Dazzle Blast - Remote File Inclusion

Dazzle Blast - Remote File Inclusion o Dazzle Blast Remote File Inclusion Vulnerability Software : Dazzle Blast Download : http://www.dazzleblast.com/dazzleblast.zip Author : NoGe Contact : nogedotcodeatgmaildotcom Blog : http://evilc0de.blogspot.com/ Home : http://antisecurity.org/ o Vulnerable...

openSUSE 10 Security Update : clamav (clamav-6309)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update clamav-6309. The text description of this plugin is C SUSE LL...

SuSE9 Security Update : ClamAV (YOU Patch Number 12442)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid41307; scriptversion"1.7";...

SuSE 11 Security Update : ClamAV (SAT Patch Number 1009)

Multiple issues in clamav regarding malformed archives and emails have been fixed. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc...

CVE-2009-2207

The MobileMail component in Apple iPhone OS 3.0 and 3.0.1, and iPhone OS 3.0 for iPod touch, lists deleted e-mail messages in Spotlight search results, which might allow local users to obtain sensitive information by reading these messages...

Authentication flaw

Plesk 8.6.0, when short mail login names SHORTNAMES are enabled, allows remote attackers to bypass authentication and send spam e-mail via a message with 1 a base64-encoded username that begins with a valid shortname, or 2 a username that matches a valid password, as demonstrated using a SMTP and...

EPIC FAIL: new user signups result in plain text email with all login details

After signing up to a JIRA instance, I got an email which simply amazed me - it contained: My username My email address My full name My password It was all there, right before me, in a plain-text unencrypted email sent across a public network. WTF?! I'm not sure which universe that's considered a...

[20090723] - Core - com_mailto Timeout Issue

In commailto, it was possible to bypass timeout protection against sending automated emails...

openSUSE Security Update : kdepim3 (kdepim3-770)

This updates of KMail does not executes links in mail without confirmation anymore. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update kdepim3-770. The text description of this plugin is C SUSE...

An Analysis of the BlackBerry Spyware

From Zero in a Bit Chris Eng Yesterday it was reported by various media outlets that a recent BlackBerry software update from Etisalat a UAE-based carrier contained spyware that would intercept emails and text messages and send copies to a central Etisalat server. We decided to take a look to fin...

Trojan: Gen-Trojan.Heur

Gen-Trojan.Heur is a Trojan that creates and downloads malicious files on the victim's machine. It spreads by emails or other Trojans...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

CVE-2009-2146

Unrestricted file upload vulnerability in the Compose Email feature in the Emails module in Sugar Community Edition aka SugarCRM before 5.2f allows remote authenticated users to execute arbitrary code by uploading a file with only an extension in its name, then accessing the file via a direct...

Debian Security Advisory DSA 1802-1 (squirrelmail)

The remote host is missing an update to squirrelmail announced via advisory DSA 1802-1. This VT has been deprecated and merged into the VT SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mandriva Update for spamassassin MDKSA-2007:049 (spamassassin)

Check for the Version of spamassassin OpenVAS Vulnerability Test Mandriva Update for spamassassin MDKSA-2007:049 spamassassin Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Ubuntu Update for evolution vulnerability USN-583-1

Ubuntu Update for Linux kernel vulnerabilities USN-583-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5831.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for evolution vulnerability USN-583-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Ubuntu: Security Advisory (USN-583-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

KeyLogger: Cheat Monitor

Cheat Monitor is a spyware program that can be used to record information on the computer. Cheat Monitor tracks emails, chats, instant messages, and every keystroke that is entered by the victim. It can also capture screenshots of the infected system and deliver reports to a pre-defined email...

FreeBSD : roundcube -- webmail script insertion and php code injection (35c0b572-125a-11de-a964-0030843d3802)

Secunia reports : Some vulnerabilities have been reported in RoundCube Webmail, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to conduct script insertion attacks and compromise a vulnerable system. The HTML 'background' attribute within e.g...