Kryogeniks Indicted for Comcast Hack

Three alleged members of the hacker gang Kryogeniks were hit with a federal conspiracy charge for a 2008 stunt that replaced Comcast’s homepage with a shout-out to other hackers. Prosecutors identified Christopher Allen Lewis, 19, and James Robert Black Jr., 20, as the hackers “EBK” and “Defiant,...

[SECURITY] Fedora 10 Update: expat-2.0.1-5.fc10.1

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

[SECURITY] Fedora 11 Update: expat-2.0.1-6.fc11.1

This is expat, the C library for parsing XML, written by James Clark. Expat is a stream oriented XML parser. This means that you register handlers with the parser prior to starting the parse. These handlers are called when the parser discovers the associated structures in the document being parse...

James Butler and Peter Silberman talk malware

James Butler and Peter Silberman of MANDIANT with Threatpost’s Robert Vamosi about malware and their new memory forensic software, Memoryze...

Design/Logic Flaw

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

Code injection

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1254

Tunapie (GUI frontend for video/radio streams) is affected by CVE-2009-1254 due to insufficient escaping of stream URLs, enabling remote command execution via a crafted URL. The issue is part of a set also including CVE-2009-1253 (symlink-based local DoS); Debian DSAs document fixes. Remediation ...

CVE-2009-1253

Tunapie is affected by CVE-2009-1253, a local vulnerability caused by insecure handling of temporary files that allows a local user to overwrite arbitrary files via a symlink attack. Debian's DSA-1764-1 notes fixes in tunapie 2.1.8-2 for the lenny release (and earlier 1.3.1-1+etch2 for etch), add...

CVE-2009-1254

Removed by vendor...

CVE-2009-1253

Removed by vendor...

Unfixed XSS vulnerability at www.aliantpioneers.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.aliantpioneers.com, which at the time of submission ranked 12514632 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. ...

Unfixed XSS vulnerability at actachemscand.dk

Security researcher Jesse-james, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting actachemscand.dk, which at the time of submission ranked 6833051 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...

Unfixed XSS vulnerability at www.ci.pinole.ca.us

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.ci.pinole.ca.us, which at the time of submission ranked 1897853 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It i...

Unfixed XSS vulnerability at www.chrismonster.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.chrismonster.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.animetv.it

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.animetv.it, which at the time of submission ranked 5475111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...

Unfixed XSS vulnerability at www.freecovers.net

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.freecovers.net, which at the time of submission ranked 11095 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/10/2010. It is...