[SECURITY] Fedora 12 Update: qt-4.6.2-8.fc12

Qt is a software toolkit for developing applications. This package contains base tools, like string, xml, and network handling...

Using Live Data In Development Is Risky

Those charged with the care and feeding of database information stores, beware: A new statistic tucked into a comprehensive study of financial services firms’ data protection policies shows that even at the most security-aware organizations, application developers still use live data in their...

Zeus Trojan Now Has Hardware Licensing Scheme

The authors of the Zeus bot client, perhaps the most popular and pervasive piece of malware of its kind right now, have taken an extraordinary step to protect their creation: inserting a hardware-based licensing scheme into the Trojan. This represents a significant leap in the sophistication and...

PHP tempnam()函数safe_mode验证绕过安全限制漏洞

BUGTRAQ ID: 38431 PHP是广泛使用的通用目的脚本语言，特别适合于Web开发，可嵌入到HTML中。 当目录路径没有以“/”结束时PHP的tempnam函数中没有正确的执行safemode验证，攻击者可以绕过安全限制获得对目录的读写访问。 PHP PHP 5.3.x PHP PHP 5.2.x 厂商补丁： PHP --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://svn.php.net/viewvc/php/php-src/branches/PHP53/ext/session/session.c?view=log...

RHEL 4 / 5 : java-1.5.0-ibm (RHSA-2010:0130)

Updated java-1.5.0-ibm packages that fix a security issue are now available for Red Hat Enterprise Linux 4 Extras and 5 Supplementary. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The IBM 1.5.0 Java release includes the IBM Java 2 Runtime...

[SECURITY] Fedora 11 Update: openldap-2.4.15-7.fc11

OpenLDAP is an open source suite of LDAP Lightweight Directory Access Protocol applications and development tools. LDAP is a set of protocols for accessing directory services usually phone book style information, but other information is possible over the Internet, similar to the way DNS Domain...

Fedora Update for eclipse FEDORA-2010-1936

Check for the Version of eclipse OpenVAS Vulnerability Test Fedora Update for eclipse FEDORA-2010-1936 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

A Chat With Adobe's Brad Arkin

Adobe has been in the security spotlight for some time now, and in an effort to give our readers a better perspective on the company’s efforts to improve the security of its products, Threatpost had a live chat with Brad Arkin, director of product security and privacy at Adobe, on Feb. 24. This i...

SilverStripe CMS Running in Development Mode

The SilverStripe CMS install hosted on the remote web server appears to be running in development mode. When running in development mode, debugging tools are accessible without authentication, which could enable an attacker to gain sensitive information relating to the application. %NASLMINLEVEL...

Sun Java Runtime Environment Type1 Font Parsing Integer Overflow (CVE-2009-1099)

Java Technology is a programing platform developed by Sun Microsystems which aims to provide a system for developing and deploying cross-platform applications. Java is used in a wide variety programs that are deployed on personal computers as well as embedded devices and cell phones. Java...

MediaCoder v0.7.3.4605 Local Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ==================================================== MediaCoder v0.7.3.4605 Local Buffer Overflow Exploit ==================================================== / Download: http://www.mediacoderhq.com/download.htm Compilation:...

[SECURITY] Fedora 11 Update: chmsee-1.0.1-15.fc11

A gtk2 chm document viewer. It uses chmlib to extract files. It uses gecko to display pages. It supports displaying multilingual pages due to gecko. It features bookmarks and tabs. The tabs could be used to jump inside the chm file conveniently. Its UI is clean and handy, also is well localized. ...

Taking Vendors to Task on Security Flaws

A loose consortium of security experts from more than 30 organizations today called on enterprises to exert more pressure on their software vendors to ensure that they use secure code development practices. Read the full article. Computerworld...

[SECURITY] Fedora 11 Update: gambas-1.0.19-12.fc11

Gambas is a free development environment based on a Basic interpreter with object extensions, like Visual Basic but it is NOT a clone !. With Gambas, you can quickly design your program GUI, access MySQL or PostgreSQL databases, pilot KDE applications with DCOP, translate your program into many...

[SECURITY] Fedora 12 Update: gambas-1.0.19-12.fc12

Gambas is a free development environment based on a Basic interpreter with object extensions, like Visual Basic but it is NOT a clone !. With Gambas, you can quickly design your program GUI, access MySQL or PostgreSQL databases, pilot KDE applications with DCOP, translate your program into many...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow !/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except:...

Apple iPhone / iPod My DBLite Edition Denial Of Service

!/usr/bin/python Apple Iphone/Ipod - My DBLite Edition Remote 0day DOS exploit Found by: Jason Bowes - admin @ blue-dogz.com App Homepage: www.xenugo.co Price: Free Download: From the app store use your itunes account Tested on: Iphone 3GS - firmware 3.1.2 What's up to slicc1 Advisory: print "+...

EasyFTP Server 1.7.0.2 - (Authenticated) Buffer Overflow (PoC)

EasyFTP Server 1.7.0.2 - Authenticated Buffer Overflow PoC !/usr/bin/python Title: EasyFtp Server v1.7.0.2 Post-Authentication BoF PoC From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Hat's off to dookie2000ca Date Found: 13/02/2010 Developer contacted: 14/02/201...

Wireshark 1.2.5 - LWRES getaddrbyname Buffer Overflow

!/usr/bin/env python Wireshark 1.2.5 LWRES getaddrbyname stack-based buffer overflow Discovered by babi Reference: http://www.exploit-db.com/exploits/11288 Exploit Dev by Nullthreat & Pure|Hate import socket, sys try: host = sys.argv1 except: print "usage: " + sys.argv0 + " " exit2 port = 921 add...

Blue Dove Word Press Development Sql Injection Vulnerability

Exploit for unknown platform in category web applications ===================================== Blue Dove Sql Injection Vulnerability ===================================== .:. Bug Type : Sql Injection .:. Dork : "powered by Blue Dove Web Design" === Exploit ===...