. CVE-2011-041...

CVE-2011-1205

The CVE-2011-1205 entry concerns multiple buffer overflows in unspecified COM objects within IBM Rational licensing components used by Rational ClearCase 7.0.0.4–7.1.1.4, ClearQuest 7.0.0.4–7.1.1.4, and related products. The root cause is buffer overflows in COM objects that can be triggered by r...

CVE-2011-1205: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple buffer overflows in unspecified COM objects in Rational Common Licensing 7.0 through 7.1.1.4 in IBM Rational ClearCase 7.0.0.4 through 7.1.1.4, ClearQuest 7.0.0.4 through 7.1.1.4, and other products allow local users to gain privileges via a Trojan horse HTML document in the My Computer...

AIX 610004 : U838685

The remote host is missing AIX PTF U838685 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

PT-2011-2947

Name of the Vulnerable Software and Affected Versions IBM Rational ClearCase versions 7.0.0.4 through 7.1.1.4 IBM Rational ClearQuest versions 7.0.0.4 through 7.1.1.4 Rational Common Licensing versions 7.0 through 7.1.1.4 Description The issue is related to multiple buffer overflows in unspecifie...

AIX 610006 : U840043

The remote host is missing AIX PTF U840043 which is related to the security of the package devices.pci.77102224.com.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610006 : U840055

The remote host is missing AIX PTF U840055 which is related to the security of the package devices.pci.df1000f7.com.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610005 : U841390

The remote host is missing AIX PTF U841390 which is related to the security of the package devices.pci.df1000f7.com.6.1 You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

AIX 610003 : U840496

The remote host is missing AIX PTF U840496 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 610003 : U840497

The remote host is missing AIX PTF U840497 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

PT-2011-1718

Name of the Vulnerable Software and Affected Versions com jimtawl version 1.0.2 Description The issue allows remote attackers to read arbitrary files and possibly have other impacts via a .. dot dot in the task parameter to "index.php". Recommendations For version 1.0.2, update to a version that...

DNSSEC Ready for .Com Security Layer

The DNS Security Extensions DNSSEC will be equipped for the “.com” entity by March 31, according to a PCMag.com report. While DNSSEC enhances DNS security as it is, the newly added .com security will act as an extra layer of protection, according to according to Matt Larson, the Vice President of...

AIX 530011 : U840333

The remote host is missing AIX PTF U840333 which is related to the security of the package devices.pci.df1000f7.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...

AIX 530012 : U838582

The remote host is missing AIX PTF U838582 which is related to the security of the package devices.pci.77102224.com You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'...