[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0 and -current to fix security issues. More details about the issues may be found on the Mozilla website: http://www.mozilla.org/security/known-vulnerabilities/firefox36.html Here are the details from the Slackware 13.0 ChangeLog:...

Low: Red Hat Enhancement Advisory: valgrind bug fix and enhancement update

A Valgrind update that re-bases to upstream version 3.5.0, adds support for new Intel64/AMD64 instructions, and fixes several bugs is now available. Valgrind is a tool to help you find memory-management problems in your programs. When a program is run under Valgrind's supervision, all reads and...

Shellcode - Win32 MessageBox Metasploit module

Shellcode - Win32 MessageBox Metasploit module. Shellcode exploit for win32 platform $Id: messagebox.rb 4 2010-02-26 00:28:00:00Z corelanc0d3r & rick2600 $ Installation instructions : Drop file in framework3/modules/payloads/singles/windows folder Usage : ./msfpayload windows/messagebox...

[Backports-security-announce] Security Update for drupal6

Luigi Gangitano uploaded new packages for drupal6 which fixed the following security problems: SA-CORE-2010-001 Multiple vulnerabilities and weaknesses were discovered in Drupal. Installation cross site scripting A user-supplied value is directly output during installation allowing a malicious us...

Subdreamer 3.0.1 - CMS upload

======================================================================================== | Title : Subdreamer.v3.0.1 cms upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.h4kz.com | Web Site : | Dork : Website powered by Subdreamer CMS & Sequel Theme Designed ...

[Backports-security-announce] Security Update for dovecot

Marco Nenciarini uploaded new packages for dovecot which fixed the following security problems: CVE not assigned jet Fetching a message with a huge header could have resulted in Dovecot eating a lot of CPU. An evil attacker could cause a DoS by sending forged messages. For the lenny-backports...

Maian Uploader 4.0 - Arbitrary File Upload

======================================================================================== | Title : Maian Uploader v4.0 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb - Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web...

Microsoft Hyper-V本地拒绝服务漏洞（MS10-010）

BUGTRAQ ID: 38113 CVE ID: CVE-2010-0026 Hyper-V是基于虚拟机监控程序的技术，提供可扩展、可靠和高度可用的虚拟化平台。 Windows Server 2008和Server 2008 R2上的Hyper-V没有充分的验证特定序列的机器指令，guest机器上的本地用户可以导致Hyper-V服务器变得没有响应。 Microsoft Windows Server 2008 SP2 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 厂商补丁： Microsoft -------...

[SECURITY] [DSA 2000-1] New ffmpeg packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-2000-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

[Backports-security-announce] Security Update for openoffice.org

Rene Engelhard uploaded a new package for openoffice.org which fixed the following security problems: CVE-2010-0136 It was discovered that macro security settings were insufficiently enforced for VBA macros. CVE-2009-0217 It was discovered that the W3C XML Signature recommendation contains a...

CVE-2010-0026: Improper Input Validation

The Hyper-V server implementation in Microsoft Windows Server 2008 Gold, SP2, and R2 on the x64 platform allows guest OS users to cause a denial of service host OS hang via a crafted application that executes a malformed series of machine instructions, aka "Hyper-V Instruction Set Validation...

Hackers used a variety of free kill technology induction-vulnerability warning-the black bar safety net

One, you want to make a Trojan horsefree kill The first thing to prepare one without the shell of the Trojan Horse, this point is very important, otherwise free killoperation can not be performed indefinitely. Then we want to Trojan the memory offree to kill, from the above analysis it can be see...

[Backports-security-announce] Security Update for proftpd-dfsg

Francesco P. Lovergine uploaded new packages for proftpd-dfsg which fixed the following security problem: CVE-2009-3639 The modtls module in ProFTPD before 1.3.2b, and 1.3.3 before 1.3.3rc2, when the dNSNameRequired TLS option is enabled, does not properly handle a \0 character in a domain name i...

[Backports-security-announce] Security Update for pdns-recursor

Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...

[Backports-security-announce] Security Update for pdns-recursor

Gerfried Fuchs uploaded new packages for pdns-recursor which fixed the following security problems: CVE-2009-4009 A buffer overflow can be exploited to crash the daemon, or potentially execute arbitrary code. CVE-2009-4010 A cache poisoning vulnerability may allow attackers to trick the server in...

Add An Ad Script Remote Shell Upload

| | Add An Ad Script Remote PHP File Upload | | it works with Add An Ad Cart script and Add An Event script | | Site : http://www.addanad.com/ | | Download : | http://www.addanad.com/addanad/product.php?id=1 Add An Ad Cart | http://www.addanad.com/addanad/product.php?id=14 Add An Event | | Found ...

Mini File Host 1.5 - Arbitrary File Upload

===================================================================== ========= / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | IN THE NAME OF // \ || || // \ || || ===================================================================== ========= » Note : This vulnerability...

Fedora Core 10 FEDORA-2009-12180 (mysql)

The remote host is missing an update to mysql announced via advisory FEDORA-2009-12180. OpenVAS Vulnerability Test $Id: fcore200912180.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-12180 mysql Authors: Thomas Reinke Copyright: Copyright c 2009...

Uploadscript v1.0. Multiple Vulnerabilities

No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...