I've only gone and done a blog

I've been promising myself I'd start a blog for about 100 years now, but it's finally here! I decided to build everything from scratch to force myself to learn Vagrant, Puppet and other general sysops stuff that was on my "to explore" list. This was dumb in terms of how long it took me to get...

GNU bash buffer overflow

Buffer overflow in buil-in test command...

Remote File Manager 1.2 iOS - Multiple Vulnerabilities

Remote File Manager 1.2 iOS - Multiple Vulnerabilities Title: ====== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities Date: ===== 2013-02-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=882 VL-ID: ===== 882 Common Vulnerability Scoring System:...

Android Play Market 3.9.16 with a Built-In Malware Scanner

AndroidPolice reports that Google is actively working on a built-in malware scanner for the Play Store. A new version of the Play Store app has been released and it is starting to roll out to Android owners. Google Play Store 3.9.16 includes the ability to remove apps from the All Apps list. Ther...

RabidHamster R4 Detection

The remote web server is running R4, a standalone OpenGL accelerated program used to produce animated 3D graphics that twist and turn to music. R4 contains a built-in web server that allows you to control the visuals that are produced from a remote device. C Tenable Network Security, Inc...

Scientific Linux Security Update : thunderbird on SL5.x, SL6.x i386/x86_64 (20120424)

Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in Sanitiser for OpenType OTS, used by Thunderbird to help prevent potential exploits in malformed OpenType fonts. Malicious content could cause Thunderbird to crash or, under certain conditions, possibly execute...

[SECURITY] Fedora 16 Update: python3-3.2.3-2.fc16

Python 3 is a new version of the language that is incompatible with the 2.x line of releases. The language is mostly the same, but many details, especi ally how built-in objects like dictionaries and strings work, have changed considerably, and a lot of deprecated features have finally been remov...

Security Update for Microsoft Silverlight (KB2690729)

This security update to Silverlight includes fixes outlined in KBs 2681578 and 2690729. This update is backward compatible with web applications built using previous versions of Silverlight...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

PHP Built-in WebServer is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PHP 5.4.0 Built-in Web Server DoS PoC

No description provided by source. !/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is...

PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability

This host is running PHP Built-in WebServer and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodphpbuiltinwebsrvdosvuln.nasl 5956 2017-04-14 09:02:12Z teissa $ PHP Built-in WebServer 'Content-Length' Denial of Service Vulnerability Authors: Sooraj KS Copyright:...

PHP 5.4.0 Built-in Web Server - Denial of Service (PoC)

!/usr/bin/python Title: PHP 5.4.0 Built-in Web Server DoS PoC Date: 16 March 2012 Author: ls [email protected] Reference: https://bugs.php.net/bug.php?id=61461 Comments: Fixed in PHP 5.4.1RC1-DEV and 5.5.0-DEV The value of the Content-Length header is passed directly to a pemalloc call in...

http-grep NSE Script

Spiders a website and attempts to match all pages and urls against a given string. Matches are counted and grouped per url under which they were discovered. Features built in patterns like email, ip, ssn, discover, amex and more. The script searches for email and ip by default. Script Arguments...

Oracle Java IIOP Deserialization Type Confusion Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java handles...

UBUNTU-CVE-2011-2525

The qdiscnotify function in net/sched/schapi.c in the Linux kernel before 2.6.35 does not prevent tcfillqdisc function calls referencing builtin aka CQFBUILTIN Qdisc structures, which allows local users to cause a denial of service NULL pointer dereference and OOPS or possibly have unspecified...

cys-built Station system 4. 0-5. 0 pass to kill Backdoor-vulnerability warning-the black bar safety net

On this system, Baidu not search out more information There is only one website that is the Wenzhou network made Version of the system difficult to trace.... Today is engaged in a station, find that the default account login is not up Results found ewebeditor path, and adminlogin. asp aminstyle...

IdeaCMS2. 1 Built Station system background to take the shell-vulnerability warning-the black bar safety net

This building system is also good. From a background point of view is the imitation of the Marx cms ! Background--the system--site configuration-- just find a place to insert a closed formula a sentence. The connection address: ! Then with a kitchen knife connection is OK...

nss security update

3.12.8-3.0.1.el60 - Use blank image instead of clean.gif in nss-3.12.8-stripped.tar.bz2 - Update expired PayPalEE.cert to fix build failure 3.12.8-3 - Update builtin certs to NSS3.12.9WITHCKBI182RTM via a patch 3.12.8-2 - Update to builtin certs from NSS3.12.9WITHCKBI182RTM...

PHPWeb enterprise smart built Station system injection and repair-vulnerability warning-the black bar safety net

http://www.phpweb.net/down/class/index.php?myord=1 Directly into the tool can be run. Direct shangguan net: Database error: Invalid SQL: select from pwdowncon where iffb='1' and catid!=' 0' order by 1' desc limit 0,30 MySQL Error : 1 0 6 4 You have an error in your SQL syntax; check the manual...

Mantra: A Browser based Security Framework !

Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...