IBM Lotus Notes Client URL Handler Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "IBM Lotus Notes...

Malware Swipes Rocket Data from Japanese space agency

Japan's space agency says it is investigating a possible leak of data about its Epsilon rocket due to a computer virus. Malware Case : The Japan Aerospace Exploration Agency said the virus, in a computer at its Tsukuba Space Centre, north-east of Tokyo, was found to be secretly collecting data an...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Design/Logic Flaw

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

CVE-2012-6044

CVE-2012-6044 affects M-Player 0.4 . A crafted MP3 file can be used by a remote attacker to cause a denial of service (crash). The entry indicates a network-exposed vulnerability with partial availability impact, and no authentication required. The provided connected documents confirm the descrip...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

CVE-2012-6044: Improper Input Validation

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Gray Hat Pyrhon by Justin Seitz

Завершился перевод книги Gray Hat Python от Justin Seitz командой r0 crew, а также M. Chumichev. Задать вопросы и полистать книгу вы можете на форуме, либо скачать pdf-версию и наслаждаться книгой на локалхосте...

Explosion a metinfo m extension background to modify any user password vulnerability-vulnerability warning-the black bar safety net

The last explosion of the metinfo a lot of loopholes, the official action soon, in the afternoon on the upgrade, which front Desk to modify any user password, and later found that a background can also, the front surface of the same, with the official said, Now upgraded to 5. 0. 4 is not yet...

Texas A&M University Cross Site Scripting

======================================================================= XSS on Texas A&M University - xyleborini site ! ======================================================================= Site: xyleborini.tamu.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

Cross site request forgery (csrf)

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669

The CVE-2012-4669 entry concerns M-Link R14.6 (before R14.6v14) and R15.1 (before R15.1v10). The vulnerability arises because the XMPP Server Dialback verification does not verify that a request was made for a Dialback response, enabling remote XMPP servers to spoof domains via responses for doma...

CVE-2012-4669: Improper Input Validation

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-2949

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

Hardcoded credentials

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

CVE-2012-2949

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

CVE-2012-2949: Undefined Security Weakness

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

ZTE Score M Android Phone Found to Have Backdoor Installed

UPDATE–An Android handset produced by Chinese manufacturer ZTE has a backdoor installed that could enable an attacker to take control of an affected device remotely and run arbitrary code. The manufacturer has acknowledged the issue in the ZTE Score M, which includes a harcoded password, and says...