[Positive Technologies SA 2009-01] PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities

---------------------------------------------------------------------- PT-2009-01 Positive Technologies Security Advisory PGP Desktop Pgpdisk.sys And Pgpwded.sys Multiple Vulnerabilities ---------------------------------------------------------------------- --- Affected Software PGP Desktop 9.9.0...

Unfixed XSS vulnerability at it-s.visti.net

Security researcher SaMTHG, has submitted on 13/04/2009 a cross-site-scripting XSS vulnerability affecting it-s.visti.net, which at the time of submission ranked 458331 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/06/2009. It is currently...

Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC

Exploit for unknown platform in category dos / poc =============================================================== Chance-i DiViS-Web DVR System ActiveX Control Heap Overflow PoC =============================================================== Digital Security Research Group DSecRG Advisory...

[DSECRG-09-030] PrecisionID Datamatrix ActiveX control - Arbitrary File overwriting

Digital Security Research Group DSecRG Advisory DSECRG-09-030 !!! original advisory !!! http://dsecrg.com/pages/vul/DSECRG-09-030.html Application: PrecisionID activeX controls Versions Affected: Vendor URL: http://PrecisionID.com Bugs: Arbitrary File overwriting Exploits: YES Reported: 03.03.200...

In weak economy, IT pros could turn to e-crime

By Jeremy Kirk, IDG News Service Enterprises increasingly feel their employees will be more willing to steal data or sell insider knowledge due to the poor economy, according to an annual security survey infoworld.com conducted by KPMG. Sixty-six percent of respondents felt that out-of-work IT...

Mobile security can no longer be ignored

By Paul F. Roberts, The 451 Group Starting this week at the annual CanSecWest conference in Vancouver, British Columbia, some of the world’s best hackers will crack their knuckles and get to work on a different kind of problem: hacking mobile devices including Apple’s über popular iPhone. The...

Microsoft's Threat Management Gateway is a mixed bag

Microsoft’s initial move into the security products market, the ISA Server, has evolved well beyond its firewall roots. Now known as the Threat Management Gateway, the product is being positioned as a comprehensive Web security gateway. But as Eric Ogren writes in his review of the Threat...

kernel security and bug fix update

2.6.9-78.0.17.0.1.EL - fix entropy flag in bnx2 driver to generate entropy pool John Sobecki orabug 5931647 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug 6845794 - fix enomem due to larger mtu size page alloc Zach Brown orabug 5486128 - fix percpu api bugon wit...

Recently that IE7 0day shellcode decryption-bug warning-the black bar safety net

One, use freshow tool to decrypt Original link http://bbs.kafan.cn/viewthread.php?tid=383769&page=1&extra=page%3D1pid5736829 Need to extract the shellcode decryption 1 dadong replace to % u for once esc decrypt--up 2 esc next fill in 2 1 decode should appear. ! Second, The do-it-yourself it, writ...

Sql injection

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

CVE-2009-0493

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

CVE-2009-0493

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

CVE-2009-0493

The CVE-2009-0493 entry describes a SQL injection in IT!CMS before or at 2.1a, affecting login.php via the Username parameter and allowing remote execution of arbitrary SQL. NVD lists a base score of 7.5 (HIGH) with network access, low attack complexity and no authentication required. The connect...

CVE-2009-0493: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in login.php in IT!CMS 2.1a and earlier allows remote attackers to execute arbitrary SQL commands via the Username...

Reflection for Secure IT Multiple Vulnerabilities (Linux)

This host is installed with Reflections for Secure IT and is prone to Multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbreflectionsecureitunixmultvulnlin.nasl 7113 2017-09-13 06:03:30Z cfischer $ Reflection for Secure IT Multiple Vulnerabilities Linux Authors: Sujit Ghosal Copyright:...

Reflection for Secure IT Detection (SSH)

The script tries to detect Reflections for Secure IT and its version. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Reflection for Secure IT Multiple Vulnerabilities

Reflections for Secure IT is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2008-6021

CVE-2008-6021 relates to Attachmate Reflection for Secure IT UNIX Client/Server before 7.0 SP1, with multiple vulnerabilities reported. Connected sources enumerate concrete issues tied to this CVE across Unix/Linux servers (e.g., inherited OpenSSL vulnerabilities CVE-2006-2937/2940, OpenSSH CVE-2...

CVE-2008-6021: Undefined Security Weakness

Multiple unspecified vulnerabilities in Attachmate Reflection for Secure IT UNIX Client and Server before 7.0 SP1 have unknown impact and attack vectors, aka "security vulnerabilities found by 3rd party analysis."...

ConPresso CMS 4.07 Session Fixation / XSS

HACKATTACK Advisory 25012009ConPresso CMS 4.07 - Session Fixation, XFS, XSS Details Product: ConPresso CMS 4.07 Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.conpresso.de/ Vendor-Status: informed Advisory-Status: not yet published Credits Discovered by: David Vieira-Kurz...