7513 matches found
[SECURITY] [DSA 2363-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2363-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2011 http://www.debian.org/security/faq -...
SuSE 11.1 Security Update : update-test-security (2011-11-18) (deprecated)
This is a fake security update for testing purposes. %NASLMINLEVEL 999999 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. @DEPRECATED@ This script has been deprecated as the associated patch is not actually a security fix. Disabled on 2013/12/05...
VanDyke AbsoluteFTP FTP Client LIST Overflow
Added: 12/12/2011 BID: 50614 OSVDB: 77105 Background VanDyke AbsoluteFTP is a popular free FTP client. AbsoluteFTP was replaced by SecureFX in 1998, and support for AbsoluteFTP ended in 2007. Problem The AbsoluteFTP client contains a buffer overflow vulnerability when parsing file and directory...
Squiz Matrix User Account Enumeration
Squiz Matrix - User Account Enumeration http://www.osisecurity.com.au/advisories/squiz-matrix-user-enumeration Release Date: 12-Dec-2011 Software: Squiz - Matrix http://www.squiz.net/ "Squiz Matrix delivers highly flexible and robust business integration engine and application development tools. ...
BeEF 0.4.2.12 alpha Browser Exploitation Framework Released
BeEF 0.4.2.12 alpha Browser Exploitation Framework Released The Browser Exploitation Framework BeEF is a powerful professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors. Unlike other security frameworks,...
BeEF 0.4.2.12 alpha Browser Exploitation Framework Released
BeEF 0.4.2.12 alpha Browser Exploitation Framework Released The Browser Exploitation Framework BeEF is a powerful professional security tool. BeEF is pioneering techniques that provide the experienced penetration tester with practical client side attack vectors. Unlike other security frameworks,...
GivingFirst Launches online Charity Processing Service
In the spirit of the Holiday Season, Coalfire has made a significant contribution to GivingFirst.org in the form of free Penetration Testing services. GivingFirst is a Denver-based community foundation whose mission is "to improve quality of life by increasing community generosity and involvement...
DSA-2356-1 openjdk-6 - several
Bulletin has no description...
icomex cms (Content Management Solutions) sql injection vulnerability
Exploit Title: icomex cms sql injection vulnerability Author : XaDaL Link : http://www.icomex.com/ Tested on : windows google dork : This site is powered by Content Management Systems from icomex === POC === =x= http://site/html/Home.htm?articleid=SQL =x= http://site/html/services.htm?articleid=S...
SecurityTube Metasploit Framework Expert Certification Launched !
SecurityTubeMetasploit Framework Expert Certification Launched ! Not so long ago, we had posted the launch of the SecurityTube Wi-Fi Security Expert SWSE program. The certification has been a success and it has students from over 25+ countries from around the world. The SecurityTube Metasploit...
SecurityTube Metasploit Framework Expert Certification Launched !
SecurityTube Metasploit Framework Expert Certification Launched ! Not so long ago, we had posted the launch of the SecurityTube Wi-Fi Security Expert SWSE program. The certification has been a success and it has students from over 25+ countries from around the world. The SecurityTube Metasploit...
Web App Pentesting - PenTest Magazine
Web App Pentesting - Pentest Magazine The significance of HTTP and the Web for Advanced Persistent Threats Web Application Security and Penetration Testing Developers are form Wenus, Application Security guys from Mars Pulling legs of Arachni XSS BeeF Metaspolit Exploitation Cross-site request...
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool
PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...
Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added
Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added There is a new CSRF generator, which produces proof-of-concept HTML for generating virtually any HTTP request. You can access this feature by right-clicking any item within Burp, and using the engagement tools context menu to selec...
Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added
Burp Suite Pro v1.4.03 released - CSRF generator, SSL strip Added There is a new CSRF generator, which produces proof-of-concept HTML for generating virtually any HTTP request. You can access this feature by right-clicking any item within Burp, and using the engagement tools context menu to selec...
Attacking 3G and 4G Mobile Tele-Communications Networks
Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: http://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...
Attacking 3G and 4G Mobile Tele-Communications Networks
Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: https://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: https://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...
Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability
Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url: http://www.oracle.com/technetwork/middleware/epm/downloads/index.html files tested: SystemInstaller-11121-win32.zi...
Oracle Hyperion Financial Management TList6 - ActiveX Control Remote Code Execution
Oracle Hyperion Financial Management TList6 ActiveX Control Remote Code Execution Vulnerability tested against: Internet Explorer 8 Microsoft Windows Server 2003 r2 sp2 download url: http://www.oracle.com/technetwork/middleware/epm/downloads/index.html files tested: SystemInstaller-11121-win32.zi...