DSA-2246-1 mahara - several vulnerabilities

Bulletin has no description...

Pixel Army Solutions BLIND SQL-i Vulnerability

Exploit for php platform in category web applications ========================================================================= Pixel Army Solutions BLIND SQL-i Vulnerability ==========================================================================...

The Problem of Issuing Certs For Unqualified Names

The recent attack on Comodo and several of its associated registration authorities has spurred quite a bit of re-examination of the way that the Web’s certificate authority infrastructure works–or doesn’t. One interesting result of this work is that the folks at the Electronic Frontier Foundation...

[SECURITY] [DSA 2206-1] New mahara packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 2206-1 [email protected] http://www.debian.org/security/ Martin Schulze March 29th, 2011 http://www.debian.org/security/faq -...

Mahara跨站脚本和跨站请求伪造漏洞

Bugtraq ID: 47033 CVE ID：CVE-2011-0439 Mahara是一款开源的电子文件夹，网络日志，履历表生成器和社会化网络系统。 Mahara存在多个输入验证错误，攻击者可以利用漏洞获得敏感信息或劫持目标用户会话。 -应用程序存在跨站请求伪造漏洞，攻击者可以构建恶意链接，诱使管理员访问，删除博客日志。 -通过Pieform选择框选项传递的输入在显示给用户之前缺少正确过滤，可被利用注入任意HTML和脚本代码，导致恶意数据查看时在目标用户浏览器上执行恶意代码。 Mahara Mahara 1.3.3 Mahara Mahara 1.2.5 Mahara Mahara...

ABBS Electronic Flash Cards 2.1 .fcd Buffer Overflow Exploit

Exploit for windows platform in category local exploits Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the...

ABBS Electronic Flash Cards 2.1 Buffer Overflow

Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom calc pops up Tested on: Win XP SP3...

ABBS Electronic Flash Cards 2.1 - .fcd Local Buffer Overflow

ABBS Electronic Flash Cards 2.1 - .fcd Local Buffer Overflow Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose...

ABBS Electronic Flash Cards 2.1 - '.fcd' Local Buffer Overflow

Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom calc pops up Tested on: Win XP SP3...

North Korea Trains Up Hacker Squad !

Concerns about North Korea's cyber warfare squads are resurfacing after Friday's cyber and GPS jamming attacks, which are being blamed on the North. Pyongyang began developing electronic warfare capabilities in 1986 when it founded Mirim University, the present-day Automation University, to train...

EA Need For Speed Underground Detection

The remote host is running a client relay service for Electronic Arts Need For Speed Underground or a clone of that game. This is a kind of port mapper in that the service provides dynamic port numbers to client software. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

St George's University of London medical school's Database Hacked !

The Metropolitan Police were called in after vandals breached a database maintained by St George's University of London medical school and sent obscene mails to the users of the database. The emails claimed that the database was "closed due to Aids", and that university executive board members we...

Windows Loses Hacker Star Status In Next Decade

The next decade will see Microsoft lose its grip as the most-used and most attacked platform, as a new generation of hackers and cybercriminals diversify, launching attacks on a growing population of mobile devices and computers that run operating systems other than Windows, according to Kaspersk...

Chinese hackers targeted House of Commons !

Chinese hackers not only attacked key federal departments: they also cracked into the computer system of the House of Commons, targeting MPs with large ethnic Chinese constituencies, CTV News has learned. Sources say Canada's secret cyber spy agency -- the Communications Security Establishment --...

SigPlus Pro ActiveX Control < 4.29 Multiple Vulnerabilities

The SigPlus Pro ActiveX control, used for electronic signature integration with Topaz signature pads and installed on the remote Windows host, is earlier than 4.29. Such versions reportedly are affected by the following vulnerabilities : - The 'SetLogFilePath' method allows creation of a log file...

Simploo CMS 1.7.1 PHP Code Execution

Exploit for php platform in category web applications Simploo CMS Community Edition - Remote PHP Code Execution Issue Details ============= Product: Simploo CMS Community Edition Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.simploo.de/ Advisory-Status: published Credits...

Fedora Update for opensc FEDORA-2010-19193

Check for the Version of opensc OpenVAS Vulnerability Test Fedora Update for opensc FEDORA-2010-19193 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Police warns - Beware Facebook scams !

Sophisticated scam artists are raiding blackberries, I-phones and personal computers and are using sites like Facebook to steal identities and money by fooling friends, Halifax police warn. Det. Const. Dana Drover said Wednesday the best way to protect yourself at home — or using public Wi-Fi — i...

Kerala cyber police closing in on software theft culprits !

Thiruvananthapuram, Jan 5 IANS The cyber wing of the Kerala Police Wednesday claimed it had got vital clues about the theft of software source codes and intellectual property data from a Kochi-based IT company. The investigation is progressing on the right track, V.K. Ajith Mohan of the police...

[SECURITY] Fedora 14 Update: opensc-0.11.13-6.fc14

OpenSC is a package for for accessing smart card devices. Basic functionality e.g. SELECT FILE, READ BINARY should work on any ISO 7816-4 compatible smart card. Encryption and decryption using private keys on the smart card is possible with PKCS 15 compatible cards, such as the FINEID Finnish...