Linksys BEFSR41 Cross Site Scripting

DCA-00017 LinkSys BEFSR41 Multiple Stored Xss Software/Hardware - LinkSys DSL Router BEFSR41 V2 Vendor Product Description - This Router will allow your computers to share a high-speed Internet connection as well as resources, including files and printers. Bug Description - Linksys does not...

India to Increase Phone Banking Security Starting Next Month !

Starting with January 1st, 2011, Indian banks will require an additional security code in order to authorise phone banking transactions, according to regulatory guidelines issued by the Reserve Bank of India RBI. Known as one-time passwords OTP, these codes are part of what is known as two-factor...

27C3: GSM cell phones even easier to tap !

At the 27th Chaos Communication Congress 27C3 hacker conference, security researchers demonstrated how open source software on a number of revamped, entry-level cell phones can decrypt and record mobile phone calls in the GSM network. Using a normal laptop and a homemade monitoring device, team...

SNMP Enumeration Module

This module allows enumeration of any devices with SNMP protocol support. It supports hardware, software, and network information. The default community used is "public". This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framewor...

PacketFence v2.0.0 - Latest Version !

"PacketFencePacketFence is an open-source network access control NAC system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless...

Experts: OpenBSD Backdoor Allegations 'Almost Certainly False'

The incredible allegations that developers working under the auspices of the FBI and Justice Department planted a backdoor in the IPSec stack of the OpenBSD operating system are likely just that, experts say: not credible. “There is no way that the FBI paid anyone to create backdoors in OpenBSD a...

Dell Integrated Remote Access Controller (iDRAC) Web Interface Detection

The web interface for Dell Integrated Remote Access Controller iDRAC, formerly known as Dell Remote Access Controller DRAC, was detected on the remote host. C Tenable, Inc. Thanks to Jason Haar for his help! include'compat.inc'; if description scriptid51185; scriptversion"1.32";...

Moderate: Red Hat Security Advisory: openssl security update

Updated openssl packages that fix three security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Dutch Arrest 16 Year Old for Wikileaks Attack

Dutch authorities issued a statement Thursday saying that a 16 year old boy has been taken into custody for involvement in attacks against the Web sites of Mastercard and Visa. The boy, who was not named, was due to be arraigned by a judge in Rotterdam on Friday. The arrest is the first known...

OpenVZ Guest Detection

/proc/userbeancounters could be read. This file provides information to the guest operating system in OpenVZ containers. TRUSTED...

Pandora Fms 3.1 - Directory Traversal / Local File Inclusion

Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as...

BackTrack 4 R2 : New release download now !

After being in production for almost 3 months, BackTrack has been updated – yet again! It has been aptly code named – "Nemesis". "BackTrack is a Linux-based penetration testing arsenal that aids security professionals in the ability to perform assessments in a purely native environment dedicated ...

[SECURITY] Fedora 14 Update: suricata-1.0.2-1.fc14

The Suricata Engine is an Open Source Next Generation Intrusion Detection and Prevention Engine. This engine is not intended to just replace or emulate the existing tools in the industry, but will bring new ideas and technologies to the field. This new Engine supports Multi-threading, Automatic...

Researchers Working Toward Processor-Specific Attacks

The last two decades have been a cake walk for malware authors. More than nine-tenths of the world’s computers run some variation of the same operating system – Microsoft’s Windows. A similarly sized super-majority use an array of applications from the same vendor: Microsoft Office, the Internet...

Mandriva Update for gkrellm MDVA-2010:216 (gkrellm)

Check for the Version of gkrellm OpenVAS Vulnerability Test Mandriva Update for gkrellm MDVA-2010:216 gkrellm Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

MDVA-2010:216 : gkrellm

The gkrellm package shipped in 2010.0 and 2010.1 was build without libsensor support, preventing the usage of hardware sensors in some cases, as reported in bug 55400. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disable...

Mozilla Firefox 3.5.x < 3.5.14 Multiple Vulnerabilities

Binary data 801368.prm...

DEBIAN-CVE-2010-2938

arch/x86/hvm/vmx/vmcs.c in the virtual-machine control structure VMCS implementation in the Linux kernel 2.6.18 on Red Hat Enterprise Linux RHEL 5, when an Intel platform without Extended Page Tables EPT functionality is used, accesses VMCS fields without verifying hardware support for these...

Microsoft Proposes 'Health Certificates' For Internet Access

Microsoft is proposing a new Internet-wide security model, based on the concepts of public health, that is designed to address the problem of how to prevent infected machines from affecting the security and performance of PCs elsewhere on the Web. The model would require each PC to present a...

wdb-version NSE Script

Detects vulnerabilities and gathers information such as version numbers and hardware support from VxWorks Wind DeBug agents. Wind DeBug is a SunRPC-type service that is enabled by default on many devices that use the popular VxWorks real-time embedded operating system. H.D. Moore of Metasploit ha...