Mozilla introduces the "Web Apps" project just before release of release of Firefox 4 final !

Shortly before the release of the final version of Firefox 4, the Mozilla developers have introduced the "Web Apps" project. These apps are expected to play a major role play in future browsers, and in such a future, the browser will not just be for viewing web pages but will be a platform for...

Fedora 15 : telepathy-gabble-0.11.7-1.fc15 / telepathy-glib-0.13.13-1.fc15 (2011-1284)

Telepathy-Gabble changes, including a security fix : - fd.o32390: Gabble now treats a request for a ContactSearch channel with Server set to the empty string as equivalent to not specifying a server, and rejects requests where the JID specified for Server is invalid. - fd.o32874: Offline contacts...

Squid-Imposter: A Squid Based Sidejacking Proxy !

That tool was meant specifically for Windows operating systems and also contains a module that uses HTML5 offline cache to store the payload permanently in all supporting browsers. Squid-Imposter just add the HTML5 offline cache storage functionality to the application and has been ported to Linu...

BlackBerry Desktop Software Security Bypass Vulnerability

This host has BlackBerry Desktop Software installed and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gbblackberrydesktopsoftwaresecbypassvuln.nasl 5263 2017-02-10 13:45:51Z teissa $ BlackBerry Desktop Software Security Bypass Vulnerability Authors: Antu Sanadi Update...

CVE-2010-3741

The offline backup mechanism in Research In Motion RIM BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack...

Design/Logic Flaw

The offline backup mechanism in Research In Motion RIM BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack...

CVE-2010-3741: Undefined Security Weakness

The offline backup mechanism in Research In Motion RIM BlackBerry Desktop Software uses single-iteration PBKDF2, which makes it easier for local users to decrypt a .ipd file via a brute-force attack...

Fedora 13 : samba-3.5.5-68.fc13 (2010-14627)

---------------------------------------------------------------------- ---------- ChangeLog : - Thu Sep 9 2010 Guenther Deschner - 3.5.5-68 - Security Release, fixes CVE-2010-3069 - resolves: 630869 - Thu Aug 26 2010 Guenther Deschner - 3.5.4-67 - Put winbind krb5 locator plugin into a separate r...

Hotel / Resort Site Script SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects, aaNumb, M4n0j and to all ICW members DESCRIPTION: Internal system for tot...

Hotel Resort Site Script with OnLine Reservation System - SQL Injection

Hotel Resort Site Script with OnLine Reservation System - SQL Injection Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Hotel / Resort Site Script with OnLine Reservation System SQLi Vulnerable Published: 2010-06-08 Vendor url:http://www.mformula.com.br Greetz to:Sid3^effects,...

Botnet Herder PROXIEZ Goes Offline

One of the internet’s most resilient and crimeware-friendly networks PROXIEZ-NET was knocked offline after the plug was pulled on its upstream service provider, security watchers said. Read the full article. The Register...

Consumer Groups Say Proposed Privacy Bill is Flawed

A long-awaited draft of a Congressional bill would extend privacy protections both on the Internet and off line, but privacy advocates said the bill did not go far enough in protecting consumers. Read the full article New York Times...

Monoprice.com Goes Offline, Investigates Fraud

Audio visual cabling giant monoprice.com shut down its Web site – possibly for the next couple of weeks – while it investigates the possible compromise of its customer credit and debit card information. Read the full article. KrebsonSecurity...

Fedora SSSD Kerberos验证安全绕过漏洞

Bugraq ID: 37747 CVE ID：CVE-2010-0014 Fedora是一款基于linux内核的发行版本。 当sssd配置使用Kerberos进行校验时在域段中设置authprovider = krb5，在如下条件下可接收任意密码作为合法密码使用： -系统离线的情况下，如KDC配置的krb5kdcip选项没有启用到。 -尝试验证的用户在Kerberos realm中拥有一个合法TGT，并且在凭据缓存文件中设置了krb5realm选项。 RedHat SSSD 1.0.0-2 RedHat SSSD 1.0.0-1 RedHat SSSD 0.99.1-1 RedHat...

getwebshell for oracle-vulnerability warning-the black bar safety net

by elegant wind ping SQL create tablespace kjtest datafile 'e:\website\kj.asp' size 100k nologging ; Copy the code This will create the Table space. It should be noted that the oracle of the Table, The smallest unit is 100K. The following began to build the table: SQL Create TABLE WEBSHELLC...

[Follow_me series]oracle Shell-vulnerability warning-the black bar safety net

The patch from Sun network technology Forum: Days male the starter, reproduced indicate the source of! 1. SQL create tablespace kjtest datafile 'e:\website\kj.asp' 2. size 100k nologging ; Copy the code This will create the Table space. It should be noted that the oracle of the Table, The smalles...

Mozilla Browser engine crashes

The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 the frame chain and synchronous events, 2 a SetMayHaveFrame assertion and...

Fedora Update for httrack FEDORA-2008-7862

Check for the Version of httrack OpenVAS Vulnerability Test Fedora Update for httrack FEDORA-2008-7862 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Fedora Update for httrack FEDORA-2008-7896

Check for the Version of httrack OpenVAS Vulnerability Test Fedora Update for httrack FEDORA-2008-7896 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Max.Blog <= 1.0.6 (offline_auth.php) Offline Authentication Bypass

Salvatore "drosophila" Fresta Application: Max.Blog http://www.mzbservices.com Version: Max.Blog = 1.0.6 Bug: Offline Authentication Bypass Exploitation: Remote Dork: intext:"Powered by Max.Blog" Date: 27 Jan 2009 Discovered by: Salvatore "drosophila" Fresta Author: Salvatore "drosophila" Fresta...