Lucene search
+L

4197 matches found

The Coalfire Blog
The Coalfire Blog
•added 2012/09/11 12:14 p.m.•16 views

My DEFCON social engineering talk and DerbyCon

This year has been a year of firsts for me and for Coalfire. I was recently hired to my first Information security job as a penetration tester for Coalfire Labs, the forensic and app/network testing side of Coalfire. Many of the Coalfire Labs team attended DEFCON in Las Vegas in early August.. No...

1.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2012/09/08 4:05 p.m.•16 views

BASTARDS!!

Last month, those assholes in the California State Assembly passed a resolution urging state educational institutions to more aggressively crack down on criticism of the State of Israel on campuses, which the resolution defines as "anti-Semitism." The anti-democratic resolution is the latest step...

6.7AI score
SaveExploits0
Fedora
Fedora
•added 2012/08/19 12:26 a.m.•26 views

[SECURITY] Fedora 17 Update: redeclipse-1.2-12.fc17

A single-player and multi-player first-person ego-shooter, built on Cube Engine 2, which lends itself toward a balanced gameplay, completely at the control of map makers, while maintaining a general theme of agility in a variety of environments. Features: Balanced gameplay, with a general theme o...

2.5AI score
SaveExploits0
Debian CVE
Debian CVE
•added 2012/06/27 10:00 a.m.•39 views

CVE-2012-2829

Removed by vendor...

7.5CVSS9.4AI score0.01464EPSS
SaveExploits0
Cvelist
Cvelist
•added 2012/05/24 6:00 p.m.•35 views

CVE-2011-3105

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

6.8AI score0.01784EPSS
SaveExploits1References15
RedHat Linux
RedHat Linux
•added 2012/04/10 7:54 p.m.•11 views

freetype: insufficient checking of first outline point in TTF parser (#35689)

FreeType before 2.4.9, as used in Mozilla Firefox Mobile before 10.0.4 and other products, allows remote attackers to cause a denial of service invalid heap write operation and memory corruption or possibly execute arbitrary code via a crafted TrueType font...

9.3CVSS6.2AI score0.04857EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2012/03/22 4:55 p.m.•2 views

CVE-2011-3050

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

6.8CVSS8.6AI score0.02135EPSS
SaveExploits1References18
UbuntuCve
UbuntuCve
•added 2012/03/22 12:00 a.m.•39 views

CVE-2011-3050

Use-after-free vulnerability in the Cascading Style Sheets CSS implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element...

6.8CVSS7.3AI score0.02135EPSS
SaveExploits1References4
ThreatPost
ThreatPost
•added 2012/03/16 4:22 p.m.•14 views

Wired: Courts Back Government After Tech Company Challenges National Security Letter Gag Rule

Wired’s ThreatLevel blog is digging into the story of technology companies pushing back against the government’s use of super-secret National Security Letters NSLs to collect information on “persons of interest” to the FBI earlier this year. According to the Wired account, an unnamed company – ve...

7AI score
SaveExploits0References3
RedHat Linux
RedHat Linux
•added 2012/03/06 6:34 p.m.•14 views

kernel: jbd/jbd2: invalid value of first log block leads to oops

The cleanupjournaltail function in the Journaling Block Device JBD functionality in the Linux kernel 2.6 allows local users to cause a denial of service assertion error and kernel oops via an ext3 or ext4 image with an "invalid log first block value."...

2.1CVSS7.3AI score0.00468EPSS
SaveExploits2References4
The Hacker News
The Hacker News
•added 2012/01/19 8:21 p.m.•13 views

#SOPA - The Hacker News say "NO WAY"

SOPA - The Hacker News say "NO WAY" Get mad and take action as you read how your internet privacy and freedoms are about to be taken away in our editor Patti Galle's article on SOPA…….coming to your personal rights soon. The Stop Online Piracy Act SOPA, or H.R. 3261, is a bill that was introduced...

