Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends" Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends". Facebook will be adding two new security features...

Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends " Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends ". Facebook will be adding two new security featur...

Windows Manage Certificate Authority Removal

This module allows the attacker to remove an arbitrary CA certificate from the victim's Trusted Root store. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Manage Certificate Authority...

PcVue 10.0 SV.UIGrdCtrl.1 'LoadObject()/SaveObject()' Trusted DWORD Vulnerability

This module exploits a function pointer control within SVUIGrd.ocx of PcVue 10.0. By setting a dword value for the SaveObject or LoadObject, an attacker can overwrite a function pointer and execute arbitrary code. This module requires Metasploit: https://metasploit.com/download Current source:...

PcVue 10.0 SV.UIGrdCtrl.1 - 'LoadObject()'/'SaveObject()' Trusted DWORD (Metasploit)

$Id: pcvuefunc.rb 13889 2011-10-12 10:57:31Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

kernel: tpm infoleaks

The tpmopen function in drivers/char/tpm/tpm.c in the Linux kernel before 2.6.39 does not initialize a certain buffer, which allows local users to obtain potentially sensitive information from kernel memory via unspecified vectors...

CVE-2008-7300

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

Improper access control

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

CVE-2008-7300

CVE-2008-7300 describes a vulnerability in the labeled networking implementation of Solaris Trusted Extensions on Sun Solaris 10 and OpenSolaris (snv_39 through snv_67). When a labeled zone is in the installed state, remote authenticated users can bypass Mandatory Access Control (MAC) and gain ac...

CVE-2008-7300

The labeled networking implementation in Solaris Trusted Extensions in Sun Solaris 10 and OpenSolaris snv39 through snv67, when a labeled zone is in the installed state, allows remote authenticated users to bypass a Mandatory Access Control MAC policy and obtain access to the global zone...

OpenSSH < 4.7 Trusted X11 Cookie Connection Policy Bypass

According to the banner, OpenSSH earlier than 4.7 is running on the remote host. Such versions contain an authentication bypass vulnerability. In the event that OpenSSH cannot create an untrusted cookie for X, for example due to the temporary partition being full, it will use a trusted cookie...

Opera Extended Validation Information Disclosure Vulnerabilities (Mac OS X)

The host is installed with Opera and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gboperaextentedvalidationinfodiscvulnmacosx.nasl 7044 2017-09-01 11:50:59Z teissa $ Opera Extended Validation Information Disclosure Vulnerabilities Mac OS X Authors: Rachana...

Opera Extended Validation Information Disclosure Vulnerabilities - Windows

Opera is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-3388

Opera before 11.51 allows remote attackers to cause an insecure site to appear secure or trusted via unspecified actions related to Extended Validation and loading content from trusted sources in an unspecified sequence that causes the address field and page information dialog to contain security...

How to secure SSL connections and remove DigiNotar certificates from the Trusted CAs list

...

New Versions of Chrome and Firefox Disable DigiNotar Root

Mozilla has released version 6.01 of its Firefox browser, which now removes the compromised DigiNotar root certificate from the list of trusted roots. The move comes just two days after security researchers discovered that the Dutch company had issued a valid wildcard certificate for Google to an...

JIRA FishEye plugin not working - Error handling trusted applications authentication attempt: BAD_SIGNATURE

This bug effects you if: you are running JIRA 4.4+ and FishEye 2.6.0-2.6.3 you have Trusted Applications authenticating the link between your JIRA and FishEye servers If you attempt to configure or use the JIRA FishEye plugin, you may see errors in the UI and log messages like this in JIRA:...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

$Id: ms10026avinsamplespersec.rb 13555 2011-08-13 02:15:05Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS10-026 Microsoft MPEG Layer-3 Audio Stack Based Overflow

This module exploits a buffer overflow in l3codecx.ax while processing a AVI files with MPEG Layer-3 audio contents. The overflow only allows to overwrite with 0's so the three least significant bytes of EIP saved on stack are overwritten and shellcode is mapped using the .NET DLL memory techniqu...

CentOS Update for krb5-devel CESA-2009:0408 centos5 i386

Check for the Version of krb5-devel OpenVAS Vulnerability Test CentOS Update for krb5-devel CESA-2009:0408 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...