Free MP3 CD Ripper 2.6 - 0day (1)

No description provided by source. Exploit Title: Free MP3 CD Ripper 2.6 wav 0-day Date: 30/03/2010 Author: Richard leahy Software Link: http://www.soft32.com/Download/Free/FreeMP3CDRipper/4-250188-1.html Version: 2.6 Tested on: Windows Xp Sp2 to exploit this open up the application select file -...

ARM Bindshell port 0x1337

No description provided by source. / Title: arm-bind-listen Brief: Bind a shell to port 0x1337 on any local address and wait for connections Author: Daniel Godas-Lopez gmail account dgodas / / socdes = socketAFINET, SOCKSTREAM, IPPROTOTCP; / mov %r0, $2 / AFINET / mov %r1, $1 / SOCKSTREAM / mov...

WFTPD 3.3 - Remote REST DoS

No description provided by source. WFTPD 3.3 unhandled exception xdmnt 2010 -- coding: windows-1252 -- import socket import sys, time def helpinfo: print Usage: wftpdkill host login password existingfle\n def dosithostname, username, passwd, exfile: sock = socket.socketsocket.AFINET,...

Virtual Programming VP-ASP Shoperror Script 4/5 Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10534/info A vulnerability exists in the software that may allow a remote user to launch cross-site scripting attacks. The problem is reported to exist due to improper sanitizing of user-supplied data in the 'shoperror.as...

PHP <= 5.2.8 gd library - imageRotate() Information Leak Vulnerability

No description provided by source. PHP - gd library - imageRotatefunction Information Leak Vulnerability Discovered by: Hamid Ebadi, Further research and exploit: Mohammad R. Roohian CSIRT Team Members Amirkabir University APA Laboratory Introduction PHP is a popular web programming language whic...

[SECURITY] Fedora 20 Update: python-2.7.5-13.fc20

Python is an interpreted, interactive, object-oriented programming language often compared to Tcl, Perl, Scheme or Java. Python includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as t...

Internet Explorer Developer Channel - Early Access to Next-Generation Features For Developers

In an effort to create more open and accessible atmosphere between the Internet Explorer team and the Web development community, Microsoft today announced the launch of The Developer Channel for Internet Explorer. Internet Explorer Developer Channel is a fully-functioning browser designed to...

Apple's New Swift Programming Language for iOS And OS X Apps. Goodbye Objective-C

The development of self own languages has become emblematic of the hot new trend in business as every big Internet service provider is now developing their own and unique programming languages. Two months ago, Facebook released its modern programming language called 'HACK', which is specially...

FreeBSD Security Advisory FreeBSD-SA-14:11.sendmail

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 ============================================================================= FreeBSD-SA-14:11.sendmail Security Advisory The FreeBSD Project Topic: sendmail improper close-on-exec flag handling Category: contrib Module: sendmail Announced: 2014-06-...

FreeBSD -- sendmail improper close-on-exec flag handling

Problem Description: There is a programming error in sendmail8 that prevented open file descriptors have close-on-exec properly set. Consequently a subprocess will be able to access all open files that the parent process have open. Impact: A local user who can execute their own program for mail...

Ruby security vulnerabilities

DoS, restrictions bypass...

CVE-2013-5655

Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. dot dot in the default URI...

Fedora Update for a2ps FEDORA-2014-4691

Check for the Version of a2ps OpenVAS Vulnerability Test Fedora Update for a2ps FEDORA-2014-4691 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

Fedora Update for a2ps FEDORA-2014-4676

Check for the Version of a2ps OpenVAS Vulnerability Test Fedora Update for a2ps FEDORA-2014-4676 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

[SECURITY] Fedora 19 Update: a2ps-4.14-23.fc19

The a2ps filter converts text and other types of files to PostScript. A2ps has pretty-printing capabilities and includes support for a wide number of programming languages, encodings ISO Latins, Cyrillic, etc., and medias...

[SECURITY] Fedora 20 Update: a2ps-4.14-23.fc20

The a2ps filter converts text and other types of files to PostScript. A2ps has pretty-printing capabilities and includes support for a wide number of programming languages, encodings ISO Latins, Cyrillic, etc., and medias...

UBUNTU-CVE-2014-1736

Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value...

Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability

Syhunt Advisory: CGILua session.lua Predictable Session ID Vulnerability Advisory-ID: 201404301 Discovery Date: 03.27.2014 Release Date: 04.30.2014 Affected Applications: CGILua 5.0.x, CGILua 5.1.x., CGILua 5.2 alpha 1 & CGILua 5.2 alpha 2 Class: Predictable Session ID Status: Unpatched/Vendor...

OpenBSD Initiates Fork of OpenSSL, LibreSSL

Heartbleed may have been the final straw, but the movement to create a fork of OpenSSL called LibreSSL had its roots in another issue that made the crypto libraries untenable for folks at OpenBSD. LibreSSL is an initiative spurred on by OpenBSD founder Theo de Raadt to split off and develop a...

Oracle Java SE Multiple Vulnerabilities (April 2014 CPU)

The version of Oracle formerly Sun Java SE or Java for Business installed on the remote host is earlier than 8 Update 5, 7 Update 55, 6 Update 75, or 5 Update 65. It is, therefore, potentially affected by security issues in the following components : - 2D - AWT - Deployment - Hotspot - JAX-WS -...