"Real" Osama bin Laden Death Photos? Yeah, They're Fake, Too.

You’ve heard about the tidal wave of spam e-mail and scammy Web links that followed the killing of Osama bin Laden by U.S. Special Forces on Sunday. But what about the latest round of e-mails offering death photos of the slain terrorist leader? Well, turns out they’re fake, also. Security firm...

Kaspersky Administration Kit "SMBRelay"远程代码执行漏洞

BUGTRAQ ID: 47563 Kaspersky Administration Kit 是一套功能强大且弹性的工具，可集中管理企业网路所使用的卡巴斯基实验室安全内容管理解决方案。 Kaspersky Administration Kit由于"SMBRelay"攻击在实现上存在远程代码执行漏洞，远程攻击者可利用此漏洞在受影响应用程序中执行任意代码。 Kaspersky Administration Kit 6中默认启用了"Scan IP...

up.time Software Administration Interface Remote Authentication Bypass Vulnerability

up.time software is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication and perform unauthorized actions. up.time 5 is vulnerable; other versions may also be affected. OpenVAS Vulnerability Test $Id: gbuptime47599.nasl 7029 2017-08-31...

up.time Software 5 - Administration Interface Remote Authentication Bypass

up.time Software 5 - Administration Interface Remote Authentication Bypass source: https://www.securityfocus.com/bid/47599/info up.time software is prone to a remote authentication-bypass vulnerability. Attackers can exploit this issue to bypass authentication and perform unauthorized actions...

Report: UK Firm Offered Custom Malware to Egyptian Security Services

Documents spilled into public by the political unrest in Egypt in recent months has shone a spotlight on the shadowy world of for-profit, custom malware creation for governments around the world. The anti malware firm F-Secure first called attention to documents uncovered by protesting Egyptians...

[DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay

Digital Security Research Group DSecRG Advisory DSECRG-11-018 Application: Kaspersky Administration Kit Versions Affected: from 6.0 Vendor URL: http://www.kaspersky.com Bug: Design flaw Exploits: YES Reported: 22.01.2011 Vendor response: 22.01.2011 Solution: disable IP scan Date of Public Advisor...

Kaspersky administration Kit SMB relaying attack

Network is automatically scanned and hosts found are automatically connected via SMB with administrative permissions, making it possible SMB relaying attack...

Re: [DSECRG-11-018] Kaspersky administration Kit - Remote code execution via SMBRelay

It was closed only for relayng to the same host but it is imposible to close relayng on another host which run processes st the same account. And also smbrelay patch did not work on clusters http://dsecrg.blogspot.com/2011/01/passthehash-bible-1-attacking.html...

[SECURITY] Fedora 13 Update: perl-5.10.1-123.fc13

Perl is a high-level programming language with roots in C, sed, awk and shell scripting. Perl is good at handling processes and files, and is especially good at handling text. Perl's hallmarks are practicality and efficiency. While it is used to do a lot of different things, Perl's most common...

Oracle GlassFish/System Application Server Security Bypass Vulnerability

The host is running GlassFish/System Application Server and is prone to security bypass vulnerability. OpenVAS Vulnerability Test $Id: gboracleglassfishnsjassecbypassvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Oracle GlassFish/System Application Server Security Bypass Vulnerability Authors: Antu...

CentOS 5 : conga (CESA-2011:0394)

Updated conga packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

ZDI-11-137: Oracle Application Server Authentication Bypass Remote Code Execution Vulnerability

ZDI-11-137: Oracle Application Server Authentication Bypass Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-137 April 19, 2011 -- CVE ID: CVE-2011-0807 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Oracle -- Affected Products: Oracle Applicati...

Fedora Update for dhcp FEDORA-2011-0848

Check for the Version of dhcp OpenVAS Vulnerability Test Fedora Update for dhcp FEDORA-2011-0848 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of...

luci, ricci security update

CentOS Errata and Security Advisory CESA-2011:0394 Updated conga packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS base...

CVE-2011-0857

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration...

Design/Logic Flaw

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration...

CVE-2011-0857

Unspecified vulnerability in Oracle PeopleSoft Enterprise HRMS 9.0 Bundle 15 and 9.1 Bundle 5 allows remote authenticated users to affect confidentiality and integrity via unknown vectors related to Pension Administration...

CVE-2011-0795

Unspecified vulnerability in the Single Sign On component in Oracle Fusion Middleware 10.1.2.3 allows remote authenticated users to affect integrity via unknown vectors related to Administration and Monitoring...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun GlassFish Enterprise Server 2.1, 2.1.1, and 3.0.1, and Sun Java System Application Server 9.1, allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Administration...

Code injection

Unspecified vulnerability in the Solaris component in Oracle Solaris 8, 9, 10, and 11 Express allows local users to affect confidentiality, integrity, and availability via unknown vectors related to Administration Utilities...