glibc: svc_run() produces high cpu usage when accept() fails with EMFILE error

A denial of service flaw was found in the remote procedure call RPC implementation in glibc. A remote attacker able to open a large number of connections to an RPC service that is using the RPC implementation from glibc, could use this flaw to make that service use an excessive amount of CPU time...

PHP < 5.3.9 Multiple Vulnerabilities

Binary data 6263.prm...

CVE-2012-0028

The robust futex implementation in the Linux kernel before 2.6.28 does not properly handle processes that make exec system calls, which allows local users to cause a denial of service or possibly gain privileges by writing to a memory location in a child process...

Mobile Madness

Admit it. It would scarcely break your heart if the legions of slack-jawed smartphone Facebook and FourSquare gawkers were forced to confront their own digital mortality – however briefly – with a few scary exploits made just for them. In 2011, the untethered among us saw several mobile security...

SuSE 11.1 Security Update : perf (SAT Patch Number 5417)

The following perf tool bugs have been fixed : - it was issuing excessive number of gettimeofday calls creating noise when trying to measure performance. bnc607339 - it would consider a file named 'config' in the current-working-directory as containing perf configuration data, this fact could be...

CVE-2011-4578

event.c in acpid aka acpid2 before 2.0.11 does not have an appropriate umask setting during execution of event-handler scripts, which might allow local users to 1 perform write operations within directories created by a script, or 2 read files created by a script, via standard filesystem system...

Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities

Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We lo...

Four Hacking Suspects Tied to Terrorist Group Arrested

Authorities in the Philippines teamed up with the FBI to arrest four reputed hackers they believe were working for a terrorist organization. The four suspects were arrested in the Philippines Nov. 23. Law enforcement officials believe the suspects were employed by the terrorist group Jemaah...

[pdf] Skype Vulnerabilities

How to find 0days in Skype techniques & methods HITB Malaysia 2011 http://vulnerability-lab.com/resourc...uments/293.pdf ресёрч о скрытых звонках и определении IP...

Code injection

IBM AIX 6.1 and 7.1 does not restrict the wparlimitsconfig and wparlimitsmodify system calls, which allows local users to cause a denial of service system crash via a crafted call...

CVE-2011-1375

CVE-2011-1375 affects IBM AIX 6.1 and 7.1 where WPAR-related system calls wpar_limits_config and wpar_limits_modify are not properly restricted, enabling a local attacker to trigger a denial of service (system crash). Multiple IBM AIX patch advisories (PTFs/U747 etc.) and Nessus advisories (e.g.,...

Microsoft Excel 2007 SP2 - Buffer Overwrite (MS11-021)

Microsoft Excel 2007 SP2 - Buffer Overwrite MS11-021 Abysssec Research 1 Advisory information Title : Microsoft Excel 2007 SP2 Buffer Overwrite Vulnerability Analysis : Abysssec.com Vendor : http://www.microsoft.com Impact : Critical Contact : info at abysssec.com Twitter : @abysssec Microsoft : ...

OpenJDK: missing checkSetFactory calls in HttpsURLConnection (JSSE, 7096936)

Unspecified vulnerability in the Java Runtime Environment component in Oracle Java SE JDK and JRE 7, 6 Update 27 and earlier, 5.0 Update 31 and earlier, and 1.4.233 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality and integrity,...

CVE-2011-1159

acpid.c in acpid before 2.0.9 does not properly handle a situation in which a process has connected to acpid.socket but is not reading any data, which allows local users to cause a denial of service daemon hang via a crafted application that performs a connect system call but no read system calls...

Unsecured Calls, 5.0

New with iOS 5, the “unsecured call” call warning seems like a direct response to presentations like “Practical Cellphone Spying” at DEFCON, which demonstrated the ability of attackers to set up a phony GSM base station and intercept cellphone calls. iPhone users who are communicating over an...

Automated Skype calls spreading fake anti-virus warning

Automated Skype calls spreading fake anti-virus warning Automated Skype calls spreading fake anti-virus warning, where an automated message what I like to call a "Digital Dorothy" warns you in a semi-robotic voice that your computer's security is not up-to-date. "Attention: this is an automated...

Automated Skype calls spreading fake anti-virus warning

Automated Skype calls spreading fake anti-virus warning Automated Skype calls spreading fake anti-virus warning, where an automated message what I like to call a "Digital Dorothy" warns you in a semi-robotic voice that your computer's security is not up-to-date. "Attention: this is an automated...

USN-1204-1: Linux kernel (i.MX51) vulnerabilities

Dan Rosenberg discovered that the Linux kernel TIPC implementation contained multiple integer signedness errors. A local attacker could exploit this to gain root privileges. CVE-2010-3859 Dan Rosenberg discovered that multiple terminal ioctls did not correctly initialize structure memory. A local...

Hackers Push Sipvicious VoIP Tools In Malicious Attacks

Researchers at NSS Labs claim that they’ve spotted attacks that use Sipvicious, a common auditing tool for Voice over IP VoIP networks as part of malicious attacks aimed at taking control of vulnerable VoIP servers. The attacks are apparently aimed at taking control of VoIP servers to place...

Android Malware Found Stealing Texts, Intercepting Calls

The steady drumbeat of malware and spyware targeting the Android platform is continuing, this time with the emergence of a new variant of an Android Trojan that masquerades as a Google+ app and has the ability to not only record phone calls, but also to answer incoming calls and respond to remote...