Durandal - Distributed CPU/GPU Hash Cracker v 0.5 released

Durandal - Distributed CPU/GPU Hash Cracker v 0.5 released Durandal is a distributed GPU/CPU computing software that aims to crack passwords. Mostly written in C++ with the Boost library, it works on many systems, however it is only built for Windows and GNU/Linux for the moment, on the x86 and x...

NetBSD network functions buffer overflow

Buffer overflow on oversized argument in getservbyname and getservbyport...

NetBSD 5.1 - libcnet Multiple Stack Buffer Overflows

NetBSD 5.1 - libcnet Multiple Stack Buffer Overflows // source: https://www.securityfocus.com/bid/48528/info NetBSD is prone to a stack-based buffer-overflow vulnerability affecting multiple functions in the 'libc/net' library. Successful exploits may allow an attacker to execute arbitrary code i...

SuSE 11.1 Security Update : libgnomesu (SAT Patch Number 4805)

The libgnomesu pam backend did not check the return value of the setuid functions. Local users could exploit that to gain root privileges. CVE-2011-1946 Note: this is just a re-release of the previous update to fix a regression unrelated to the security issue. %NASLMINLEVEL 70300 C Tenable Networ...

Cross site scripting

Cross-site scripting XSS vulnerability in Cybozu Office 6, 7, and 8 before 8.1.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "address book and user list functions."...

Debian DSA-2265-1 : perl - lack of tainted flag propagation

Mark Martinec discovered that Perl incorrectly clears the tainted flag on values returned by case conversion functions such as 'lc'. This may expose preexisting vulnerabilities in applications which use these functions while processing untrusted input. No such applications are known at this stage...

JaManaGe enterprise built Station system v2. 0 injection vulnerability-vulnerability warning-the black bar safety net

By:Mr. DzY date:2011/06/11 aManaGe the enterprise built Station system with perfect enterprise website background management functions, can through the background simple operation to achieve a large amount of information updated. Finished Good system, products, news, talent, and customer service...

Understanding The Concept of Bypassing Antivirus,by Internet Security Team

Understanding The Concept of Bypassing Antivirus,by Internet Security Team Anti-Virus manufacturers nowadays implements more and more complex functions and algorithms in order to detect the latest and newest viruses along with their variants. There is however simple methods that can be used to...

DEBIAN-CVE-2011-0761

Perl 5.10.x allows context-dependent attackers to cause a denial of service NULL pointer dereference and application crash by leveraging an ability to inject arguments into a 1 getpeername, 2 readdir, 3 closedir, 4 getsockname, 5 rewinddir, 6 tell, or 7 telldir function call...

Plone Security Bypass

The version of Plone on the remote host fails to require authentication to access several sensitive functions. Plone is built on top of Zope, which maps Python objects and their methods to URLs. Methods can have security restrictions, such as requiring a login account or a specific privilege leve...

CVE-2011-1487

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

CVE-2011-1487

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

CVE-2011-1487

CVE-2011-1487 affects Perl 5.10.x–5.13.11 where the functions lc, lcfirst, uc, and ucfirst fail to apply taint to the return value during processing tainted input, potentially allowing context-dependent attackers to bypass taint protection. Public advisories (e.g., MiracleLinux AXSA-2011-570:01 a...

CVE-2011-1487

The 1 lc, 2 lcfirst, 3 uc, and 4 ucfirst functions in Perl 5.10.x, 5.11.x, and 5.12.x through 5.12.3, and 5.13.x through 5.13.11, do not apply the taint attribute to the return value upon processing tainted input, which might allow context-dependent attackers to bypass the taint protection...

Ассемблер для самых маленьких.

Ассемблер для самых маленьких План: 1 Введение 2 Пару слов про асм 3 Tasm 4 Регистры, сегменты 5 Команды асма 6 Первая прога 7 Разбор программы 8 Функции 9 Стек 10 Команды перехода 11 Циклы 12 Процедуры 13 Include 14 Написание программы, используя полученные знания 15 Вывод Начнем. I Введение...

Основы написания Win-шеллкода

В этой статье речь пойдет о написании простого шеллкода под Windows платформу. Статья является начальным этапом цикла статей, которые я, опираясь на материалы и труды зарубежных специалистов в данной области, планирую написать. Эта статья не насыщена всеобъемлющей информацией, однако её цель -...

Snow Hui voting system php version upload vulnerability-vulnerability warning-the black bar safety net

Snow Hui voting system not only has a PHP version, but also ASP and ASP. NET version, it seems that the comparison focus, you can add a voting topic, vote items, delete modify functions, friendly interface. The root directory to upload file imgupload.php file code: ? php requireonce"conn.php";...

Wireshark Multiple Vulnerabilities March-11 (Windows)

The host is installed with Wireshark and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultvulnmar11win01.nasl 7029 2017-08-31 11:51:40Z teissa $ Wireshark Multiple Vulnerabilities March-11 Windows Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Network...

Google Chrome multiple vulnerabilities - March 11 (Windows)

The host is running Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbgooglechromemultvulnmar11win.nasl 7044 2017-09-01 11:50:59Z teissa $ Google Chrome multiple vulnerabilities - March 11 Windows Authors: Sooraj KS Copyright: Copyright c 2011 Greenbone...

CVE-2011-1140

Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...