785 matches found
Webmin show.cgi Open Function Call Command Execution
Added: 11/26/2012 CVE: CVE-2012-2982 BID: 55446 OSVDB: 85248 Background Webmin is a web-based interface for system administration of Unix systems. The Webmin web server listens by default on port 10000/tcp. Problem Webmin 1.59 and earlier are vulnerable to remote code execution as a result of...
Hardening Linux Security in few seconds using "Server Shield"
Are you running Linux just because you think it's safer than Windows? Think again. Sure, security is a built-in feature and extends right from the Linux kernel to the desktop, but it still leaves enough room to let someone muck about with your /home folder. Linux might be impervious to viruses an...
Massachusetts Hospital Agrees to Pay $1.5m After Stolen Laptop HIPAA Violation
Massachusetts Eye and Ear Infirmary, a Boston-based hospital, agreed to pay $1.5 million to the U.S. Department of Health and Human Services HSS earlier this week, settling a HIPAA violation stemming from a 2010 incident. The agreement acknowledges that the hospital failed to comply with...
CVE-2010-5176
Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...
Race condition
Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...
CVE-2010-5176
Race condition in Security Shield 2010 13.0.16.313 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory changes during...
CVE-2010-5176
Security Shield 2010 (version 13.0.16.313) on Windows XP is affected by a race condition (KHOBE) that lets local users bypass kernel-mode hook handlers and run code that would otherwise be blocked by a handler or signature checks. The root cause involves certain user-space memory changes during h...
PT-2012-1388 · Unknown · Security Shield 2010
Name of the Vulnerable Software and Affected Versions: Security Shield 2010 version 13.0.16.313 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes during hook-handl...
Scientific Linux Security Update : kernel on SL4.x i386/x86_64
These new kernel packages contain fixes for the security issues described below : - a flaw in the ISDN CAPI subsystem that allowed a remote user to cause a denial of service or potential remote access. Exploitation would require the attacker to be able to send arbitrary frames over the ISDN netwo...
uTorrent & BitTorrent Sites Hacked, Spread Security Shield Malware
uTorrent & BitTorrent Sites Hacked, Spread Security Shield Malware Attackers hijacked two popular Torrent websites "bittorrent.com and utorrent.com" and tampered with their download mechanisms, causing visitors trying to obtain file-sharing software to instead receive malware. The site reported o...
uTorrent & BitTorrent Sites Hacked, Spread Security Shield Malware
uTorrent & BitTorrent Sites Hacked, Spread Security Shield Malware Attackers hijacked two popular Torrent websites "bittorrent.com and utorrent.com" and tampered with their download mechanisms, causing visitors trying to obtain file-sharing software to instead receive malware. The site reported o...
India - US sign Cyber Shield deal
India - US sign Cyber Shield deal India and the US on Tuesday inked a pact on cybersecurity to intensify information exchange on threats to computers and networks and initiate joint work on technologies against cyber-attacks. A joint statement on the India-US strategic dialogue has announced the...
Worm Virus Twitter Scam Push Rogue !
Thousands of Twitter users are believed to have been struck with malicious links tied to a rogue anti-virus hoax circulating the microblog service. Scam is spreading malicious links goo.gl wrong URL shortening services. According to Kaspersky Lab, malicious links to redirect users to different...
Twitter Worm Uses Google URL Shortener to Spread Scareware
A fast-moving Twitter worm is in circulation, using Google’s goo.gl redirection service to push unsuspecting users to a notorious scareware fake anti-virus malware campaign. At 8:45 a.m EST today, this Twitter search shows thousands of Twitter messages continuing to spread the worm. According to...
Lawmakers, Scholars Warn Against Reactionary Anti-WikiLeaks Legislation
The WikiLeaks disclosures this fall that have precipitated so much controversy and agita among national security officials and politicians should not be used as a springboard for new, more restrictive laws, lawmakers, attorneys and policy analysts said in a House hearing Thursday. In fact, the...
U.S. Wants "Cyber Shield" for NATO
The U.S. and its NATO allies should build a ‘cyber shield’ to protect against future attacks, the Pentagon’s 2 man said in a speech in Brussels. A senior official at the Department of Defense urged the U.S.’s European allies to erect a “Cyber Shield” to protect NATO members against Internet based...
Unreal Engine - 'ReceivedRawBunch()' Denial of Service
source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...
Kingsoft DuBa Browser Shield ActiveX memory corruption
No description provided...
Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being hacked ? this vuln almost effect in all of the duba security software. Code : object id=TestObj...
Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC
No description provided by source. Exploit Title: Kingsoft DuBa Browser Shield ActiveX Remote Exec 0day POC Date: 2010.01.17 Author: superli Software Link: http://i2d.www.duba.net/i2d/kws3/KWSSetup.exe Version: 3.0 Tested on: xpsp3 ie6 greeting to KingSoft,can you really help users avoiding being...