140 matches found
Joomla! Component Fabrik - SQL Injection
$$ +==============================================================+ | Joomla Component comFabrik SQL Injection Vulnerability | +==============================================================+ Vendor : http://fabrikar.com/ Author : Mkr0x Home : www.kernel.ge E-mail : [email protected] Place :...
Short Passwords Open To Brute Force Attacks
A password of less than seven characters will soon be “hopelessly inadequate” even if it contains symbols as well as alphanumerical characters, according to computer scientists at the Georgia Tech Research Institute. Read the full article. The Register...
Unfixed XSS vulnerability at www.civil.ge
Security researcher Sony, has submitted on 08/07/2010 a cross-site-scripting XSS vulnerability affecting www.civil.ge, which at the time of submission ranked 156814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010. It is currently...
Corporate Identity Theft Is On the Rise
Just days after Colorado officials warned businesses about scammers who are forging corporate identities to commit financial fraud, an official in Georgia said the same has been happening in that state as well. Read the full article. Computerworld...
Kraken-Based Botnet Makes A Comeback
Since April, a son-of-Kraken botnet has infected an estimated 318,058 machines – about half as big as the original Kraken was at its height in the middle of 2008, according to Paul Royal, a research scientist at the Georgia Tech Information Security Center. Read the full article. The Register...
Southern Cities Have High Malware Rates
An analysis of more than one million malware infections in the United States shows Atlanta, Georgia and Birmingham, Alabama have the highest malware infection rates in the United States. Read the full article. Help Net Security...
AT&T Flaw Let Facebook Users See Accounts
A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers’ accounts with full access to troves of private information. Read the full article. Associated Press...
Spam, phishing and online scams: A network view
In this Google Tech Talk, Nick Feamster, an assistant professor at Georgia Tech, dives into the murky world of phishing and online scams as they relate to the epidemic of spam...
Unfixed XSS vulnerability at www.georgiaencyclopedia.org
Security researcher xylitol, has submitted on 28/10/2008 a cross-site-scripting XSS vulnerability affecting www.georgiaencyclopedia.org, which at the time of submission ranked 344719 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. I...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0096
Multiple buffer overflows in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a 1 a long username, which triggers an overflow in the log function; or 2 a long password...
Buffer overflow
Multiple buffer overflows in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a 1 a long username, which triggers an overflow in the log function; or 2 a long password...
CVE-2008-0096
The CVE-2008-0096 entry concerns Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to 7.01.0003. It describes multiple buffer overflows in the log function that can be triggered by (1) a long username or (2) a long password, allowing remote attackers to execute arbitrary code. The connected so...
CVE-2008-0097
Format string vulnerability in the log function in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the username field, as demonstrated by a certain LoginPassword message...
CVE-2008-0097
CVE-2008-0097 stems from a format string vulnerability in the log function of Georgia SoftWorks SSH2 Server (GSW_SSHD) versions up to and including 7.01.0003. The flaw allows remote attackers to execute arbitrary code by providing format string specifiers in the username field, as illustrated by ...
CVE-2008-0096
Multiple buffer overflows in Georgia SoftWorks SSH2 Server GSWSSHD 7.01.0003 and earlier allow remote attackers to execute arbitrary code via a 1 a long username, which triggers an overflow in the log function; or 2 a long password...
Georgia SoftWorks SSH server multiple security vulnerabilities
Format string vulnerabilities and buffer overflows...
Multiple vulnerabilities in Georgia SoftWorks SSH2 Server 7.01.0003
Luigi Auriemma Application: Georgia SoftWorks SSH2 Server GSWSSHD http://www.georgiasoftworks.com/prodssh2/ssh2server.htm Versions: = 7.01.0003 Platforms: Windows Bugs: A format string in the log function B buffer-overflow in the log function C buffer-overflow in the handling of the password...
Georgia SoftWorks Secure Shell Server 7.1.3 - Multiple Remote Code Execution Vulnerabilities
source: https://www.securityfocus.com/bid/27103/info Georgia SoftWorks Secure Shell Server is prone to multiple remote code-execution vulnerabilities: - A format-string vulnerability - Two buffer-overflow vulnerabilities. Successfully exploiting these issues allows remote attackers to execute...
Georgia SoftWorks Secure Shell Server 7.1.3 - Multiple Remote Code Execution Vulnerabilities
Georgia SoftWorks Secure Shell Server 7.1.3 - Multiple Remote Code Execution Vulnerabilities source: https://www.securityfocus.com/bid/27103/info Georgia SoftWorks Secure Shell Server is prone to multiple remote code-execution vulnerabilities: - A format-string vulnerability - Two buffer-overflow...