Citect SCADA ODBC Overflow Attempt (CVE-2008-2639)

...

PT-2012-5109

Name of the Vulnerable Software and Affected Versions Bugzilla versions 2.x through 3.6.10 Bugzilla versions 3.7.x through 4.0.7 Bugzilla versions 4.1.x through 4.2.2 Bugzilla versions 4.3.x through 4.3.2 Description The issue allows remote attackers to potentially inject data into an LDAP...

CVE-2012-4579

Multiple cross-site scripting XSS vulnerabilities in phpMyAdmin 3.5.x before 3.5.2.2 allow remote authenticated users to inject arbitrary web script or HTML via a Table Operations 1 TRUNCATE or 2 DROP link for a crafted table name, 3 the Add Trigger popup within a Triggers page that references...

Mandriva Update for util-linux MDVSA-2012:083 (util-linux)

Check for the Version of util-linux OpenVAS Vulnerability Test Mandriva Update for util-linux MDVSA-2012:083 util-linux Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

CVE-2012-2416

chansip.c in the SIP channel driver in Asterisk Open Source 1.8.x before 1.8.11.1 and 10.x before 10.3.1 and Asterisk Business Edition C.3.x before C.3.7.4, when the trustrpid option is enabled, allows remote authenticated users to cause a denial of service daemon crash by sending a SIP UPDATE...

CVE-2012-1596

The mp2tprocessfragmentedpayload function in epan/dissectors/packet-mp2t.c in the MP2T dissector in Wireshark 1.4.x before 1.4.12 and 1.6.x before 1.6.6 allows remote attackers to cause a denial of service application crash via a packet containing an invalid pointer value that triggers an incorre...

Policy - .xxx Domain Access Attempt

Binary data 6126.prm...

Failed AT&T Hack Attempt Targeted One Million Customers

AT&T announced Monday that hackers made an “organized and systematic attempt” to gain access to nearly one million of their customers’ online accounts. According to a Bloomberg report, the phone company assured customers in an e-mail their accounts were intact. “We do not believe that the...

SureBackup: A connection attempt failed

Challenge Cause Veeam Backup & Replication is not able to connect to the Virtual Lab and grab network settings from the web server. Solution If you assign a proxy appliance an IP address from the same network where the Veeam B&R server is located, Veeam B&R will automatically add a new route to t...

JIRA FishEye plugin not working - Error handling trusted applications authentication attempt: BAD_SIGNATURE

This bug effects you if: you are running JIRA 4.4+ and FishEye 2.6.0-2.6.3 you have Trusted Applications authenticating the link between your JIRA and FishEye servers If you attempt to configure or use the JIRA FishEye plugin, you may see errors in the UI and log messages like this in JIRA:...

CVE-2011-1680

ncpmount in ncpfs 2.2.6 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

CVE-2011-1677

mount in util-linux 2.19 and earlier does not remove the /etc/mtab lock file after a failed attempt to add a mount entry, which has unspecified impact and local attack vectors...

Geohot Will Try His Hacking Skills On Windows Phone 7 !

Geohot has been causing quite a disturbance due to his ongoing legal battle with Sony. Geohot jailbroke the Sony PS3 to run unsigned code. Sony is now suing him, and Geohot is under the tech industry's spotlight more than ever. So, what does all this have to do with Windows Phone 7? Microsoft has...

Canadian Prime Minister Stephen Harper promises action on cyber attacks !

OTTAWA Federal security agencies are working to deal with cyber threats, Prime Minister Stephen Harper said Thursday. He wouldn't speak directly to what the government calls an "unauthorized attempt" to access computer networks at the Treasury Board. The attack left civil servants in key...

openSUSE Security Update : seamonkey (seamonkey-3428)

Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...

openSUSE Security Update : seamonkey (seamonkey-3428)

Mozilla SeaMonkey was updated to 2.0.10 to fix one critical security issue. MFSA 2010-73 / CVE-2010-3765: Morten Krkvik of Telenor SOC reported an exploit targeting particular versions of Firefox 3.6 on Windows XP that Telenor found while investigating an intrusion attempt on a customer network...

Mozilla Foundation Security Advisory 2010-73

Mozilla Foundation Security Advisory 2010-73 Title: Heap buffer overflow mixing document.write and DOM insertion Impact: Critical Announced: October 27, 2010 Reporter: Morten Krkvik Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.12 Firefox 3.5.15 Thunderbird 3.1.6 Thunderbird...

Some Pushdo Variants Resuming Spam Operations

A few days after the majority of the command-and-control servers belonging to one of the variants of the Pushdo botnet were taken offline, some researchers say that there are indications that portions of the botnet are back to their old tricks, downloading new spam templates for a resumption of...

Macromedia Flash ActionDefineFunction Memory Access (CVE-2005-2628)

A remote code execution vulnerability exists in the Macromedia Flash plugin. The flaw is created by insufficient validation checks of user input values. This vulnerability may be exploited by a malicious user to inject and execute arbitrary code on the target host. In a successful attack, an...

PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability ============================================================== Contact: bd0rkatschool-of-hack.net or...