New Approach to automatically detecting bugs and vulnerabilities in Linux

New Approach to automatically detecting bugs and vulnerabilities in Linux Australian researcher Silvio Cesare, PhD student at Deakin University has released a tool capable of automatically detecting bugs and vulnerabilities in embedded Linux libraries. Developers may "embed" or "clone" code from...

WAFP : Web Application Finger Printer Tool

WAFP : Web Application Finger Printer Tool WAFP is a Web Application Finger Printer written in ruby using a SQLite3 DB. WAFP fetches the files given by the Finger Prints from a webserver andchecks if the checksums of those files are matching to the given checksums from theFinger Prints. This way ...

Researchers Crack Siri Protocol

Researchers cracked the pride of Apple’s latest iPhone iteration yesterday, reverse-engineering the language processing, interactive personal assistant application called Siri. On their blog, the researchers from Applidium posted a demo and directions that will allow users to install and use the...

CVE-2011-2016

Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a...

WhiteHouse Gov Service - Persistent Web Vulnerabilities

Document Title: =============== WhiteHouse Gov Service - Persistent Web Vulnerabilities References: =========== Download: http://www.vulnerability-lab.com/resources/videos/314.wmv View: http://www.youtube.com/watch?v=dsxyQLCPmE Release Date: ============= 2011-11-06 Vulnerability Laboratory ID...

kernel: ipv6: make fragment identifications less predictable

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...

Ubuntu Update for linux USN-1227-1

Ubuntu Update for Linux kernel vulnerabilities USN-1227-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12271.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1227-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for linux USN-1225-1

Ubuntu Update for Linux kernel vulnerabilities USN-1225-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12251.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for linux USN-1225-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

Pizza Delivery For Mr. Blankfein? Group Outs Goldman Sachs CEO In Occupy Wall Street Protest

The ongoing Occupy Wall Street protests spilled into the digital realm, as a group linked to the Anonymous hacking collective spilled information about Goldman Sachs CEO Lloyd Blankfein, along with e-mail addresses for much of the investment bank’s senior leadership. The ongoing Occupy Wall Stree...

Ubuntu 11.04 : linux vulnerabilities (USN-1211-1)

It was discovered that the /proc filesystem did not correctly handle permission changes when programs executed. A local attacker could hold open files to examine details about programs running with higher privileges, potentially increasing the chances of exploiting additional vulnerabilities...

CVE-2011-3146

librsvg before 2.34.1 uses the node name to identify the type of node, which allows context-dependent attackers to cause a denial of service NULL pointer dereference and possibly execute arbitrary code via a SVG file with a node with the element name starting with "fe," which is misidentified as ...

PT-2011-1065 · Suse +2 · Ext4Dev-Kmp-Trace +3

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 ext4dev-kmp-trace affected versions not specified Description: The issue affects the IPv6 implementation in the Linux kernel, making it easier for remote attackers to disrupt networking by predicting Fragmen...

CVE-2011-3184

The msnhttpconnparsedata function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses, which allows remote attackers to cause a denial of service incorrect memory access and application crash via vectors involving a crafted...

CVE-2011-3262

tools/libxc/xcdombzimageloader.c in Xen 3.2, 3.3, 4.0, and 4.1 allows local users to cause a denial of service management software infinite loop and management domain resource consumption via unspecified vectors related to "Lack of error checking in the decompression loop."...

BlackBuntu V0.3 Released

BlackBuntu V0.3 Released For Blackbuntu 0.3 we are supporting both x86 and x8664 architectures.Security and Penetration Testing tools available in Blackbuntu : Information Gathering Network Mapping Vulnerability Identification Penetration Privilege Escalation Maintaining Access Radio Network...

Cross Site Scripting - Dokumentation, Analyse & Techniken

Document Title: =============== Cross Site Scripting - Dokumentation, Analyse & Techniken References: =========== https://www.vulnerability-lab.com/resources/documents/198.pdf https://de.wikipedia.org/wiki/Cross-SiteScriptingWeblinks ; Release Date: ============= 2011-07-19 Vulnerability Laborato...

CVE-2011-1875

CVE-2011-1875 is a use-after-free vulnerability in win32k.sys within kernel-mode drivers that enables local privilege escalation by exploiting incorrect driver object management. Affected systems include Windows XP SP2/SP3, Windows Server 2003 SP2, Windows Vista SP1/SP2, Windows Server 2008 Gold/...

CVE-2011-2597

The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service infinite loop via malformed packets...

WebSurgery v0.5 - Web app testing tool Released

WebSurgery v0.5 - Web app testing tool Released WebSurgery is a suite of tools for security testing of web applications. Itwas designed for security auditors to help them with the web applicationplanning and exploitation. Currently, it uses an efficient, fast and stableWeb Crawler, File/Dir...

Mozilla Prism - Stack Buffer Overflow Vulnerability

Document Title: =============== Mozilla Prism - Stack Buffer Overflow Vulnerability References: =========== View: http://www.youtube.com/watch?v=EfPMTmoD7OU Download: http://www.vulnerability-lab.com/resources/videos/217.wmv Release Date: ============= 2011-07-02 Vulnerability Laboratory ID VL-ID...