Microsoft SQL Server - Payload Execution (via SQL Injection) (Metasploit)

$Id: mssqlpayloadsqli.rb 11730 2011-02-08 23:31:44Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Code injection

The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...

CVE-2011-0739

The deliver function in the sendmail delivery agent lib/mail/network/deliverymethods/sendmail.rb in Ruby Mail gem 2.2.14 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in an e-mail address...

CVE-2011-0739

CVE-2011-0739 affects the Ruby Mail gem (2.2.14 and earlier). The root cause is the deliver() path in the sendmail delivery method (lib/mail/network/delivery_methods/sendmail.rb), where shell metacharacters in an e-mail address can be injected to execute arbitrary commands. Public references conf...

Hackers will not be deterred by UK cyber defences !

Military "cyber weaponry" will become commonplace this century, but it will be unlikely to deter attacks by "hacktivists" and criminal gangs, and could easily be used for state-sponsored cyber attacks instead, the Organisation for Economic Co-operation and Development warns. The British authors o...

Microsoft SQL Server - Payload Execution (Metasploit)

$Id: mssqlpayload.rb 11392 2010-12-21 20:36:34Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Maildrop: privilege escalation

Background maildrop is the mail filter/mail delivery agent that is used by the Courier Mail Server. Description Christoph Anton Mitterer reported that maildrop does not properly drop its privileges when run as root. Impact A local attacker could create a specially crafted .mailfilter file, possib...

CVE-2010-1577

The CVE-2010-1577 vulnerability affects Cisco Content Delivery System CDS Internet Streamer (Cisco CDS) Web Server in CDS 2.2.x, 2.3.x, 2.4.x, and 2.5.x prior to 2.5.7. It is a directory traversal flaw that allows an unauthenticated, remote attacker to read arbitrary files via a specially crafted...

Automatic Drive-by Download

Added: 07/23/2010 Background This tool waits for client connections, and then gathers information about the operating system and installed software on the client. Next, it chooses the latest and most reliable client exploit for the client's operating system and installed software, and delivers th...

Cisco Plugs Code Execution Hole in CDS Internet Streamer

Cisco has shipped a critical bulletin to warn about a serious security hole in the Cisco Internet Streamer application, which is part of the Cisco Content Delivery System. In an advisory, Cisco warned that exploitation of this vulnerability may allow a remote, unauthenticated attacker to obtain...

Exim < 4.72 Multiple Vulnerabilities

The remote host is running Exim, a message transfer agent SMTP. According to the version number in its banner, the installed version of Exim is earlier than 4.72 and thus potentially affected by one or both of the following vulnerabilities : - An error when handling hardlinks within the mail...

Exim < 4.72 Multiple Vulnerabilities

Binary data 5557.prm...

Multiple vulnerabilities in Deliver

================================== Deliver, multiple vulnerabilites March 24, 2010 CVE-2010-0439 ================================== ==Description== Deliver http://deliver.sourceforge.net/, a mail delivery program installed suid root as /usr/bin/deliver, is vulnerable to several race conditions...

Search Ads Distributing Malware

Malware that exploits holes in popular applications is being delivered by big ad delivery platforms including those run by Yahoo, Fox, and Google, according to researchers. Read the full article. CNet...

[SECURITY] Fedora 11 Update: maildrop-2.4.0-12.fc11

maildrop is the mail filter/mail delivery agent that's used by the Courier Mail Server. This is a standalone build of the maildrop mail filter that can be used with other mail servers. maildrop is a replacement for your local mail delivery agent. maildrop reads a mail message from standard input,...

[SECURITY] Fedora 12 Update: maildrop-2.4.0-12.fc12

maildrop is the mail filter/mail delivery agent that's used by the Courier Mail Server. This is a standalone build of the maildrop mail filter that can be used with other mail servers. maildrop is a replacement for your local mail delivery agent. maildrop reads a mail message from standard input,...

SpamAssassin Malformed Email Header Denial Of Service (CVE-2005-1266)

SpamAssassin is an open source Email filtering product developed using Perl. The product supports a number of filtering methods such as header fields and body phrase identification, white and black list rules. The product is also embedded in numerous commercial anti-spam products from a broad ran...

[SECURITY] Fedora 11 Update: rubygem-actionmailer-2.3.2-3.fc11

Makes it trivial to test and deliver emails sent from a single service laye r...

The Ultimate Guide to Scareware Protection

Throughout the last two years, scareware fake security software, quickly emerged as the single most profitable monetization strategy for cybercriminals to take advantage of. Due to the aggressive advertising practices applied by the cybercrime gangs, thousands of users fall victim to the scam on ...

Sql injection

SQL injection vulnerability in 2flygift.php in 2FLY Gift Delivery System 6.0 allows remote attackers to execute arbitrary SQL commands via the gameid parameter in a content action...