No consensus yet on partial disclosure

Five of the brighter minds in the security industry spent two hours Thursday afternoon arguing, needling each other and generally disagreeing about everything under the sun and at the end of it all settled absolutely nothing on the topic of partial disclosure. The panel was meant to generate some...

Secunia Research: Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability

====================================================================== Secunia Research 09/03/2009 - Foxit Reader JBIG2 Symbol Dictionary Processing Vulnerability - ====================================================================== Table of Contents Affected...

DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability

Title ----- DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability Severity -------- High Date Discovered --------------- January 19th, 2009 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: David Marshall and r@b13$ Vulnerability Description...

Guk CMS SQL Injection

-------------------------------------------------------------------------------- www.SecurityLab.ir - F@ri| -------------------------------------------------------------------------------- - Guk CMS - + Application Info: - Name: Guk CMS + Vulnerability Info: - Type: Sql Injection - Risk: Medium -...

DevIL: User-assisted execution of arbitrary code

Background Developer's Image Library DevIL is a cross-platform image library. Description Stefan Cornelius Secunia Research discovered two boundary errors within the iGetHdrHeader function in src-IL/src/ilhdr.c. Impact A remote attacker could entice a user to open a specially crafted Radiance RGB...

RedHat Update for evolution RHSA-2008:0177-01

Check for the Version of evolution OpenVAS Vulnerability Test RedHat Update for evolution RHSA-2008:0177-01 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Partial disclosure, complete disagreement

The two most highly publicized vulnerability disclosures last year also were the most highly criticized disclosures: Dan Kaminsky’s DNS bug and the SSL flaw discovered by a group of independent and academic researchers. The two events played out in similar fashions, with some details coming out i...

Secunia Research: libsndfile CAF Processing Integer Overflow Vulnerability

====================================================================== Secunia Research 03/03/2009 - libsndfile CAF Processing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2008-6335

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CVE-2008-6335

Directory traversal vulnerability in download.php in eMetrix Online Keyword Research Tool allows remote attackers to read arbitrary files via a .. dot dot in the filename parameter...

CentOS Update for e2fsprogs CESA-2008:0003-05 centos2 i386

Check for the Version of e2fsprogs OpenVAS Vulnerability Test CentOS Update for e2fsprogs CESA-2008:0003-05 centos2 i386 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modi...

CentOS Update for evolution CESA-2008:0177 centos4 x86_64

Check for the Version of evolution OpenVAS Vulnerability Test CentOS Update for evolution CESA-2008:0177 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify...

Secunia Research: SHOUTcast DNAS Relay Server Buffer Overflow

====================================================================== Secunia Research 25/02/2009 - SHOUTcast DNAS Relay Server Buffer Overflow - ====================================================================== Table of Contents Affected...

APC PowerChute Network Shutdown XSS

Digital Security Research Group DSecRG Advisory DSECRG-09-009 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=82 Application: APC PowerChute Network Shutdown's Web Interface Vendor URL: http://www.apc.com/ Bug: XSS/Response...

Secunia Research: ksquirrel-libs Radiance RGBE Buffer Overflows

====================================================================== Secunia Research 25/02/2009 - ksquirrel-libs Radiance RGBE Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Orbit Downloader Long URL Parsing Buffer Overflow

====================================================================== Secunia Research 25/02/2009 - Orbit Downloader Long URL Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

JOnAS Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-008 ------------------link to original advisory -------------------------- http://www.dsecrg.com/pages/vul/show.php?id=81 Application: JOnAS Java Open Application Server Versions Affected: JOnAS4.10.3 / Apache Tomcat 5.5.26 Vendor URL:...

Read the new procedure-based on the open source code to update the vulnerability discovery techniques-vulnerability warning-the black bar safety net

Author: FireFoxF. s. T Article submission in 0 9 year 2 hacking client manual The editors agreed to release the object is for everyone to have better communication more exciting content, see the hacker Handbook Background: The so-called patch or update, it has been is the research and development...

w3bcms 3.5.0 SQL Injection

!/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST; use Getopt::Long; '/ -.- -------------------oOO------OOo------------------ | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division // 2oo9 |...

w3bcms <= v3.5.0 Multiple Remote Vulnerabilities Exploit

Exploit for unknown platform in category web applications ======================================================== w3bcms = v3.5.0 Multiple Remote Vulnerabilities Exploit ======================================================== !/usr/bin/perl use LWP::UserAgent; use HTTP::Request::Common qwPOST;...