SUSE-SU-2015:0944-1 Security update for Xen

XEN has been updated to fix various bugs and security issues: CVE-2013-0153: XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device...

[Pentoo 2013.0 RC1.1] Security-Focused live CD based on Gentoo

Pentoo is a security-focused live CD based on Gentoo It's basically a Gentoo install with lots of customized tools, customized kernel, and much more. Pentoo 2013.0 RC1.1 features : Changes saving CUDA/OpenCL Enhanced cracking software John the ripper Hashcat Suite of tools Kernel 3.7.5 and all...

Kayako Fusion 4.51.1891 Cross Site Scripting

Title: ====== Kayako Fusion v4.51.1891 - Multiple Web Vulnerabilities Date: ===== 2013-01-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=824 ID: SWIFT-3119 URL: http://dev.kayako.com/browse/SWIFT-3119 VL-ID: ===== 824 Common Vulnerability Scoring System:...

Anonymous threatens to Hack Obama's State of the Union broadcast

The hacktivist group Anonymous says it's planning to block all live streams of President Obama's State of the Union address Tuesday night, in an operation entitled "Operation SOTU". "We reject the State of the Union. We reject the authority of the President to sign arbitrary orders and bring...

CVE-2012-6451 Authentication Bypass in LOREX IP Cameras

Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypass Vulnerable Firmware Versions: 030312 and earlier Tested Firmware Version: 030312 Fixed Firmware Version: 030405 Solution Status: Fixed by Vendor Vendor Notification: December 22, 20...

Easy Live Shop System - SQL Injection

+-------------------------------------------------- | Easy Live Shop System SQL Injection Vulnerability | By cr4wl3r http://bastardlabs.info | http://bastardlabs.info/news/?id=85 | Tested : Win 7 +-------------------------------------------------- Poc :...

Easy Live Shop System - SQL Injection

Easy Live Shop System - SQL Injection +-------------------------------------------------- | Easy Live Shop System SQL Injection Vulnerability | By cr4wl3r http://bastardlabs.info | http://bastardlabs.info/news/?id=85 | Tested : Win 7 +-------------------------------------------------- Poc :...

Easy Live Shop System SQL Injection Vulnerability

Easy Live Shop System suffers from a remote SQL injection vulnerability. +-------------------------------------------------- | Easy Live Shop System SQL Injection Vulnerability | By cr4wl3r http://bastardlabs.info | http://bastardlabs.info/news/?id=85 | Link :...

Easy Live Shop System SQL Injection

+-------------------------------------------------- | Easy Live Shop System SQL Injection Vulnerability | By cr4wl3r http://bastardlabs.info | http://bastardlabs.info/news/?id=85 | Link : http://www.media-products.de/easy-live-shop-system-p-840.html | Demo :...

Lorex LNC116 / LNC104 IP Camera Authentication Bypass

Product: Lorex LNC116 and LNC104 IP Cameras Vendor: LOREX Technology Inc. Vulnerability Type: Authentication Bypass Vulnerable Firmware Versions: 030312 and earlier Tested Firmware Version: 030312 Fixed Firmware Version: 030405 Solution Status: Fixed by Vendor Vendor Notification: December 22, 20...

Moderate: Red Hat Security Advisory: rhevm 3.1.2 security and bug fix update

Updated rhevm packages that fix two security issues and various bugs are now available. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are available for each...

[SECURITY] Fedora 17 Update: ettercap-0.7.5-4.fc17.1.20120906gitc796e5

Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st analys...

[SECURITY] Fedora 16 Update: ettercap-0.7.5-3.fc16.1.20120906gitc796e5

Ettercap is a suite for man in the middle attacks on LAN. It features sniffing of live connections, content filtering on the fly and many other interesting tricks. It supports active and passive dissection of many protocols even ciphered ones and includes many feature for network and ho st analys...

Faux, Hacked Apps Continue to Litter Google Play Marketplace, Developer Alleges

Phony, potentially malicious apps are continuing to make their way into Google’s Play marketplace, triggering debate over whether applications are being properly vetted for adhering to the company’s marketplace policies. Developers at the Root Uninstaller Team have called out another app publishe...

MyBB editpost.php SQL Injection

MyBB...

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection

MyBB 1.6.9 - editpost.php?posthash Blind SQL Injection MyBB...

MyBB HM My Country Flags - SQL Injection

Exploit title: HM My Country Flags SQL Injection Author: JoinSe7en Contact: join7 +at+ riseup.net Tested on: Linux Category: Web Applications Software link: http://mods.mybb.com/view/hm-my-country-flags HM My Country Flags has a SQL Injection vulnerability. If we go to a thread we'll see a countr...

xen to fix various denial of service issues (important)

XEN was updated to fix various denial of service issues. - bnc789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability XSA-26 - bnc789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs XSA-27 - bnc789940 - CVE-2012-5512: xen:...

xen to fix various denial of service issues (important)

This update of XEN fixes various denial of service bugs. - bnc789945 - CVE-2012-5510: xen: Grant table version switch list corruption vulnerability XSA-26 - bnc789944 - CVE-2012-5511: xen: Several HVM operations do not validate the range of their inputs XSA-27 - bnc789940 - CVE-2012-5512: xen:...

MyBB Profile Xbox Live ID SQL Injection Vulnerability

Profile Xbox Live ID allows you to add your xbl gamertag to your profile. Title: MyBB Profile Xbox Live ID SQL Injection Vendor: http://mods.mybb.com/view/profile-xbox-live-id Author: Josephvb10 Exploit Author: n3urot0xin Code: function profilexliupdate$xli global $mybb; if isset$mybb-input'xli'...