HTTP header leakage when using Opera Turbo – Opera Security Advisories

HTTP header leakage when using Opera Turbo – Opera Security Advisories OPCOM Team | February 11, 2011 Severity High Description When using Opera Turbo, pages are requested by the Opera Turbo servers, sending the relevant HTTP headers for that request. In some cases, the headers are incorrectly...

Anonymous attacks US security company !

HBGary chief Aaron Barr's Twitter account hijacked and personal details leaked in revenge for infiltration of hacking collective The loose hacker collective Anonymous says it has taken revenge on aUS security company whose principal claimed to have penetrated the group and identified some of its...

OS Identification : SNMP hrSWInstalledName

The remote operating system can be identified by querying its hrSWInstalledName object using SNMP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid51859; scriptversion"1.5"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS Identification : SNMP hrSWInstalledName...

CVE-2010-4255

The fixuppagefault function in arch/x86/traps.c in Xen 4.0.1 and earlier on 64-bit platforms, when paravirtualization is enabled, does not verify that kernel mode is used to call the handlegdtldtmappingfault function, which allows guest OS users to cause a denial of service host OS BUGON via a...

CVE-2011-0427

Heap-based buffer overflow in Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unspecified vectors...

CVE-2011-0488

CVE-2011-0488 is a stack-based buffer overflow in NTWebServer.exe (InduSoft NTWebServer) shipped with Advantech Studio 6.1 and InduSoft Web Studio 7.0. The vulnerability is triggered by requests > 2048 bytes to TCP port 80, allowing remote attackers to cause a denial of service (daemon crash) ...

OpenVAS TCP scanner

This plugin is a classical TCP port scanner It shall be reasonably quick even against a firewalled target. Once a TCP connection is open, it grabs any available banner for the service identification plugins Note that TCP scanners are more intrusive than SYN half open scanners. OpenVAS Vulnerabili...

Cambio 0.5a - Cross-Site Request Forgery

Vulnerability ID: HTB22768 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincambio.html Product: Cambio Vendor: Joram van den Boezem http://www.cambiocms.org/ Vulnerable Version: 0.5a nightly r37 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: CSRF...

Millions of Honda/Acura owners affected by hacked Honda database !

The Japanese motor company, Honda, today issued an alert to U.S. customers concerning a security breach resulting from a hacked database. The database that was managed by a third-party marketing group contained confidential information, including names of car owners, personal e-mail addresses, an...

Google Urchin 5.7.03 - Local File Inclusion

Google Urchin 5.7.03 - Local File Inclusion Summary: Google Urchin is vulnerable to a Local File Include LFI vulnerability that allows arbitrary reading of files. Confirmed in version 5.7.03 running on Linux. Issue may exist in other versions as well. Analysis: During normal usage, Google Urchin...

Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection

The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...

OpenVZ Guest Detection

/proc/userbeancounters could be read. This file provides information to the guest operating system in OpenVZ containers. TRUSTED...

CVE-2001-0499

creationtimestamp| type| source ---|---|--- 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16340 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/oracle/tnsarguments.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2008-2240

creationtimestamp| type| source ---|---|--- 2010-11-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16697 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/lotus/dominohttpacceptlanguage.rb 2025-02-06...

OS Identification : SSL Certificates

This plugin attempts to identify the operating system by examining a hard-coded SSL certificate issued by the device manufacturer. TRUSTED...

CVE-2010-3703

The PostScriptFunction::PostScriptFunction function in poppler/Function.cc in the PDF parser in poppler 0.8.7 and possibly other versions up to 0.15.1, and possibly other products, allows context-dependent attackers to cause a denial of service crash via a PDF file that triggers an uninitialized...

BBcode XSS in MiniBB

Vulnerability ID: HTB22670 Reference: http://www.htbridge.ch/advisory/bbcodexssinminibb.html Product: MiniBB Vendor: MiniBB.com http://www.minibb.com/ Vulnerable Version: 2.5 Vendor Notification: 21 October 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor Alerted,...

Inside Google's Anti-Malware Operation

TORONTO–A Google malware researcher gave a rare peek inside the company’s massive anti-malware and anti-phishing efforts at the SecTor conference here, and the data that the company has gathered shows that the attackers who make it their business to infect sites and exploit users are adapting the...

CVE-2000-0248

creationtimestamp| type| source ---|---|--- 2010-10-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16858 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/piranhapasswdexec.rb 2025-02-06 03:13:37+00:00| seen|...

CVE-2010-4142

creationtimestamp| type| source ---|---|--- 2010-10-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15259 2010-10-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15337 2010-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16384 2010-11-30...