Fedora 10 : BackupPC-3.1.0-6.fc10 (2009-9973)

Fri Sep 25 2009 Johan Cwiklinski 3.1.0-6 - Fix security bug bug 518412 - Fri Sep 18 2009 Johan Cwiklinski 3.1.0-5 - Fix SELinux policy module for UserEmailInfo.pl file - Fri Apr 10 2009 Johan Cwiklinski 3.1.0-4 - Fix TopDir change bug 473944 Note that Tenable Network Security has extracted the...

Moderate: Red Hat Security Advisory: samba security and bug fix update

Updated samba packages that fix a security issue and a bug are now available for Red Hat Enterprise Linux 3. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Samba is a suite of programs used by machines to share files, printers, and other...

kernel security and bug fix update

2.6.9-89.0.15.0.1.EL - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - backout patch sysrq-b that queues upto keventd thread Guru Anbalagane orabug 6125546 - netrx/netpoll race...

SuSE9 Security Update : YaST2 (YOU Patch Number 11952)

This update fixes a security bug in yast2-core that allows local attackers to provide malicious YaST2 modules to YaST2 which are subsequently executed with root privileges. To trigger this vulnerability root has to execute yast2 in an untrusted directory i.e. /tmp. %NASLMINLEVEL 70300 C Tenable...

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow (PoC)

Notepad++ 5.4.5 - .C .CPP Local Stack Buffer Overflow PoC / 0dayNotepad++ 5.4.5 Local .C/CPP Stack Buffer Overflow POC by fl0 fl0w / / LATEST FIXES Notepad++ v5.4.5 fixed bugs from v5.4.4 : 1. Fix plugins shortcuts not working bug. 2. Fix the tooltip on toolbar display bug for the plugins icons. ...

Aurora CMS 1.0.2 - 'install.plugin.php' Remote File Inclusion

--------------------------------------------------------------------------------------------------------------- Aurora Content Management System Enterprise Edition install.plugin.php = Remote File Include Vulnerability...

PHPSANE 0.5.0 - save.php Remote File Inclusion

PHPSANE 0.5.0 - save.php Remote File Inclusion ----------------------------------------------------------------------------------- phpSANE v 0.5.0 save.php Remote File Inclusion Vulnerability ----------------------------------------------------------------------------------- Author: CoBRa21 Mail:...

kernel

New Linux kernel packages are available for Slackware 12.2 and -current to address a security issue. A kernel bug discovered by Tavis Ormandy and Julien Tinnes of the Google Security Team could allow a local user to fill memory page zero with arbitrary code and then use the kernel sendpage...

2WIRE Gateway - Authentication Bypass / Password Reset (2)

2WIRE GATEWAY AUTHENTICATION BYPASS & PASSWORD RESET - Part 2 08/15/09 DESCRIPTION ----------------- Additional to the authentication bypass exploit page submitted by hkm. EXPLOIT/POC ----------------- Authentication Bypass - just use this page to set a new password...

CVE-2009-2475

Sun Java SE 5.0 before Update 20 and 6 before Update 15, and OpenJDK, might allow context-dependent attackers to obtain sensitive information via vectors involving static variables that are declared without the final keyword, related to 1 LayoutQueue, 2 Cursor.predefined, 3...

Adobe 'Zero Day' Flaw is Eight Months Old

The current zero-day attacks against Adobe Flash Player are not quite zero-day after all. According to new information, Adobe’s security response team knew about the vulnerability since December 31, 2008 see image below but it was misdiagnosed as a “data loss corruption” issue. When word of the...

nfsen -- remote command execution

nfsen reports: Due to double input checking, a remote command execution security bug exists in all NfSen versions 1.3 and 1.3.1. Users are requested to update to nfsen-1.3.2...

AdaptBB 1.0 (forumspath) Remote File Inclusion Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- =- AdaptBB 1.0 Remote File Include =- =- Webpage: http://www.adaptbb.com =- Download http://sourceforge.net/project/downloading.php?groupid=253154&filename=AdaptBB1.0.zip...

Online Grades & Attendance 3.2.6 Credentials Changer SQL Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service

Mozilla Firefox 3.0.10 - KEYGEN Remote Denial of Service ===8=================== Original Nachrichtentext =================== From the very-low-hanging-fruit-department Firefox Denial of Service KEYGEN Release mode: Forced release. Ref : TZO-27-2009 - Firefox Denial of Service KEYGEN WWW :...

Mozilla Firefox 3.0.10 (KEYGEN) Remote Denial of Service Exploit

Exploit for multiple platform in category dos / poc ================================================================ Mozilla Firefox 3.0.10 KEYGEN Remote Denial of Service Exploit ================================================================ ===8=================== Original Nachrichtentext...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Lighttpd < 1.4.23 (BSD/Solaris) - Source Code Disclosure

Severe vulnerability due to a bug in FreeBSD, OS X and Solaris 10 filesystems affecting Lighttpd 1.4.23 A bug was discovered in the way FreeBSD, OS X and Solaris prior version 10 handle symlinks appended with a slash /. Accessing a regular file through a symbolic link with appended slash succeeds...

Dog Pedigree Online Database 1.0.1b - Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ----------------------------------------------------------------------------------------------...

webSPELL 4.2.0e - page Blind SQL Injection

webSPELL 4.2.0e - page Blind SQL Injection !/usr/bin/perl use LWP::UserAgent; use HTTP::Cookies; use Getopt::Long; '/ -.- ------------------oOO------OOo----------------- | | | / / / / | | / / / / / / / / / / / | | // // / / / // / // / // | | ///,// /./,/, // | | Security Research Division //...