IBM OmniFind Crawler - Denial of Service

IBM OmniFind Crawler - Denial of Service Crawler endless loop CVE-2010-3899 The crawler has no recursion depth limit. A site with dynamic parameter manipulation can cause an endless loop. This loop will block the crawler thread and use permanent server resources. Too many blocks can lead to a...

thunderbird security update

CentOS Errata and Security Advisory CESA-2010:0812 An updated thunderbird package that fixes one security issue is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System...

Microsoft Office Malformed Routing Slip Code Execution (CVE-2006-0009)

Microsoft Office is a popular productivity suit released by the Microsoft Corporation. It includes a text processor, a spreadsheet application, a presentation editor, and a number of other components. Office document files contain a common section that stores metadata such as the author,...

[SECURITY] Fedora 12 Update: pam_mount-2.5-1.fc12

This module is aimed at environments with central file servers that a user wishes to mount on login and unmount on logout, such as semi-diskless stations where many users can logon. The module also supports mounting local filesystems of any kind the normal mount utility supports, with extra code ...

Mariposa Operators Did Not Use Cookie Stuffing

According to the researcher who helped take down Mariposa, the operators who purchased the bot software from the man known as “Iserdo” and then built Mariposa, for some reason didn’t opt for the feature, which he offered for 200 euros, even though it would have increased their potential profits...

Msxml2.XMLHTTP.3.0 Response Handling Memory Corruption

Sources: http://skypher.com/index.php/2010/08/10/ms10-051/ http://code.google.com/p/skylined/issues/detail?id=17 import os, re, socket; webserverport = 28876; replies = r'^/$': 'text/html', """ iCounter = 0 function go var requesturl = location.protocol + "//" + location.host +...

ESA-2010-013: RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior to 3.7 SP1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 RSA, The Security Division of EMC, informs about potential security vulnerability in RSA enVision® versions prior 3.7 SP1 Security Advisory Updated July 30, 2010 Summary: RSA enVision versions prior 3.7 SP1 may contain potential denial of service...

ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAR Federated Identity Manager

ESA-2010-011: RSA, The Security Division of EMC, announces a fix for potential security vulnerability in RSAr Federated Identity Manager Security Advisory Updated July 20, 2010 Summary: RSAr Federated Identity Manager may be impacted by potential arbitrary URL redirection vulnerability that may b...

HP-UX Update for Tomcat Servlet Engine HPSBUX02541

Check for the Version of Tomcat Servlet Engine OpenVAS Vulnerability Test HP-UX Update for Tomcat Servlet Engine HPSBUX02541 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

The webring service SQL Injection Vulnerability

Exploit for php platform in category web applications =============================================== The webring service SQL Injection Vulnerability =============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 ...

Webring Script - SQL Injection

Webring Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:The webring service SQL Injection Vendor url:http://getaphpsite.com...

CVE-2010-2302

Use-after-free vulnerability in WebCore in WebKit in Google Chrome before 5.0.375.70 allows remote attackers to cause a denial of service memory corruption or possibly execute arbitrary code via vectors involving remote fonts in conjunction with shadow DOM trees, aka rdar problem 8007953. NOTE:...

Automating Social Engineering in MiTM Attacks

French researchers have developed an automated social engineering tool that uses a man-in-the middle attack and strikes up online conversations with potential victims. Read the full article. Dark Reading...

PHP Property Rental Script XSS/ SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================================== PHP Property Rental Script XSS/ SQL Injection Vulnerability =========================================================== Author: L0rd CrusAd3r aka VSN email protected Exploit Title:PHP...

HP-UX Update for Apache-based Web Server HPSBUX02531

Check for the Version of Apache-based Web Server OpenVAS Vulnerability Test HP-UX Update for Apache-based Web Server HPSBUX02531 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

HP-UX Update for Java HPSBUX02524

Check for the Version of Java OpenVAS Vulnerability Test HP-UX Update for Java HPSBUX02524 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the G...

HP-UX Update for AudFilter rules enabled HPSBUX02514

Check for the Version of AudFilter rules enabled OpenVAS Vulnerability Test HP-UX Update for AudFilter rules enabled HPSBUX02514 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

SuSE Update for kernel SUSE-SA:2010:016

Check for the Version of kernel OpenVAS Vulnerability Test SuSE Update for kernel SUSE-SA:2010:016 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Oracle Siebel 7.7/7.8 - '/loyalty_enu/start.swe' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38456/info Oracle Siebel is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context...

Debian DSA-1830-1 : icedove - several vulnerabilities

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird mail client. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0040 The execution of arbitrary code might be possible via a crafted...