ModSecurity 2.5.9 - Remote Denial of Service

ModSecurity 2.5.9 - Remote Denial of Service ============================================= INTERNET SECURITY AUDITORS ALERT 2009-001 - Original release date: February 25th, 2009 - Last revised: March 19th, 2009 - Discovered by: Juan Galiana Lara - Severity: 7.8/10 CVSS Base Scored...

Comcast passwords left unprotected online

User names and passwords belonging to more than 8,000 Comcast Internet customers were left exposed on the Web for at least two months. A post by Brad Stone on the Bits blog NYTimes.com details the situation, which was exposed by a Comcast customer from Pennsylvania. Kevin Andreyo, an educational...

BBC botnet buy: What were they thinking?

By Roel Schouwenberg As Dancho Danchev pointed out, the BBC leased itself a botnet zdnet.com. I couldn’t quite believe it when I read it. The BBC, arguably one of the very best TV producers in the world, surely should have known better? There are so many things wrong about this that I hardly know...

F-Secure Product(s) Integer Overflow Vulnerability (Windows)

This host is installed with F-Secure Products and is prone to Integer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbfsecureprdtsintoverflowvulnwin.nasl 5369 2017-02-20 14:48:07Z cfi $ F-Secure Products Integer Overflow Vulnerability Windows Authors: Sharath S Copyright: Copyright c 20...

WordPress MU < 2.7 - 'HOST' HTTP Header Cross-Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2009-004 - Original release date: December 3rd, 2008 - Last revised: March 10th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.3/10 CVSS scored ============================================= I. VULNERABILITY...

Cross site scripting

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

Cross-site scripting XSS vulnerability in BitDefender Internet Security 2009 allows user-assisted remote attackers to inject arbitrary web script or HTML via the filename of a virus-infected file, as demonstrated by a filename inside a 1 rar or 2 zip archive file...

CVE-2009-0850

BitDefender Internet Security 2009 is vulnerable to a cross-site scripting (XSS) flaw in the way it handles filenames inside virus-infected archive files (RAR/ZIP). This user-assisted exploit can inject arbitrary web script or HTML via the archive filename, as described for CVE-2009-0850. The vul...

Google launching members-only security forum

internetnews.com’s Kenneth Corbin has the scoop on plans by Google to launch a members-only security forum for businesses, law enforcement, government agencies and others to combat malware and fraud on the Web. In addition to Google, the Internet Security Community will draw participation from...

Fedora Update for ekiga FEDORA-2007-321

Check for the Version of ekiga OpenVAS Vulnerability Test Fedora Update for ekiga FEDORA-2007-321 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

BitDefender Internet Security 2009文件名跨站脚本漏洞

BUGTRAQ ID: 33921 BitDefender Internet Security是可提供多种防护功能的安全软件。 在扫描文件时BitDefender Internet Security使用flash显示文件名。如果用户准备了包含有恶意脚本的畸形的rar或zip压缩文档，则当杀毒软件扫描到该文件时就会执行脚本。 Softwin BitDefender Internet Security 2009 厂商补丁： Softwin ------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Orbit Downloader 2.8.4 - 'Hostname' Remote Buffer Overflow

Orbit Vulnerability discovered by Secunia Exploit and POC provided by: JavaGuru Right click on link below then choose download by orbit, CALC.EXE will pop up I got a lot of problems when trying to execute shellcode, because a lot of chars was forbidden and I was not able to execute shellcode. Aft...

BitDefender Internet Security XSS

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

BitDefender Cross Site Scripting

Application: BitDefender Internet Security 2009 OS: Windows Xp All patches a day ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description BitDefender Internet Security is a security...

Optus/Huawei E960 HSDPA Router SMS XSS Attack

Exploit for hardware platform in category remote exploits ============================================= Optus/Huawei E960 HSDPA Router SMS XSS Attack ============================================= XSS Attack using SMS to Optus/Huawei E960 HSDPA Router Synopsis -------- Huawei E960 HSDPA Router...

Heap overflow

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

Multiple heap-based buffer overflows in the ApiThread function in the firewall service aka TmPfw.exe in Trend Micro Network Security Component NSC modules, as used in Trend Micro OfficeScan 8.0 SP1 Patch 1 and Internet Security 2007 and 2008 17.0.1224, allow remote attackers to execute arbitrary...

CVE-2008-3865

CVE-2008-3865 stems from multiple heap-based buffer overflows in Trend Micro’s Network Security Component (NSC) firewall module, within the ApiThread() function of the firewall service (TmPfw.exe). Affected products include Trend Micro OfficeScan 8.0 SP1 Patch 1 and Trend Micro Internet Security ...

CVE-2008-3864

CVE-2008-3864 affects Trend Micro Network Security Component (NSC) firewall modules. The ApiThread() function in the firewall service (TmPfw.exe) processes packets to the default port 40000/TCP and can trigger a heap-based overflow when a size field contains an oversized value, causing a denial o...