Cisco Nexus 5000 and 3000 Series Switches Access Control List Bypass Vulnerability

...

Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Apache HTTPd Range Header Denial of Service Vulnerability Advisory ID: cisco-sa-20110830-apache Revision 1.0 For Public Release 2011 August 30 1600 UTC GMT Summary ======= The Apache HTTPd server contains a denial of service...

Nexus Nepall SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Nexus Nepall directory.php?cid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.nexusnepal.com/ Persian Gulf 4 Ever! Exploite: www.victim.com/directory.php?cid=SQL Example...

Android NFC Bug Could Be First Of Many

Google is working on a fix for a newly discovered vulnerability affecting Nexus S Android phones that could cause applications on the phone to crash using incorrectly formated Near Field Communications NFC transactions. The issue, which will be discussed at an upcoming technical conference on...

New WhisperMonitor Tool Gives Users Control of Android Security and Privacy Options

As the concerns surrounding the data collected and transmitted by mobile apps continue to grow, Whisper Systems, a small start-up, has released WhisperMonitor, a free tool that enables owners of Android phones to control exactly what each of their installed apps can do and monitor what data is se...

Device-Level Encryption Comes to Android

As attacks on mobile devices such as iPhones, iPads, Android phones and tablets have surged in recent months, security researchers and customers have continued to look for ways to lock down their devices and protect the data they store on them. Whisper Systems has jumped into the fray with...

CVE-2011-0355

Cisco Nexus 1000V Virtual Ethernet Module VEM 4.04 SV11 through SV13b, as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service ESX or ESXi host OS crash by sending an 802.1Q tagged packet over an...

Design/Logic Flaw

Cisco Nexus 1000V Virtual Ethernet Module VEM 4.04 SV11 through SV13b, as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service ESX or ESXi host OS crash by sending an 802.1Q tagged packet over an...

CVE-2011-0355

The CVE-2011-0355 issue affects Cisco Nexus 1000V Virtual Ethernet Module (VEM) Release 4.0(4) SV1(1) through SV1(3b) used with VMware ESX/ESXi 4.0–4.1. A flaw in how the VEM handles dropped packets allows a guest OS user to trigger a denial of service (host OS crash) by sending an 802.1Q tagged ...

CVE-2011-0355

Cisco Nexus 1000V Virtual Ethernet Module VEM 4.04 SV11 through SV13b, as used in VMware ESX 4.0 and 4.1 and ESXi 4.0 and 4.1, does not properly handle dropped packets, which allows guest OS users to cause a denial of service ESX or ESXi host OS crash by sending an 802.1Q tagged packet over an...

VMSA-2011-0002:Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi

VMSA-2011-0002 Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi VMware Security Advisory VMware Security Advisory Advisory ID: VMSA-2011-0002 VMware Security Advisory Synopsis: Cisco Nexus 1000V VEM updates address denial of service in VMware ESX/ESXi VMware Security...

Google Bets $20k Against the Field at 2011 Pwn2Own

Google has announced plans to pay $20,000 to anyone who can successfully exploit a vulnerability in their Chrome browser and infiltrate a Cr-48 Chrome Notebook. Google’ is offering the cash prize as part of Zero Day Initiative’s Pwn2POwn contest which will be taking place March 9-11 during the 20...

Microsoft Targets Android with Patent Infringement Allegations

The mobile phone wars became more interesting late on Tuesday when Microsoft publicly claimed for the first time that Google's Android operating system infringes on its intellectual property. According to sources close to the company, Microsoft believes that Android infringes on its patented...

Unfixed XSS vulnerability at www.dragonagenexus.com

Security researcher Timse, has submitted on 22/09/2010 a cross-site-scripting XSS vulnerability affecting www.dragonagenexus.com, which at the time of submission ranked 84524 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

TCP State Manipulation Denial of Service Vulnerabilities in Multiple Cisco Products - Cisco Systems

Multiple Cisco products are affected by denial of service DoS vulnerabilities that manipulate the state of Transmission Control Protocol TCP connections. By manipulating the state of a TCP connection, an attacker could force the TCP connection to remain in a long-lived state, possibly indefinitel...

Directory traversal

Directory traversal vulnerability in the inertialFATE iF Portfolio Nexus comifnexus component 1.5 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

Joomla If Nexus Local File Inclusion

\|/// \ - - // @ @ ----oOOo---oOOo--------------------------- @=Author : Fl0riX @=Greez : Deep-Power ,Pyske & All Friends ---------------Ooooo------------------------- ooooO / / \ \ @=======================================@ @=Script :Joomla Component comifnexus...

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion

Joomla! Component iF Portfolio Nexus - Controller Remote File Inclusion source: https://www.securityfocus.com/bid/37473/info The iF Portfolio Nexus 'comifnexus' component for Joomla! is prone to a remote file-include vulnerability because it fails to sufficiently sanitize user-supplied input...

CVE-2009-4057

The CVE-2009-4057 issue affects the Joomla! component inertialFATE iF Portfolio Nexus (com_if_nexus) version 1.1. The root cause is an SQL injection via the id parameter in an item action to index.php, enabling remote execution of arbitrary SQL commands. This yields partial confidentiality, integ...

Joomla! sql injection vulnerability-vulnerability warning-the black bar safety net

Joomla! the iF Portfolio Nexus Component ’id’ sql injection vulnerability The following example URIs are available: http://www.example.com/services/portfolio?view=item&;id=-100%20union%20all%20select%2 0 1,version%2 8%29,3,4,5,6,7,...