1109 matches found
[SSL Audit] Remotely scans web servers for SSL support
SSL Audit remotely scans web servers for SSL support, unlike other tools it is not limited to ciphers supported by SSL engines such as OpenSSL or NSS but can detect all known cipher suites. It features an innovative Fingerprinting engine that was never seen before. Fingerprint mode Experimental...
[The Burp SessionAuth] Extension for Detection of Possible Privilege escalation vulnerabilities
Normally a web application should identify a logged in user by data which is stored on the server side in some kind of session storage. However, in web application audits someone can often observe that internal user identifiers are transmitted in HTTP requests as parameters or cookies. Applicatio...
Fedora 18 : zeroinstall-injector-2.3-1.fc18 (2013-12396)
Enhancements : - upstream now ships an experimental OCaml front-end, this is not yet enabled - Add fish-shell command completion - Allow relative files in and for local feeds. This makes it easy to test feeds before passing them to 0repo. Bug fixes : - Better handling of default=' in bindings. Th...
Debian: Security Advisory (DSA-2704-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-4007: Improper Input Validation
Cisco IOS 15.0 and 15.1 and IOS XE 3.x do not properly handle the "set mpls experimental imposition" command, which allows remote attackers to cause a denial of service device crash via network traffic that triggers 1 fragmentation or 2 reassembly, aka Bug ID CSCtr56576...
PT-2012-1780
Name of the Vulnerable Software and Affected Versions Cisco IOS versions 15.0 through 15.1 Cisco IOS XE versions 3.x Description The issue arises from improper handling of the set mpls experimental imposition command, allowing remote attackers to cause a denial of service, resulting in a device...
PHP local file inclusion(LFI)exploit-vulnerability warning-the black bar safety net
This study main references are: http://downloads.ackack.net/LocalFileInclusion.pdf Experimental code: If you are on linux, be submitted directly to: test. php? for=/etc/passwd%0 0 to display the file. ? php include$GET'for'.‘. php’;//for testing local include vulnerability ?& gt; If it is on win,...
[SECURITY] [DSA 2363-1] tor security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2363-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2011 http://www.debian.org/security/faq -...
BackTrack 5 will also be for Motorola Xoom !
In the past few days offensive-security have been toying with some Motorola hardware, and have managed to get a basic build of BackTrack 5 + toolchain on a Motorola Xoom. The possibilities look exciting as offensive-security are slowly building several experimental arm packages. offensive-securit...
DSA-2200-1 iceweasel - security update
Bulletin has no description...
[BSA-016] Security Update for exim4
Andreas Metzler uploaded new packages for exim4 which fixed the following security problems: CVE-2010-4345 exim privilege escalation Exim 4.72 and earlier allows local users to gain privileges by leveraging the ability of the exim user account to specify an alternate configuration file with a...
Sonic.net Selected by Google to Operate Stanford Fiber Network !
Sonic.net today announced it has been selected to operate and support the trial fiber-to-the-home network Google is building at Stanford University. This experimental project will test new fiber construction and operation methods, while delivering full gigabit speeds to approximately 850 faculty...
[SECURITY] [DSA 2132-1] New xulrunner packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2132-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 11, 2010 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2106-1 (xulrunner)
The remote host is missing an update to xulrunner announced via advisory DSA 2106-1. OpenVAS Vulnerability Test $Id: deb21061.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2106-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2010 E-Soft Inc...
[SECURITY] [DSA 2106-1] New xulrunner packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-2106-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff September 08, 2010 http://www.debian.org/security/faq -...
RSA 2010: Researchers Demo Mobile Botnet from Smartphone App
A pair of researchers has amassed nearly 8,000 iPhones and Android smartphones in an experimental mobile botnet that demonstrates the ease of spreading potentially malicious applications on these devices. Read the full article. Dark Reading...
Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net
Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...
Mandriva Security Advisory MDVSA-2009:289 (kernel)
The remote host is missing an update to kernel announced via advisory MDVSA-2009:289. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...
