8919 matches found
[Contest] Win "Ghost in the Wires" Book by Kevin Mitnick
Contest Win "Ghost in the Wires " Book by Kevin Mitnick Some call him a saint, some a criminal, others adore him. Industry may loathe him but we here at The Hacker News say, "Get ready, loyal subscribers! " Enter our newest contest and win a copy of Kevin Mitnick's new book titled, "Ghost in the...
CVE-2011-3850
creationtimestamp| type| source ---|---|--- 2011-09-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36178...
Google Releases Chrome 14.0.835.163
Google has released Chrome 14.0.835.163 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry and update to...
CVE-2011-3483
creationtimestamp| type| source ---|---|--- 2011-09-08 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36128...
Heap overflow
The isgptvalid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface EFI GUID Partition Table GPT entry, which allows physically proximate attackers to cause a denial of service heap-based buffer overflow and OOPS or obtain...
CVE-2011-3979
creationtimestamp| type| source ---|---|--- 2011-09-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36121...
CVE-2006-2369
creationtimestamp| type| source ---|---|--- 2011-08-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/17719 2012-05-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36932 2018-05-29 15:50:33+00:00| seen|...
kernel: validate size of EFI GUID partition entries
The isgptvalid function in fs/partitions/efi.c in the Linux kernel before 2.6.39 does not check the size of an Extensible Firmware Interface EFI GUID Partition Table GPT entry, which allows physically proximate attackers to cause a denial of service heap-based buffer overflow and OOPS or obtain...
Network Tracker 0.95 Cross Site Scripting
Exploit Title: Network Tracker .95 Stored XSS Date: 08-18-2011 Author: G13 Software link: http://networktracker.org/ Version: .95 ISSUE The application contains a option which allows anyone to create a user. If this option is left enabled an attacker could launch a stored XSS attack against the...
network tracker .95 - Persistent Cross-Site Scripting
network tracker .95 - Persistent Cross-Site Scripting Exploit Title: Network Tracker .95 Stored XSS Date: 08-18-2011 Author: G13 Software link: http://networktracker.org/ Version: .95 ISSUE The application contains a option which allows anyone to create a user. If this option is left enabled an...
network tracker .95 - Persistent Cross-Site Scripting
Exploit Title: Network Tracker .95 Stored XSS Date: 08-18-2011 Author: G13 Software link: http://networktracker.org/ Version: .95 ISSUE The application contains a option which allows anyone to create a user. If this option is left enabled an attacker could launch a stored XSS attack against the...
OllyDbg 2.01 alpha 4 released
OllyDbg 2.01 alpha 4 released Other new features in this version: - Patch manager, similar to 1.10 - Shortcut editor, supports weird things like Ctrl+Win+$ etc. Now you can customize and share your shortcuts. I haven't tested it on Win7, please report any found bugs and incompatibilities! -...
WordPress Themes Vulnerability
TimThumb, a PHP script that is reused in many popular themes for the WordPress blog software, contains a vulnerability that allows a remote attacker to upload arbitrary PHP code to an affected site. US-CERT encourages users and administrators to: determine if any hosted blogs use TimThumb by...
CVE-2011-2784
Removed by vendor...
Epsilon Ups Ante on Security Following Breach
Nearly three months after marketing services firm Epsilon had its system breached, the company has begun to rebuild the security of its e-mail marketing platform. The firm has unveiled an array of enhancements they claim will mitigate “electronic crimes in motion” according to a press release...
Google Releases Chrome 12.0.742.112
Google released Chrome 12.0.742.112 for Windows, Mac, Linux, and Chrome Frame to address multiple vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to execute arbitrary code. This update also contains an updated version of Adobe Flash. US-CERT encourages users and...
Google Releases Chrome 12.0.742.100
Google released Chrome 12.0.742.100 for Windows, Mac, Linux, and Chrome Frame to address a critical vulnerability in the Flash player plug-in. This vulnerability could allow an attacker to take control of the affected system. US-CERT encourages users and administrators to review the Google Chrome...
CVE-2011-1943
The destroyonesecret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file...
CVE-2011-1943
The destroyonesecret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file...
CVE-2011-1943
The destroyonesecret function in nm-setting-vpn.c in libnm-util in the NetworkManager package 0.8.999-3.git20110526 in Fedora 15 creates a log entry containing a certificate password, which allows local users to obtain sensitive information by reading a log file...