Wireshark 1.4.2 & Wireshark 1.2.13 - new version released !

"Wireshark is the world's most popular network protocol analyzer. It is used for troubleshooting, analysis, development, and education." The following protocols have been updated – AgentX, ANCP, DIAMETER, HTTP, IP, LDSS, MIME, NBNS, PROFINET, SIP, TCP, Telnet, ZigBee. This update also fixes many...

[SECURITY] Fedora 13 Update: mingw32-OpenSceneGraph-2.8.2-3.fc13

The OpenSceneGraph is an OpenSource, cross platform graphics toolkit for the development of high performance graphics applications such as flight simulators, games, virtual reality and scientific visualization. Based around the concept of a SceneGraph, it provides an object oriented framework on...

RHEL 6 : java-1.6.0-openjdk (RHSA-2010:0865)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0865 advisory. These packages provide the OpenJDK 6 Java Runtime Environment and the OpenJDK 6 Software Development Kit. defaultReadObject of the...

RHEL 6 : java-1.5.0-ibm (RHSA-2010:0873)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0873 advisory. The IBM 1.5.0 Java release includes the IBM Java 2 Runtime Environment and the IBM Java 2 Software Development Kit. This update fixes severa...

Ears Perk Interest As New Biometric Identifier

There’s more to ears than meets the eye, at least according to recently released report by UK researchers, which finds that ear shape may be a more reliable measure of individuality than the widely-used fingerprint. Ear shape is gaining new ground to become a credible biometric, according to the...

FTPPad 1.2.0 - Remote Stack Buffer Overflow (Metasploit)

$Id: ftppadlistreply.rb 11039 2010-11-14 19:03:24Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

CVE-2010-3870

The utf8decode function in PHP before 5.3.4 does not properly handle non-shortest form UTF-8 encoding and ill-formed subsequences in UTF-8 data, which makes it easier for remote attackers to bypass cross-site scripting XSS and SQL injection protection mechanisms via a crafted string...

NSA: Our Development Methods Are in the Open Now

WASHINGTON–Despite its reputation for secrecy and technical expertise, the National Security Agency doesn’t have a set of secret coding practices or testing methods that magically make their applications and systems bulletproof. In fact, one of the agency’s top technical experts said that virtual...

CVE-2010-3914

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in...

Design/Logic Flaw

Untrusted search path vulnerability in VIM Development Group GVim before 7.3.034, and possibly other versions before 7.3.46, allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse User32.dll or other DLL that is located in...

Cyber crime cell arrests two men for `stealing` data

MUMBAI: Two former employees of a software development company for homeopathy sites, who allegedly stole their employers data code, patent software and other data and started their own company, landed in the police net after they threatened him with dire consquences. The cyber crime investigating...

OpenJDK HttpURLConnection allows arbitrary request headers (6961084,6980004)

Unspecified vulnerability in the Networking component in Oracle Java SE and Java for Business 6 Update 21 and 5.0 Update 25 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information was obtained from the October 2010 CPU...

RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01

Check for the Version of java-1.6.0-openjdk OpenVAS Vulnerability Test RedHat Update for java-1.6.0-openjdk RHSA-2010:0768-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Phpcms 2 0 0 8 two SQL injection vulnerabilities-vulnerability warning-the black bar safety net

Phpcms is a leading web content management system, but also is an open-source PHP development framework. SQL injectiona In the file api/space. api. php: $arrcontent = $content-listinfo"userid='$userid'", $order, 1, 1 0; //line 7 Listinfo function in the file include/admin/ content. class. php:...

OrangeHRM Detection

This host is running OrangeHRM, a Human Resource management and development system. OpenVAS Vulnerability Test $Id: gborangehrmdetect.nasl 5735 2017-03-27 12:27:20Z cfi $ OrangeHRM Detection Authors: Michael Meyer Copyright: Copyright c 2010 Greenbone Networks GmbH This program is free software;...

More Secure Software Needed for Utilities, NERC CSO Says

It took a malware attack with an unprecedented level of sophistication to make it happen, but officials in charge of the security of much of the country’s electrical grid have come ot the conclusion that there is a need for more secure software and better security processes and procedures to...

ecshop modify any user password vulnerability XSS exploit-vulnerability warning-the black bar safety net

Currently ecshop presence of the reflection typeXSS, you can use, if the secondary development existXSSor other CSRF problem, then use more. Once encountered this problem, slightly affected by its damage） ByXSSstructure post submission of personal information is modified, the modification is...

SmarterMail 7.2.3925 - LDAP Injection

SmarterMail 7.2.3925 - LDAP Injection Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.2 Bug : LDAP Injection + Cross Site Scripting STORED Test...

[SECURITY] Fedora 14 Update: Django-1.2.3-1.fc14

Django is a high-level Python Web framework that encourages rapid development and a clean, pragmatic design. It focuses on automating as much as possible and adhering to the DRY Don't Repeat Yourself principle...

SiteEngine CMS 5.1.0 file upload vulnerability-vulnerability warning-the black bar safety net

Website engineSiteEngine,name: Boca website, the engine management system, The Beijing Boca vanguard Software Development Co., Ltd. in 2 0 0 2-year independent research and development, with intellectual property rights of a marketing type website construction management class software. At the sa...