1557 matches found
CVE-2011-2162
Multiple unspecified vulnerabilities in FFmpeg 0.4.x through 0.6.x, as used in MPlayer 1.0 and other products, in Mandriva Linux 2009.0, 2010.0, and 2010.1; Corporate Server 4.0 aka CS4.0; and Mandriva Enterprise Server 5 aka MES5 have unknown impact and attack vectors, related to issues...
Mandriva Linux Security Advisory : mplayer (MDVSA-2011:088)
Multiple vulnerabilities have been identified and fixed in mplayer : oggparsevorbis.c in FFmpeg 0.5 does not properly perform certain pointer arithmetic, which might allow remote attackers to obtain sensitive memory contents and cause a denial of service via a crafted file that triggers an...
Senators Press Google, Apple Execs on Privacy and Location Tracking
In a hearing on Tuesday about the amount of data that mobile device manufacturers, app developers and others collect about users’ location and activities, senators called on Apple, Google and other companies to be more open and clear with consumers about their data-collection and tracking...
Silently Pwning Protected-Mode IE9 and Innocent Windows Applications
Our advanced binary planting research goes on... and it's time to reveal some interesting hacks, for instance how to exploit binary planting or DLL hijacking, if you prefer the less suitable term to execute remote malicious code through Internet Explorer 9 in protected mode on Windows 7 - without...
The Gazette Edition Cross Site Scripting
Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in The Gazette Edition theme for WordPress. It's commercial theme for WP by WooThemes. ------------------------- Affected products: -----------------------...
Mandriva Linux Security Advisory : ffmpeg (MDVSA-2011:062)
Multiple vulnerabilities has been identified and fixed in ffmpeg : FFmpeg 0.5 allows remote attackers to cause a denial of service hang via a crafted file that triggers an infinite loop. CVE-2009-4636 flicvideo.c in libavcodec 0.6 and earlier in FFmpeg, as used in MPlayer and other products, allo...
Farmville Compromises Facebook - Facebook Fixes Flaw !
After the release of FireSheep, Facebook took an important step to help protect Facebook user accounts by allowing users to choose to keep an encrypted connection as long as they used just Facebook and intelligently designed apps. Savvy users immediately discovered that if they tried to use gross...
PHP-Nuke 8. x <= "chng_uid" blind defect and repair-vulnerability warning-the black bar safety net
Affected version: PHP-Nuke 8. x = Vulnerability description: PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features...
GnackTrackR6 Released , available for Download !
GnackTrackR6 Released , available for Download ! GnackTrack is a Live and installable Linux distribution designed for Penetration Testing and is based on Ubuntu. Although this sounds like BackTrack, it is most certainly not; it's very similar but based on the much loved GNOME! GnackTrackR6 has ju...
Red Hat Enterprise Linux seunshare Unsafe Implementation
Developers should not rely on the stickiness of /tmp on Red Hat Linux --------------------------------------------------------------------- Recent versions of Red Hat Enterprise Linux and Fedora provide seunshare, a setuid root utility from policycore-utils intended to make new filesystem...
Mac App Store Safeguards Bypassed, Opening Up Pirated Apps
Just a day after Apple introduced its Mac App Store, some users already have found a way around the DRM system designed to ensure that they have paid for the apps that they’re using. The technique seems to work only on apps that don’t correctly implement the method for checking the App Store...
Exploit Kits Employing Obfuscation to Prevent Analysis
The creators of the Phoenix exploit kit have begun using obfuscation and other techniques to prevent security researchers and others from reverse-engineering the installation process for the kit, adopting a tactic that has become increasingly popular among attackers recently. The Phoenix exploit...
Mantra: A Browser based Security Framework !
Mantra is a dream that came true for the author. It is a collection of free and open source tools integrated into a web browser – Firefox, which can become handy for students, penetration testers, web application developers, security professionals etc. It is portable, ready-to-run, compact and...
Android Update Adds Protection From Mobile Clickjacking
Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...
Android Update Adds Protections For Mobile Clickjacking
Google released the latest version of its Android mobile operating system on Monday, adding security features that it says will make it tougher for mobile device users to be subjected to “clickjacking” attacks that trick them into clicking on hidden or disguised user interface elements. The compa...
J-Integra 2.11 Remote Code Execution
esp = String100, "B" calc = unescape"%eb%03%59%eb%05%e8%f8%ff%ff%ff%49%49%49%49%48%49" & unescape"%49%49%49%49%49%49%49%49%49%49%49%49%51%5a%6a%68" & unescape"%58%50%30%42%31%42%41%6b%41%41%78%32%41%42%32%42" & unescape"%41%30%42%41%41%58%38%41%42%50%75%59%79%39%6c%4a" &...
Eclipse IDE | Help Server Local Cross Site Scripting (XSS) Vulnerability
========================================================= Eclipse IDE | Help Server Local Cross Site Scripting XSS Vulnerability ========================================================= 1. OVERVIEW The Help Content web application of Eclipse IDE was vulnerable to Cross Site Scripting XSS...
Eclipse IDE Cross Site Scripting
========================================================= Eclipse IDE | Help Server Local Cross Site Scripting XSS Vulnerability ========================================================= 1. OVERVIEW The Help Content web application of Eclipse IDE was vulnerable to Cross Site Scripting XSS...
Watcher 1.4.1 - latest version download
"Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...
[SECURITY] Fedora 12 Update: tomcat6-6.0.26-3.fc12
Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...