tomcat: security manager restrictions bypass

Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.19, when sendfile is enabled for the HTTP APR or HTTP NIO connector, does not validate certain request attributes, which allows local users to bypass intended file access restrictions or cause a denial of service infinite lo...

Apache 2.2.x < 2.2.13 APR apr_palloc Heap Overflow

According to its self-reported banner, the version of Apache 2.2.x running on the remote host is prior to 2.2.13. As such, it includes a bundled version of the Apache Portable Runtime APR library that contains a flaw in 'aprpalloc' that could cause a heap overflow. Note that the Apache HTTP serve...

Fedora Update for plib FEDORA-2012-0144

Check for the Version of plib OpenVAS Vulnerability Test Fedora Update for plib FEDORA-2012-0144 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 16 Update: plib-1.8.5-5.fc16

This is a set of OpenSource LGPL libraries that will permit programmers to write games and other realtime interactive applications that are 100% portable across a wide range of hardware and operating systems. Here is what you need - it's all free and available with LGPL'ed source code on the web...

[SECURITY] Fedora 15 Update: plib-1.8.5-5.fc15

This is a set of OpenSource LGPL libraries that will permit programmers to write games and other realtime interactive applications that are 100% portable across a wide range of hardware and operating systems. Here is what you need - it's all free and available with LGPL'ed source code on the web...

Personal Device Security During the Holiday Season

As the winter holiday travel season begins, US-CERT would like to remind users to be mindful of the security risks associated with portable devices such as smart phones, tablets, and laptops. US-CERT would like to encourage users to review the following US-CERT Cyber Security Tips. Following the...

Microsoft Unveils New Windows Defender Offline Tool

Microsoft has released a beta version of a new tool that can help victims of malware attacks recover from ugly infections, even if they don’t have the ability to reach the Internet. The Windows Defender Offline tool enables users to clean their systems of malware from a CD or other removable medi...

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station

Cotton Candy USB with Dual-Core Computer can turns Any Screen Into an Android Station Norwegian company FXI Technologies has been showing a USB stick-sized portable computer prototype, featuring with a dual-core 1.2-GHz CPU, 802.11n Wi-Fi, Bluetooth, HDMI-out and a microSD card slot for memory...

Hcon's Security Testing Framework (Hcon STF) v0.1beta

Hcon's Security Testing Framework Hcon STF v0.1beta After the first demo of Hfox, many people asked about a Chromium based framework for penetration testing/ethical hacking. After 3 months of work and research, and some input from AJ, the following tool has been developed for the arsenal of Hcon'...

Hcon's Security Testing Framework (Hcon STF) v0.1beta

Hcon's Security Testing Framework Hcon STF v0.1beta After the first demo of Hfox, many people asked about a Chromium based framework for penetration testing/ethical hacking. After 3 months of work and research, and some input from AJ, the following tool has been developed for the arsenal of Hcon'...

QtWeb 3.7.3 URL Spoof

QTWeb Internet Browser URL weakness lets remote attackers to do Spoof or phishing attacks Vendor URL: http://www.qtweb.net/ Vendor bugtrack= http://code.google.com/p/qtweb/issues/detail?id=151 Advisore: http://lostmon.blogspot.com/2011/10/qtweb-internet-browser-url-weakness.html Vendor notify: YE...

CentOS Update for nspr CESA-2011:1282 centos4 i386

Check for the Version of nspr OpenVAS Vulnerability Test CentOS Update for nspr CESA-2011:1282 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for libpng CESA-2011:1104 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

nspr, nss security update

CentOS Errata and Security Advisory CESA-2011:1282 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2011-September/080075.html https://lists.centos.org/pipermail/centos-announce/2011-September/080077.html...

Fedora Update for cups FEDORA-2011-11221

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2011-11221 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

CoolPlayer Portable 2.19.2 Buffer Overflow

Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print "\n=====================================" print "CoolPlayer Portable Buffer Overflow" print...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (1)

Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print "\n=====================================" print "CoolPlayer Portable Buffer Overflow" print...

CoolPlayer Portable 2.19.2 - Local Buffer Overflow (ASLR Bypass) (1)

CoolPlayer Portable 2.19.2 - Local Buffer Overflow ASLR Bypass 1 Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print...

CoolPlayer Portable 2.19.2 Buffer Overflow (ASLR Bypass)

Exploit for windows platform in category local exploits Buffer overflow that bypasses ASLR by using a non-aslr module Tested against CoolPlayer Portable version 2.19.2 on Windows Vista Business 32 bit Written by Blake Originally found by Securityxxxpert print...

Fedora Update for cups FEDORA-2011-11197

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2011-11197 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...