BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender crossaplication scripting

Filename is displayed without filtering during scanning...

BitDefender Internet Security XSS

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

Scrubbr: Stored XSS flaw finder

The HP Security Labs blog is pointing to a new database scanning tool called “Scrubbr” that can help check numerous database technologies for the presence of possible stored cross-site scripting attacks. Scrubbr download here is described a Java program which connects to your database MySQL 5+, M...

Fedora Core 9 FEDORA-2009-1736 (fail2ban)

The remote host is missing an update to fail2ban announced via advisory FEDORA-2009-1736. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Update for clamav FEDORA-2008-1608

Check for the Version of clamav OpenVAS Vulnerability Test Fedora Update for clamav FEDORA-2008-1608 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 10 Update: fail2ban-0.8.3-18.fc10

Fail2ban scans log files like /var/log/pwdfail or /var/log/apache/errorlog and bans IP that makes too many password failures. It updates firewall rules to reject the IP address...

Microsoft SQL Server Browser Detection

Binary data 4926.prm...

Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability.

Advisory: Google Chrome FTP PASV IP Malicious Port Scanning Vulnerability. Version Affected: Google Chrome: 1.0.154.36 Description: Google Chrome FTP Client is vulnerable to FTP PASV malicious port scanning vulnerability. The username in the FTP ftp://username:[email protected] can be manipulat...

Multiple FTP clients FTP bounce attack

Passive FTP implementation in multiple client allows to use FTP bounce attack for port scanning...

Some Nmap skills-vulnerability warning-the black bar safety net

Source: Tr4c3’s blog by d3hydr8 www.darkc0de.com date: 01/20/08 Use nmap as a host discovery tool. linuxbox:/home/d3hydr8 nmap-sL 128.230.18.30-3 5 Starting Nmap 4.50 http://insecure.org at 2008-01-17 2 2:4 1 EST Host npropane.syr.edu 128.230.18.30 not scanned Host helpeiam1.syr.edu 128.230.18.31...

ClamAV: Multiple vulnerabilities

Background Clam AntiVirus is a free anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. Description Moritz Jodeit reported an off-by-one error within the getunicodename function in libclamav/vbaextract.c when processing VBA project files CVE-2008-5050. Ilja van...

Using Nmap for your Windows network to find vulnerabilities-vulnerability warning-the black bar safety net

That said, If your network is vulnerable, or that your firewall has a vulnerability, or that your server is open shouldn't open ports, then your network is faced with is attack, is the damage of risk. To strike first. To prevent someone else ruin their own network, the first of his own“ruthless”a...

CVE-2008-5532

Ikarus Virus Utilities T3.1.1.45.0 and possibly T3.1.1.34.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header aka "EXE info" at the beginning, and modifying the filename to have 1 no extension, 2 a .txt...

Detailed explanations of Common Vulnerability scanners and network scanning techniques-vulnerability warning-the black bar safety net

With the rapid development of the Internet,Network Security has gradually become a potential huge problem, how to safeguard their own network security, one of the main method is self-examination and self-correction, and in this process, the own network is scanned to become a more efficient,...

Adobe AIR < 1.5 Multiple Vulnerabilities (APSB08-23)

According to its version number, an instance of Adobe AIR on the remote Windows host is 1.1 or earlier. Such versions are potentially affected by several vulnerabilities APSB08-23 / APSB08-22 / APSB08-20 / APSB08-18: - A potential port-scanning issue. CVE-2007-4324 - Possible privilege escalation...

[SECURITY] Fedora 8 Update: clamav-0.92.1-4.fc8

Clam AntiVirus is an anti-virus toolkit for UNIX. The main purpose of this software is the integration with mail servers attachment scanning. The package provides a flexible and scalable multi-threaded daemon, a command line scanner, and a tool for automatic updating via Internet. The programs ar...

Flash movie can determine whether a TCP port is open

ActionScript 3 AS3 in Adobe Flash Player 9.0.47.0, and other versions and other 9.0.124.0 and earlier versions, allows remote attackers to bypass the Security Sandbox Model, obtain sensitive information, and port scan arbitrary hosts via a Flash SWF movie that specifies a connection to make, then...

Flash Player APSB08-18 / APSB08-20 Multiple Vulnerabilities

Binary data 4746.prm...

Flash Player < 9.0.151.0 / 10.0.12.36 Multiple Vulnerabilities (APSB08-18 / APSB08-20 / APSB08-22)

According to its version number, an instance of Flash Player on the remote Windows host is 9.0.124.0 or earlier. Such versions are potentially affected by several vulnerabilities : - A potential port-scanning issue. CVE-2007-4324 - Possible privilege escalation attacks against web servers hosting...