16

...

Linux Kernel 'serial_multiport_struct'结构信息泄露漏洞

Bugtraq ID: 50543 Linux是一款开放源代码的操作系统。 Linux Kernel 'serialmultiportstruct'结构存在安全漏洞，允许本地攻击者获得敏感的内核信息。 Linux kernel 2.6.37-rc1 厂商解决方案 目前没有详细解决方案提供： http://www.kernel.org/ / Linux = 2.6.37-rc1 serialmultiportstruct Info Leak Exploit ./splitmilk2 leak 134514859 \m/ Linux = 2.6.37-rc1...

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns

Anonymous Hackers hack neo-Nazis website & leak personal info of 16,000 Finns Anonymous Hackers have successfully hacked the neo-Nazi website and published the database of its 16000 membership application database containing personal data of some applicants from all around the country. The hack w...

hbase-master-info NSE Script

Retrieves information from an Apache HBase Hadoop database master HTTP status page. Information gathered: Hbase version Hbase compile date Hbase root directory Hadoop version Hadoop compile date Average load Zookeeper quorum server Associated region servers Script Arguments slaxml.debug See the...

Linux Kernel 2.6.37-rc1 - serial_multiport_struct Local Information Leak

Linux Kernel 2.6.37-rc1 - serialmultiportstruct Local Information Leak / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; i...

Is .info the New .cc?

By Kurt Baumgartner In April, the .co.cc and .cz.cc sub-domains were absolutely littered with malware distributing web sites, and the unusually telling DNS registration setup on .co.cc and .cz.cc had forecast the previously upcoming Apple FakeAv. That DNS setup later led to FakeAv downloads for t...

Linux <= 2.6.37-rc1 serial_multiport_struct Local Info Leak Exploit

Exploit for linux platform in category local exploits / Linux include include include include include define DEVICE "/dev/ttyS1" int mainint argc, char argv int ret = 0; int i, fd, reservedsize; char buf; struct serialmultiportstruct buffer; printf"\m/ Linux \n", argv0; exit-1; if argc 2 if...

CVE-2010-4974

SQL injection vulnerability in info.php in BrotherScripts BS and ScriptsFeed Auto Dealer allows remote attackers to execute arbitrary SQL commands via the id parameter...

JVN#41657660: Safari for iOS vulnerable to cross-site scripting

Safari for iOS provided by Apple does not support the "attachment" value for the HTTP Content-Disposition header, resulting in a cross-site scripting vulnerability. Impact Opening a maliciously crafted file may lead to an arbitrary script being executed on the user's web browser. Solution Update...

CVE-2011-3245

The Keyboards component in Apple iOS before 5 displays the final character of an entered password during a subsequent use of a keyboard, which allows physically proximate attackers to obtain sensitive information by reading this character...

POSH - Multiple Vulnerabilities

POSH - Multiple Vulnerabilities Exploit Title: POSH = 3.1.1 Multiple Vulnerabilities Date: 10/10/2011 Author: CrashFr Software Link: http://sourceforge.net/projects/posh/ Version: 3.1.1 Tested on: Linux //----- Advisory Program : POSH 3.1.1 and prior Vendor : www.portaneo.com Homepage :...

CVE-2010-4954

SQL injection vulnerability in productreviewsinfo.php in xt:Commerce Gambio 2008 allows remote attackers to execute arbitrary SQL commands via the productsid parameter...

CVE-2011-2390

The default value of "StrictHostKeyChecking=no" has been used for kdump/ mkdumprd openssh integration. A remote malicious kdump server could use this flaw to impersonate the intended, correct kdump server to obtain security sensitive information kdump core files...

An education Station print page vulnerability squib administrator password and the Fix-vulnerability warning-the black bar safety net

The default background:/adlogin. asp Squib administrator password: In the domain of/inurl:infoPrint. asp? ArticleID=digital rear plus a space, then add the bottom of the Red statement, a carriage return can be union select 1,2,username,password,5,6,7,8,9,1 0,1 1,1 2,1 3,1 4,1 5,1 6,1 7,1 8,1 9,2...

HTC Android Vulnerability - Exposes Phone numbers, Gps, SMS, Emails etc

HTC Android Vulnerability - Exposes Phone numbers, Gps, SMS, Emails etc If you are running a HTC Android smartphone with the latest updates applied, chances are your personal data is freely accessible to any app you have given network access to in the form of full Internet permissions.This...

Information disclosure

IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to obtain configuration information via a direct request to the /server URI, which triggers a call to the phpinfo function...

CVE-2011-3580

IceWarp WebMail on IceWarp Mail Server before version 10.3.3 is affected by CVE-2011-3580, allowing remote attackers to disclose configuration/details by requesting the /server URI, triggering phpinfo. The advisory notes that the issue is fixed in 10.3.3; update to that version to remediate.

Digital College 1.1 Remote File Inclusion

Digital College v1.1 Remote File Inclusion Vulnerability Found by : kurdish hackers team C0ntact : pshela at YaHoo .com Groups : Kurd-Team site : www.kurdteam.org ======================================================= +++++++++++++++++++ Script information+++++++++++++++++...

PT-2011-4737 · WordPress · Web Minimalist 200901 Theme

Name of the Vulnerable Software and Affected Versions: Web Minimalist 200901 theme for WordPress version 1.2 and earlier Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the PATH INFO to "index.php". Recommendations: For Web Minimali...

PT-2011-4741 · Unknown · Black-Letterhead

Name of the Vulnerable Software and Affected Versions: Black-LetterHead theme version 1.5 and earlier Description: A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved by manipulating the PATH INFO to index.php. Recommendations: F...