symfony 1.3.10 and 1.4.10: security releases

The core team would like to announce the immediate availability of symfony 1.3.10 and 1.4.10. These are security releases in response to Doctrine's security release over the weekend. We recommend everyone update immediately. From the Doctrine blog: Because of a SQL injection possibility we urge...

Moderate: Red Hat Security Advisory: openldap security update

Updated openldap packages that fix three security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

MS11-015: Description of the security update for Microsoft Windows: March 8, 2011

None None...

MS11-017: Description of the security update for Remote Desktop client 7.0: March 8, 2011

None None...

centos security update

CentOS Errata and Security Advisory CESA-2011:0219 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2011-March/079431.html Affected packages: centos-release...

RHEL 4 : redhat-release (EOL Notice) (RHSA-2011:0219)

This is the 1-year notification of the End Of Life plans for Red Hat Enterprise Linux 4. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 4 will end on February 29, 2012. After this date, Red Hat will discontinue the...

Ubertooth - An Open Source Bluetooth Test Tool download !

This project was originally unveiled at the recently concluded ShmooCon. It shows a lot of promise and the authors two years of study and experimentation. The name is Ubertooth. Ubertooth is an open source 2.4 GHz wireless development platform suitable for passive bluetooth monitoring. It aims to...

Free Android encryption comes to Egypt, The revolution will be encrypted !

Free cellphone encryption is coming to Android users in Egypt courtesy of San Francisco software maker Whisper Systems. Until now, Redphone and TextSecure, voice- and text-encryption apps respectively, have generally been available in the US only. Whisper Systems has been working on making the...

Important: Red Hat Security Advisory: krb5 security update

Updated krb5 packages that fix two security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

DEBIAN-CVE-2010-4543

Heap-based buffer overflow in the readchanneldata function in file-psp.c in the Paint Shop Pro PSP plugin in GIMP 2.6.11 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a PSPCOMPRLE aka RLE compression image file that begins a long run...

Cross site scripting

Cross-site scripting XSS vulnerability in lib/mhtxthtml.pl in MHonArc 2.6.16 allows remote attackers to inject arbitrary web script or HTML via a malformed start tag and end tag for a SCRIPT element, as demonstrated by ipt and ipt sequences...

Fedora Update for bind-dyndb-ldap FEDORA-2010-18521

Check for the Version of bind-dyndb-ldap OpenVAS Vulnerability Test Fedora Update for bind-dyndb-ldap FEDORA-2010-18521 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modif...

Joomla Component com_jeauto LFI Vulnerability

Exploit for php platform in category web applications ============================================= Joomla Component comjeauto LFI Vulnerability ============================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /...

[SECURITY] Fedora 13 Update: bind-dyndb-ldap-0.1.0-0.10.a1.20091210git.fc13

This package provides an LDAP back-end plug-in for BIND. It features support for dynamic updates and internal caching, to lift the load off of your LDAP server...

Foxit Reader 4.1.1 - Local Stack Buffer Overflow

Exploit Title : Foxit 4.1.1 Date : 13/11/2010 Author : Sud0 Bug found by : dookie Original POC : https://www.exploit-db.com/exploits/15514/ Software Link : http://www.foxitsoftware.com/downloads/index.php Version : 4.1.1 OS : Windows Tested on : XP SP3 En VirtualBox Type of vuln : EIP / SEH Thank...

MS10-087 Microsoft Word RTF pFragments Stack Buffer Overflow (File Format)

This module exploits a stack-based buffer overflow in the handling of the 'pFragments' shape property within the Microsoft Word RTF parser. All versions of Microsoft Office 2010, 2007, 2003, and XP prior to the release of the MS10-087 bulletin are vulnerable. This module does not attempt to explo...

VulnCheck KEV: CVE-2010-3962

Microsoft Internet Explorer contains an uninitialized memory corruption vulnerability that could allow for remote code execution. The impacted product could be end-of-life EoL and/or end-of-service EoS. Users should discontinue product utilization...

security update

CentOS Errata and Security Advisory CESA-2010:0817 Merged security bulletin from advisories: https://lists.centos.org/pipermail/centos-announce/2010-November/079303.html Affected packages: Upstream details at: https://access.redhat.com/errata/RHSA-2010:0817...

RHEL 3 : redhat-release (EOL Notice) (RHSA-2010:0817)

This is the End Of Life notification for Red Hat Enterprise Linux 3. In accordance with the Red Hat Enterprise Linux Errata Support Policy, the regular 7 year life cycle of Red Hat Enterprise Linux 3 has ended. Red Hat has discontinued the regular subscription services for Red Hat Enterprise Linu...

Fedora 12 : freetype-2.3.11-6.fc12 (2010-15785)

Mon Oct 4 2010 Marek Kasik 2.3.11-6 - Add freetype-2.3.11-CVE-2010-2805.patch Fix comparison. - Add freetype-2.3.11-CVE-2010-2806.patch Protect against negative stringsize. Fix comparison. - Add freetype-2.3.11-CVE-2010-2808.patch Check the total length of collected POST segments. - Add...