Scientific Linux Security Update : boost on SL5.x i386/x86_64 (20120221)

The boost packages provide free, peer-reviewed, portable C++ source libraries with emphasis on libraries which work well with the C++ Standard Library. Invalid pointer dereference flaws were found in the way the Boost regular expression library processed certain, invalid expressions. An attacker...

Veeam ONE Monitor performance data collection times out

Challenge You are facing the following configuration issue: Veeam ONE Monitor performance graphs show the No Data Available message. Cause VeeamDCS.log file contains the following errors: ​Collecting thread has failed to initialize The operation has timed out and will be stopped Collecting thread...

Scientific Linux Security Update : kernel on SL4.x i386/x86_64

These updated packages fix the following security issues : - A security flaw was found in the Linux kernel memory copy routines, when running on certain AMD64 systems. If an unsuccessful attempt to copy kernel memory from source to destination memory locations occurred, the copy routines did not...

DEBIAN-CVE-2012-2673

Multiple integer overflows in the 1 GCgenericmalloc and 2 calloc functions in malloc.c, and the 3 GCgenericmallocignoreoffpage function in mallocx.c in Boehm-Demers-Weiser GC libgc before 7.2 make it easier for context-dependent attackers to perform memory-related attacks such as buffer overflows...

Google Reportedly Near Settlement With FTC on Safari Tracking

The FTC is nearing completion of its investigation into allegations that Google used a special technique to circumvent the privacy settings on Safari to enable better tracking of users, even when tracking was disabled by the user. The decision may cost Google millions of dollars in fines, but it’...

Android Yome Collection 信息泄露漏洞

CVE ID:CVE-2012-2640 Yome Collection是一款基于Android的应用 Yome Collection会在SD卡上存储IMEI信息，攻击者恶意构建恶意应用，诱使用户安装，在没有READPHONESTATE的权限情况下读取SD卡上的IMEI信息 0 Yome Collection for Android 1.8.3及之前版本 厂商解决方案 用户可联系供应商获得最新的应用版本： http://yomecolle.jp/info/androidoshirase/...

CVE-2012-2640

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

Code injection

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

CVE-2012-2640

The CVE-2012-2640 issue affects NEC BIGLOBE Yome Collection for Android (1.8.3 and earlier). A crafted app can read the device IMEI from the SD card without the READ_PHONE_STATE permission, enabling potential IMEI disclosure to remote/benign apps that access the SD card. The vulnerability is tied...

CVE-2012-2640

The NEC BIGLOBE Yome Collection application 1.8.3 and earlier for Android allows remote attackers to read the IMEI value from an SD card via a crafted application that lacks the READPHONESTATE permission...

JVN#05102851: Yome Collection for Android issue in management of IMEI

Yome Collection for Android contains an issue which stores the International Mobile Equipment Identity IMEI on a SD card. Applications without the READPHONESTATE permission may obtain the IMEI from the SD card. Impact If a user of the affected product uses a malicious Android application, the IME...

Windows Gather Generic File Collection

This module downloads files recursively based on the FILEGLOBS option. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Windows Gather Generic File Collection', 'Description' = %q This module...

US and Israel developed Flame Malware against Iran

US and Israel developed Flame Malware against Iran Unnamed Western officials confirmed that Flame was developed by US and Israeli governments. The United States and Israel jointly developed the Flame computer virus that collected intelligence to help slow Iran's nuclear program. The massive piece...

Open redirect

Open redirect vulnerability in IBM Eclipse Help System IEHS, as used in IBM Security AppScan Source 7.x and 8.x before 8.6 and IBM SPSS Data Collection Developer Library 6.0 and 6.0.1, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified...

CVE-2012-2161

CVE-2012-2161 is a cross-site scripting vulnerability in the IBM Eclipse Help System (IEHS) used by multiple IBM products (e.g., InfoSphere Discovery, DB2 Information Center, Sales Center for WebSphere Commerce, IMS Explorer for Development). The flaw resides in IEHS (deferredView.jsp and related...

Tightened Security, Regulated App Permissions in Store for iOS 6

In a move that will patch several loopholes with its iPhone, the newest iteration of Apple’s mobile operation system, iOS 6, will come with heightened security, it was revealed at the company’s Worldwide Developers Conference WWDC this week. Releasing this fall but currently available in beta, iO...

Photo Collection 1.5 SQL Injection

-------------------- IN The NAme OF God -------------------- -====Photo collection Remote Sql Injection Vulnerability====- Exploit Title: Photo collection Remote Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack , 7 , Redhat Version : 1.5 MAil : [email protected] -====Dork====...

Fedora Update for python-crypto FEDORA-2012-8470

Check for the Version of python-crypto OpenVAS Vulnerability Test Fedora Update for python-crypto FEDORA-2012-8470 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

ActiveSync Data Collect

Binary data activesynccollect.nbin...

Microsoft Windows Worm.Win32.Flame.A Information Collection

An information collection vulnerability has been reported in all versions of Microsoft Windows. Worm.Win32.Flame.A is a computer worm that targets Windows users. The worm propagates via removable drives and network shares. Once resident, Flame can compromise user privacy using methods such as...