Design/Logic Flaw

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

CVE-2009-1806 concerns IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, where the issue arises when Active Memory Sharing is used. The connected documents describe the vulnerability as related to a shared memory partition and a shared memory pool with redundant paging within VIOS partit...

CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806: Undefined Security Weakness

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution

============================================= - Release date: May 24th, 2009 - Discovered by: Laurent Gaffié - Severity: critical ============================================= I. VULNERABILITY ------------------------- Soulseek 157 NS & 156. Remote Distributed Search Code Execution II. BACKGROUN...

Soulseek 157 NS */ 156.* Remote Distributed Search Code Execution

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS / 156. Remote Distributed Search Code Execution ================================================================= ============================================= -...

Defense Industrial Base information-sharing program a good start

The recent flood of stories on attacks against the electrical grid, various government agencies and other portions of the critical infrastructure has renewed the calls for improvements in federal cybersecurity and, especially, information sharing between the government and the private sector on...

Old phishing sites still sending spam, attracting victims

The cooperative effort of ISPs, security vendors, volunteer groups and other interested parties has helped develop a quick and efficient method for taking down phishing sites, usually within hours or days of their appearance. However, many phishing sites that have been up for a week or more still...

SAP Cfolders Multiple Stored XSS Vulnerabilies

Digital Security Research Group DSecRG Advisory DSECRG-09-014 Original advisory: http://dsecrg.com/pages/vul/show.php?id=114 Application: SAP Cfolders included in: SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms Vendor URL: http://SAP.com Bugs: Multiple Stored XSS Risk: Hight...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and this port. It can be used to share files and chat with other users. SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SAP Cfolders Stored Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-014 Original advisory: http://dsecrg.com/pages/vul/show.php?id=114 Application: SAP Cfolders included in: SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms Vendor URL: http://SAP.com Bugs: Multiple Stored XSS Risk: Hight...

Zervit Webserver 0.02 Remote Directory Traversal Vulnerability

No description provided by source. Zervit Webserver Directory Traversal By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Site: http://zervit.sourceforge.net/ Info: Zervit is the first compact, portable HTTP/Web Server made for human beings. It...

MonGoose 2.4 Directory Traversal Vulnerability

MonGoose 2.4 win webserver Directory Traversal By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Info: Easy to use web server for Windows and UNIX. Mongoose provides simple and clean API for embedding it into existing programs. Targeting Web...

FTPDMIN 0.96 - Arbitrary File Disclosure

FTPDMIN 0.96 - Arbitrary File Disclosure !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp...

De-perimeterization and open standards

From Cnet, by Jon Oltsik The openness and universal connectivity that helped break down the barriers between coporate networks has also turned out to be a security liability. Jon Oltsik, an analyst at Enterprise Strategy Group, writes that there’s now a need for open standards in security Cnet...

U.S. falling far behind on cybersecurity

In the next few weeks President Barack Obama will be handed a report detailing the country’s cybersecurity defenses and laying out what’s needed to protect America’s technology resources from hostile nations and organized crime groups. It will not be a pretty picture. Cybersecurity experts, forme...

[SECURITY] Fedora 10 Update: netatalk-2.0.3-23.fc10

This package enables Linux to talk to Macintosh computers via the AppleTalk networking protocol. It includes a daemon to allow Linux to act as a file server over EtherTalk or IP for Mac's...

CVE-2009-1237

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8264 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8263 2025-08-31 03:01:18+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CanSecWest: Caution, community at play

CanSecWest, in beautiful Vancouver BC, is one of my favorite conferences each year. It’s a cozy little security con that brings together security researchers from all parts of the security ecosystem. Like a PhNeutral or a BlueHat, one never quite knows what to expect out of a CanSecWest, but we d...