D-Link Patches Backdoor Vulnerabilities in Routers

D-Link has patched a backdoor present in a number of its routers that was publicized almost two months ago and could allow an attacker to remotely access the administrative panel on the hardware, run code and make any number of changes. The Thanksgiving patch parade addressed the issue in a numbe...

[SECURITY] Fedora 19 Update: FlightGear-2.10.0-5.fc19

The Flight Gear project is working to create a sophisticated flight simulator framework for the development and pursuit of interesting flight simulator ideas. We are developing a solid basic sim that can be expanded and improved upon by anyone interested in contributing...

[SECURITY] Fedora 17 Update: FlightGear-2.6.0-3.fc17

The Flight Gear project is working to create a sophisticated flight simulator framework for the development and pursuit of interesting flight simulator ideas. We are developing a solid basic sim that can be expanded and improved upon by anyone interested in contributing...

[SECURITY] Fedora 18 Update: FlightGear-2.8.0-2.fc18

The Flight Gear project is working to create a sophisticated flight simulator framework for the development and pursuit of interesting flight simulator ideas. We are developing a solid basic sim that can be expanded and improved upon by anyone interested in contributing...

LulzSec hacker Jeremy Hammond pleads guilty to Stratfor attack, could face 10 years in prison

A computer hacker linked to the group known as Anonymous and LulzSec pleaded guilty on Tuesday to breaking into Stratfor, a global intelligence company. Hammond, 28, was arrested last March and charged with hacking into the computers of Stratfor. Jeremy Hammond and other members of AntiSec, stole...

Ignore Supply Chain Security and Risk Management at Your Peril

No CFO thinks that his signature approving a purchase order for a new five-figure piece of hardware could ultimately cost his company seven-figures, or maybe force them to shut their doors forever. But that’s the reality many companies need to face when it comes to supply chain security and risk...

SiNG CMS 2.9.0 Cross Site Scripting

SiNG cms 2.9.0 email Remote XSS POST Injection Vulnerability alert"XSS";' / in...

[SECURITY] Fedora 15 Update: FlightGear-2.0.0-6.fc15

The Flight Gear project is working to create a sophisticated flight simulator framework for the development and pursuit of interesting flight simulator ideas. We are developing a solid basic sim that can be expanded and improved upon by anyone interested in contributing...

[SECURITY] Fedora 17 Update: FlightGear-2.6.0-2.fc17

The Flight Gear project is working to create a sophisticated flight simulator framework for the development and pursuit of interesting flight simulator ideas. We are developing a solid basic sim that can be expanded and improved upon by anyone interested in contributing...

Common Firewall Feature Enables TCP Hijacking Attacks

Attackers using a feature that is common to many firewalls, switches and other networking gear could silently hijack Web sessions on mobile and desktop devices, according to a research paper presented by two Ph.D students from the University of Michigan. The two discovered that so-called TCP...

Unfixed XSS vulnerability at www.gearjunkies.com

Security researcher jath, has submitted on 08/07/2010 a cross-site-scripting XSS vulnerability affecting www.gearjunkies.com, which at the time of submission ranked 646081 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/07/2010. It is...

Clarity needed on cyberwar plans, study says

From The New York Times John Markoff and John Shanker A study conducted by the National Academy of Sciences found that the United States military needs to create an open, public dalogue to clarify its plans around using offensive weapons in cyberspace. The study also recommends that the military...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...

CVE-2008-3636

Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

CVE-2000-1007

CVE-2000-1007 affects I-gear 3.5.7 and earlier; the issue stems from improper processing of log entries where a URL exceeds 255 characters, which can cause reporting errors. The available references describe the vulnerability as a processing flaw in log handling, with no explicit exploitation det...

CVE-2000-1007

I-gear 3.5.7 and earlier does not properly process log entries in which a URL is longer than 255 characters, which allows an attacker to cause reporting errors...

Небольшая дырка в I-Gear

Слишком длинные записи в log-Файлах приводят к невозможности просмотреть журнал...

I-gear 3.5.x for Microsoft Proxy logging vulnerability + temporary fix.

Hello everyone, this message is generated after several hours with Symantec Tech support and my personal research of the issue. The issue is confirmed to be a problem by Symantec® . Platform: I-gear 3.5.6 and 3.5.7-x for MSP Proxy 2.0 ; Windows NT 4.0 SP6; MSP 2.0 SP1; PowerEdge 2300 dual 450; 51...