Why Can't Johnny Have Privacy?

One of the more trite and oft-repeated maxims in the software industry goes something like this: We’re not focusing on security because our customers aren’t asking for it. They want features and functionality. When they ask for security, then we’ll worry about it. Not only is this philosophy doom...

[SECURITY] Fedora 13 Update: gnustep-base-1.18.0-9.fc13

The GNUstep Base Library is a powerful fast library of general-purpose, non-graphical Objective C classes, inspired by the superb OpenStep API but implementing Apple and GNU additions to the API as well. It includes for example classes for unicode strings, arrays, dictionaries, sets, byte streams...

[SECURITY] Fedora 12 Update: gnustep-base-1.18.0-9.fc12

The GNUstep Base Library is a powerful fast library of general-purpose, non-graphical Objective C classes, inspired by the superb OpenStep API but implementing Apple and GNU additions to the API as well. It includes for example classes for unicode strings, arrays, dictionaries, sets, byte streams...

Facebook Now Trending As Phishing Target

Between January and March 2010, Facebook was the first social networking site to have made it into the list of top targets for phishing attacks. With 5.7% of all phishing attacks, Facebook took fourth place behind the traditional phishing targets PayPal, eBay and international bank HSBC, said...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. One or more of the following components are affected: Apache ATS BIND CFNetwork CoreGraphics Cscope CUPS Disk Images enscript Flash Player plug-in Help Viewer iChat International Components for Unicode IPSec...

Mac OS X Security Update 2008-007

The remote host is missing Security Update 2008-007. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003

The remote host is missing Mac OS X 10.5.8 Update / Mac OS X Security Update 2009-003. One or more of the following components are affected: bzip2 CFNetwork ColorSync CoreTypes Dock Image RAW ImageIO Kernel launchd Login Window MobileMe Networking XQuery OpenVAS Vulnerability Test Mac OS X 10.5.8...

Mac OS X Security Update 2008-007

The remote host is missing Security Update 2008-007. One or more of the following components are affected: Apache Certificates ClamAV ColorSync CUPS Finder launchd libxslt MySQL Server Networking PHP Postfix PSNormalizer QuickLook rlogin Script Editor Single Sign-On Tomcat vim Weblog OpenVAS...

Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002

The remote host is missing Mac OS X 10.5.7 Update / Mac OS X Security Update 2009-002. SPDX-FileCopyrightText: 2010 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

kernel security and bug fix update

2.6.18-194.3.1.0.1.el5 - xen check to see if hypervisor supports memory reservation change Chuck Anderson orabug 7556514 - Add entropy support to igb John Sobecki orabug 7607479 - nfs convert ENETUNREACH to ENOTCONN orabug 7689332 - NET Add xen pv/bonding netconsole support Tina Yang orabug 69930...

Socialware 2.2 - Upload Cross-Site Scripting

Socialware 2.2 - Upload Cross-Site Scripting Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code :...

Socialware 2.2 Cross Site Scripting / Shell Upload

Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code : --------------------------------------------------------------------------------------...

socialware V2.2 XSS / Upload Vulnerability

Exploit for php platform in category web applications ========================================== socialware V2.2 XSS / Upload Vulnerability ========================================== Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor...

Pligg CMS (story.php?id) SQL Injection Vulnerability

No description provided by source. / ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor :...

Socialware 2.2 - Upload / Cross-Site Scripting

Exploit Title:Upload Vulnerability and XSS in socialware V2.2 www.iscripts.com Version: Web Application vendor :www.iscripts.com Date: 29 apr,2010 Dork:Powered by iScripts SocialWare Author:Sid3^effects Code : --------------------------------------------------------------------------------------...

i-Net Online Community SQL Injection / Cross Site Scripting

Exploit Title: XSS and Authentication bypass in i-Net Online Community site script Date: 27-apr-2010 Author: Sid3^effects Software Link: N/a CVE : Code : XSS and Authentication bypass in i-Net Online Community site script Vendor:http://www.i-netsolution.com/ Author:Sid3^effects aKa haRi Descripti...

Pligg CMS 1.0.4 SQL Injection

/ ! Pligg CMS story.php?id SQL Injection Vulnerability ! Author : Don Tukulesto [email protected] ! Homepage: http://indonesiancoder.com ! Date : Tue, April 27, 2010 ! Tune in : http://antisecradio.fm choose your weapon / Software Information Vendor : http://www.pligg.com/ Download:...

i-Net Online Community XSS and Authentication Bypass

Exploit for php platform in category web applications ==================================================== i-Net Online Community XSS and Authentication Bypass ==================================================== XSS and Authentication bypass in i-Net Online Community site script...

i-Net Online Community - Cross-Site Scripting Authentication Bypass

i-Net Online Community - Cross-Site Scripting Authentication Bypass XSS and Authentication bypass in i-Net Online Community site script Vendor:http://www.i-netsolution.com/ Author:Sid3^effects aKa haRi Description : i-Net Online Community site script is an online social networking software that...

i-Net Online Community - Cross-Site Scripting / Authentication Bypass

XSS and Authentication bypass in i-Net Online Community site script Vendor:http://www.i-netsolution.com/ Author:Sid3^effects aKa haRi Description : i-Net Online Community site script is an online social networking software that allows you to start your own site just like Myspace, Hi5 and Facebook...