Apple iPhone Browsing

The iPhone is a line of Internet and multimedia-enabled smartphones designed and marketed by Apple Inc. An iPhone functions as a video camera, camera phone with text messaging and visual voicemail, a portable media player, and an Internet client with e-mail, Web browsing, and both Wi-Fi and 3G...

BitTorrent Mainline DHT Detection

The remote host is participating in a Distributed Hash Table DHT network, an indication of a peer-to-peer file-sharing application is running on the host. Specifically, this host is using Mainline DHT, an implementation developed by the original BitTorrent client and adopted by some others. Note...

BitTorrent / uTorrent Detection

The remote host is running BitTorrent or uTorrent, peer-to-peer file sharing applications. Note that, due to the peer-to-peer nature of these applications, any user connecting to the BitTorrent network may consume a large amount of bandwidth. C Tenable Network Security, Inc. include"compat.inc";...

The Five Key Things to Know About the Security of Your Networking Gear

Measuring the performance and security of your network equipment has never been more important than it is today. While there will always be tradeoffs between maximum throughput and maximum security, I want to emphasize the “and” in “performance and security.” Your devices must perform while...

Cable Modem Termination System Authentication Bypass - Cisco Systems

Two issues are described in this security advisory. The first issue involves cable modems not manufactured by Cisco that allow a configuration file to be downloaded from an interface that is not connected to the network of the cable modem's service provider. This historical behavior allows an...

Wireless and Wired Network Interceptor: the Interceptor

The Interceptor is a wireless wired network tap. Basically, a network tap is a way to listen in to network traffic as it flows past. I haven’t done extensive research but all the ones I found when looking passed the copy of the traffic onto a specified wired interface which was then plugged into ...

Fedora 11 : glpi-0.72.4-2.svn11035.fc11 (2010-5188)

This version correct several bugs. Full upstream changelog : Bug 1893: Unable to access to the model of phones dictionnary Bug 1904: Vlan not add using Template Bug 1906: Message-ID should not use $SERVER'HTTPHOST' Bug 1918: configured listlimitmax not honnoured Bug 1941: Disconnecting a port...

Fedora 12 : kvirc-4.0.0-1.fc12 (2010-10529)

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem,...

Fedora 13 : kvirc-4.0.0-1.fc13 (2010-10522)

KVIrc 4.0.0 Notable new features of this release include: - Definitive and stable port to the Qt4 libraries - Better support for server tecnologies: CAPS, STARTTLS, SASL, irc services... - A new UPnP module to control and remotely map your router ports for DCC - A totally rewritten MDI subsystem,...

MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities

Binary data 801133.prm...

Joomla JC - Top 25 Movie Trailers Cross Site Scripting

=========================================================== JC - Top 25 Movie Trailers module XSS Vulnerability =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/...

CVE-2010-2260

Multiple cross-site scripting XSS vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 viewbyname.php or 2 viewbyip.php in admin/. NOTE: some sources report that the affected product is ShaPlus...

CVE-2010-2260

CVE-2010-2260 affects Gambit Design Bandwidth Meter (versions 0.72 and possibly 1.2). The vulnerability is listed as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via PATH_INFO to admin/view_by_name.php or admin/view_by_ip.php. The av...

CVE-2010-2260

Multiple cross-site scripting XSS vulnerabilities in Gambit Design Bandwidth Meter, 0.72 and possibly 1.2, allow remote attackers to inject arbitrary web script or HTML via the PATHINFO to 1 viewbyname.php or 2 viewbyip.php in admin/. NOTE: some sources report that the affected product is ShaPlus...

MySQL Community Server < 5.1.47 / 5.0.91 Multiple Vulnerabilities

The version of MySQL Community Server installed on the remote host is earlier than 5.1.47 / 5.0.91 and is, therefore, potentially affected by the following vulnerabilities : - The server may continue reading packets indefinitely if it receives a packet larger than the maximum size of one packet,...

CVE-2010-1849

The mynetskiprest function in sql/netserv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a large number of packets that exceed the maximum length...

Sql injection

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

CVE-2010-0292

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

CVE-2010-0292

The readfromcmdsocket function in cmdmon.c in chronyd in Chrony before 1.23.1, and 1.24-pre1, allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a spoofed cmdmon packet that triggers a continuous exchange of NOHOSTACCESS messages between two daemons, a...

CVE-2010-0292

The Chrony CVE-2010-0292 issue affects chronyd’s cmdmon path: read_from_cmd_socket in cmdmon.c allows a spoofed cmdmon packet to trigger a loop of NOHOSTACCESS messages between daemons, causing CPU and network resource exhaustion (DoS). Affected releases are Chrony before 1.23.1 and 1.24-pre1. De...