Microsoft Takes Down Kelihos Botnet

Continuing its legal assault on botnet operators and the hosting companies that the criminals use for their activities, Microsoft has announced new actions against a group of people it contends are responsible for the operation of the Kelihos botnet. The company has also helped to take down the...

Wikileaks Founder, Assange gets Sydney Peace Prize !

Wikileaks Founder, Assange gets Sydney Peace Prize ! WikiLeaks founder Julian Assange was Wednesday awarded the Sydney Peace Foundation's top honor for "exceptional courage in pursuit of human rights," joining the likes of Nelson Mandela and the Dalai Lama. Assange, an Australian former computer...

Recent WikiLeaks-Related Cyberattacks Prompt Call for Policy Changes

In New York on Sunday, lawmakers urged President Obama to expand the U.S. State Department’s foreign policy mechanisms to address crime and security on the Internet. They cited recent attacks on companies severing ties with WikiLeaks as a main reason for these changes. At Symantec's New York City...

Indian Cyber Army Hacks OGRA Website in Retaliation

In a troubling trend of tit-for-tat website defacements, a group of Indian hackers known as the ‘Indian Cyber Army’ hacked the Oil & Gas Regulatory Authority OGRA website www.ogra.org.pk on Saturday. The website was later restored by the site administrators. The message left on the OGRA page stat...

CVE-2009-2548

Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...

CVE-2009-2549

Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is 1 0, which triggers a server crash related to memory allocation, or 2 1, which triggers CPU/memory...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

Format string

Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...

Integer overflow

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2547

Integer underflow in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash via a VoIP over Network VON packet to port 2305 with a negative packetsize value, which triggers a buffer over-read...

CVE-2009-2548

This CVE (CVE-2009-2548) affects Armed Assault (ArmA) 1.14 and earlier, 1.16 beta, and Armed Assault II 1.02 and earlier. The issue is a format-string vulnerability in join-request handling where format specifiers in the nickname and datafile fields are improperly processed during error logging, ...

CVE-2009-2548

Format string vulnerability in Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in the 1 nickname and 2 datafile fields in a joi...

CVE-2009-2549

Armed Assault aka ArmA 1.14 and earlier, and 1.16 beta, and Armed Assault II 1.02 and earlier allows remote attackers to cause a denial of service via a join packet with a final field whose value is 1 0, which triggers a server crash related to memory allocation, or 2 1, which triggers CPU/memory...

CVE-2009-2549

CVE-2009-2549 affects Armed Assault (ArmA) 1.14 and earlier, ArmA 1.16 beta, and Armed Assault II 1.02 and earlier. A remote attacker can cause denial of service by sending a join packet whose final field is 0 (server crash due to memory allocation) or 1 (CPU/memory consumption and NULL pointer d...

CVE-2009-2547

CVE-2009-2547 describes an integer underflow in ArmA (Armed Assault) up to version 1.14 and earlier, and ArmA 1.16 beta, and ArmA II up to version 1.02 and earlier. A remote attacker can send a VoIP over Network (VON) packet to port 2305 with a negative packet_size value, triggering a buffer over...

Medal of Honor Allied Assault getinfo Stack Buffer Overflow

This module exploits a stack based buffer overflow in the getinfo command of Medal Of Honor Allied Assault. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Medal of Honor Allied Assault getinfo...

Assault Content Manager v.1.2 Directory Traverlal Vulnerability

Assault Content Manager v.1.2 Directory Traverlal Vulnerability SEVERITY: ========= Medium SOFTWARE: ========= Assault Content Manager v1.2 http://www.assaultcms.com/ INFO: ===== Assault Content Manager v1.2 is a simple CMS that uses files to store information DESCRIPTION: ============ Assault...

In-game players kicking in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Vulnerables: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Wars Jedi Knight II: Jedi Outcast = 1.0...

CVE-2004-0735

CVE-2004-0735 describes a stack-based buffer overflow in the getinfo command of Medal of Honor Allied Assault (and related Breakthrough/Spearhead versions) that enables remote code execution over UDP. Public exploit/publication artifacts exist (Metasploit module, PacketStorm release) and link to ...

CVE-2000-0500

The CVE-2000-0500 entry affects BEA WebLogic 5.1.0; the default configuration allows a remote attacker to view source code by requesting a URL beginning with /file/, causing the default servlet to display the file without processing. The available sources consistently describe this behavior; no e...