6.6AI score
SaveExploits0
attackerkb
attackerkb
•added 2012/01/15 3:55 a.m.•12 views

CVE-2011-5066

The SibRaRecoverableSiXaResource class in the Default Messaging Component in IBM WebSphere Application Server WAS 6.1 before 6.1.0.41 does not properly handle a Service Integration Bus SIB dump operation involving the First Failure Data Capture FFDC introspection code, which allows local users to...

2.1CVSS5.5AI score0.00287EPSS
SaveExploits0References3
ThreatPost
ThreatPost
•added 2011/11/03 7:49 p.m.•15 views

Government's Cloud Audit Program Falls Behind Schedule

In a speech on Wednesday, Federal Chief Information Officer Steven VanRoekel said that a federal plan for qualifying and providing security audits on private sector cloud providers will become mandatory for any agency that wanted to contact with third party cloud providers, according to a report ...

0.4AI score
SaveExploits0References4
securityvulns
securityvulns
•added 2011/10/31 12:00 a.m.•92 views

RE: [CVE-2011-2569] Cisco Nexus OS (NX-OS) - Command "injection" / sanitization issues.

Hello, This is Paul Oxman with Cisco PSIRT. Please confirms the vulnerability reported by Peter Adkins, and has published an Intellishield response http://tools.cisco.com/security/center/viewAlert.x?alertId=24458 Additional information below. For current updates to Cisco PSIRT response, please se...

6.8CVSS0.3AI score0.00327EPSS
SaveExploits1
OSV
OSV
•added 2011/08/19 12:00 a.m.•12 views

UBUNTU-CVE-2011-3170

The gifreadlzw function in filter/image-gif.c in CUPS 1.4.8 and earlier does not properly handle the first code word in an LZW stream, which allows remote attackers to trigger a heap-based buffer overflow, and possibly execute arbitrary code, via a crafted stream, a different vulnerability than...

5.1CVSS6.3AI score0.03948EPSS
SaveExploits0References3
OSV
OSV
•added 2011/05/16 5:55 p.m.•11 views

DEBIAN-CVE-2011-0419

Stack consumption vulnerability in the fnmatch implementation in aprfnmatch.c in the Apache Portable Runtime APR library before 1.4.3 and the Apache HTTP Server before 2.2.18, and in fnmatch.c in libc in NetBSD 5.1, OpenBSD 4.8, FreeBSD, Apple Mac OS X 10.6, Oracle Solaris 10, and Android, allows...

4.3CVSS6.5AI score0.30406EPSS
SaveExploits5References1
Positive Technologies
Positive Technologies
•added 2011/05/12 12:00 a.m.•12 views

PT-2011-3236 · Apache +1 · Apache Tomcat +2

Apache Tomcat 7.0.12 and 7.0.13 processes the first request to a servlet without following security constraints that have been configured through annotations, which allows remote attackers to bypass intended access restrictions via HTTP requests. NOTE: this vulnerability exists because of an...

5.8CVSS4.5AI score0.0654EPSS
SaveExploits1References17
Tenable Nessus
Tenable Nessus
•added 2011/05/05 12:00 a.m.•39 views

openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)

Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...

9.3CVSS6.4AI score0.10731EPSS
SaveExploits0References244
zdt
zdt
•added 2011/04/23 12:00 a.m.•30 views

First Escort Marketing CMS Multiple SQL Injection Vunerabilities

Exploit for php platform in category web applications PoC Title: First Escort Marketing CMS Multiple SQL Injection Vunerabilities Platform: php Date: 18.04.2011 Author: NoNameMT Software Link: http://www.first-escort-marketing.co.uk/agencies.html Price: 599 £ Tested on: Windows 7 Mail:...

7.1AI score
SaveExploits0
The Hacker News
The Hacker News
•added 2011/02/25 6:52 a.m.•27 views

An Open Letter to PayPal from Anonymous Hackers !

An Open Letter to PayPal from Anonymous Hackers ! Just Now Anonymous Hackers Publish and open letter to Paypal , The Copy of Letter is as Given Below : Dear PayPal staff, In recent news reference below we took notice that you froze the account of Courage to Resist, the organization raising funds...

6.8AI score
SaveExploits0
Rows per page
Query Builder