Spam Text message offers gift card to Target

A popular scam that always seems to pop up around the holiday shopping season has once again resurfaced.Have you gotten a text message promising a free gift card? All you have to do is click on a link? However, it was a scam. Case : A text message has been popping up on Central New Yorkers' phone...

Exposing 25 Facebook phishing websites

Exposing 25 Facebook phishing websites Geeks at Security Web-Center Found 25 Facebook and list them. Sometimes spammers create fake pages that look like the Facebook login page. When you enter your email and password on one of these pages, the spammer records your information and keeps it. This i...

Virus War : Be aware of bogus e-mails !

The past year reached a new record high for bogus e-mails that clog people's inboxes and can release damaging and costly viruses on computers. Nearly 90 percent of sent e-mail is a ruse to rip off unsuspecting Internet users, according to data released by the computer security firm Symantec. The...

nsTreeSelection dangling pointer remote code execution vulnerability — Mozilla

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative an integer overflow vulnerability in the implementation of the XUL element's selection attribute. When the size of a new selection is sufficiently large the integer used in calculating the length of the selection can...

Fedora 12 : sendmail-8.14.4-3.fc12 (2010-5470)

This new version of sendmail fixes security bug - handling of bogus certificates with NULLs in CNs. Also many other bugs have been fixed, for complete list please see: http://www.sendmail.org/releases/8.14.4 Note that Tenable Network Security has extracted the preceding description block directly...

Facebook Warns of Profile Stalking Scam

A bogus application that lures Facebook users by falsely offering to show who has been viewing their profile has been exposed as a scam. A researcher warns he has already identified 25 different copies of the same rogue app but using different monikers such as peeppeep-pro, profile-check-online a...

ISC BIND 9 DNSSEC NSEC/NSEC3 Bogus NXDOMAIN Responses

According to its version number, the remote installation of BIND suffers from a cache poisoning vulnerability. The vulnerability exists due to an error in DNSSEC NSEC/NSEC3 validation code which could cause caching of bogus NXDOMAIN responses without correctly validating them. This issue affects...

powerdns-recursor -- multiple vulnerabilities

PowerDNS Security Advisory reports: PowerDNS Recursor up to and including 3.1.7.1 can be brought down and probably exploited. PowerDNS Recursor up to and including 3.1.7.1 can be spoofed into accepting bogus data...

Partial HTTP Requests Denial of Service

Slowloris is a HTTP Denial of Service tool written in PERL. This is how the tool works: The tool sends an HTTP request with a partial header. The server will open the connection and wait for the complete header to be received. However, the DoS tool will not send it and will instead keep sending...

Cybercriminals hijack Twitter trending topics to serve malware

From ZDNet Dancho Danchev A currently ongoing malware attack across Twitter is abusing the momentum offered by Twitter’s trending topics in order to trick users into visiting bogus exclusive video sites and infect them with malware. The campaign, spreading since last week, is relying on a growing...

PVFB SDL backend chokes on bogus screen updates

Buffer overflow in the backend framebuffer of XenSource Xen Para-Virtualized Framebuffer PVFB Message 3.0 through 3.0.3 allows local users to cause a denial of service SDL crash and possibly execute arbitrary code via "bogus screen updates," related to missing validation of the "format of message...

IPSEC IKE check

The remote IPSEC server seems to have a problem negotiating bogus IKE requests. SPDX-FileCopyrightText: 2002 John Lampe Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only Bert Salaets: Som...

Sendmail DNS DoS

Uninitialized pointer causes DoS conditions on bogus DNS reply...

linux kmod/ptrace bug - details

Hello There are many discussions on slashdot for example on the recent linux ptrace & kmod bug. I'll try to clarify what is this all about. It's a local root vulnerability. It's exploitable only if: 1. the kernel is built with modules and kernel module loader enabled and 2...

LaBrea Tarpitted Host Detection

This script performs a Labrea tarpit scan, by sending a bogus ACK and ACK-windowprobe to a potential host. It also sends a TCP SYN to test for non-persisting labrea machines. This script was written by John [email protected] See the Nessus Scripts License for details include"compat.inc...

NetBSD Security Advisory 2001-006: Denial of service using bogus fragmented IPv4 packets

-----BEGIN PGP SIGNED MESSAGE----- NetBSD Security Advisory 2001-006 ================================= Topic: Denial of service using bogus fragmented IPv4 packets Version: NetBSD 1.4, 1.5, -current Severity: Network-connected systems can be crashed remotely Fixed: NetBSD-current: April 17, 2001...

gtk+ security hole.

while going through a quick audit of gtk i found: gtk+ can be tricked into running arbitrary code via a bogus module. this means any program using gtk that is setid can be exploited via this method. here is an exploit i wrote for this security hole: original xgtk.cworking/un-wrapped:...