Geinimi Trojan targets Android devices !

A data-stealing Trojan affecting Android devices has emerged in China. The Geinimi Trojan sends location co-ordinates, unique device identifiers, and a list of installed apps on the infected device to a remote server. Additionally, it can independently download applications and prompts the user t...

2011 will be Stuxnet-like viruses year !

Known to successfully slow down the Iranian nuclear program, the Stuxnet cyber worm is now expected to spawn variations that are predicted to disrupt non-traditional IT targets, from power grids to electronic voting stations. The Stuxnet cyber worm is a very complex, efficient and stealthy string...

WSO 2.5 (web shell)

Данная утилита предоставляет веб-интерфейс для удаленной работы c операционной системой и ее службами/демонами. Описание возможностей / особенности: Авторизация на cookies Информация о сервере Файловый менеджер Копирование, переименование, перемещение, удаление, чмод, тач, создание файлов и папок...

Exim MTA string_format Remote Code Execution (CVE-2010-4344)

The Exim mail server is a full featured mail transfer agent MTA used in Unix-like platforms. It contains implementations of SMTP server for incoming messages as well ,as a SMTP or LMTP client for incoming email. A heap buffer overflow vulnerability has been reported in Exim Mail Transfer Agent MT...

Fedora Update for libmikmod FEDORA-2010-13673

Check for the Version of libmikmod OpenVAS Vulnerability Test Fedora Update for libmikmod FEDORA-2010-13673 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CVE-2010-3836

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

MySQL: pre-evaluating LIKE arguments in view prepare mode causes crash (MySQL Bug#54568)

MySQL 5.0 before 5.0.92, 5.1 before 5.1.51, and 5.5 before 5.5.6 allows remote authenticated users to cause a denial of service assertion failure and server crash via vectors related to view preparation, pre-evaluation of LIKE predicates, and IN Optimizers...

Generic Web Application Unix Command Execution

$Id: genericexec.rb 10642 2010-10-11 19:30:57Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities

Binary data 5677.prm...

MySQL Community Server 5.1 < 5.1.51 Multiple Denial of Service Vulnerabilities

Binary data 801142.prm...

Fedora Update for libmikmod FEDORA-2010-13702

Check for the Version of libmikmod OpenVAS Vulnerability Test Fedora Update for libmikmod FEDORA-2010-13702 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

[SECURITY] Fedora 14 Update: libmikmod-3.2.0-11.beta2.fc14

libmikmod is a library used by the mikmod MOD music file player for UNIX-like systems. Supported file formats include MOD, STM, S3M, MTM, XM, ULT and IT...

Ingres Database Communications Server Component Heap Buffer Overflow (CVE-2007-3334)

Ingres developed a relational database product named Ingres Database. Ingres Database is made available for both Windows and Unix-like platforms. The product is embedded by other software vendors such as Computer Associates CA. A heap buffer overflow vulnerability exists in Ingres Database...

Facebook 'Like-jacking' Scams Expand

Facebook attacks that force users to unwittingly endorse scam pages keep spreading, researchers say. Attacks have now circulated that cause users to recommend pages promising naked pictures of alternative rock diva Hayley Williams or the phone number of heart-throb singer Justin Bieber. Read the...

Ingres Database iidbms Heap Overflow

Ingres Database is a relational database product available for both Windows and Unix-like platforms. A vulnerability has been reported in Ingres Database that could be exploited by remote attackers to compromise a vulnerable system. The vulnerability is due to insufficient boundary checking in th...

i-Net Online Community - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in i-Net Online Community site script Vendor:http://www.i-netsolution.com/ Author:Sid3^effects aKa haRi Description : i-Net Online Community site script is an online social networking software that allows you to start your own site just like Myspace, Hi5 and Facebook...

Ding Feng enterprises smart built Station system injection search injection vulnerability analysis and exploit-vulnerability warning-the black bar safety net

Author: L4nk0rMo if you are asked Yesterday the use of this system to get a webshell, but is the use of download the default database, the latter the discoverer of the system interface's also good, by the look of IT security. This article on its search injection vulnerability simple analysis and...

snmp-netstat NSE Script

Attempts to query SNMP for a netstat like output. The script can be used to identify and automatically add new targets to the scan by supplying the newtargets script argument. Script Arguments max-newtargets, newtargets See the documentation for the target library. creds.service, creds.global See...

Update Protection against Zeus Web Server SSL2_Client_Hello Buffer Overflow

Zeus Web Server is a web server for Unix and Unix-like platforms. A buffer overflow was detected in Zeus Web Server SSL2 implementation SSL2CLIENTHELLO...

X.Org X Font Server Handlers Integer Overflow (CVE-2007-4568)

X.Org foundation's X Window System commonly X11 or X Window is a networking and display protocol which provides windowing on bitmap displays. It provides the standard toolkit and protocol to build graphical user interfaces GUIs on Unix-like operating systems and OpenVMS, and is supported by almos...