James Butler and Peter Silberman talk malware

James Butler and Peter Silberman of MANDIANT with Threatpost’s Robert Vamosi about malware and their new memory forensic software, Memoryze...

Code injection

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

Design/Logic Flaw

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1254

Removed by vendor...

CVE-2009-1254

Tunapie (GUI frontend for video/radio streams) is affected by CVE-2009-1254 due to insufficient escaping of stream URLs, enabling remote command execution via a crafted URL. The issue is part of a set also including CVE-2009-1253 (symlink-based local DoS); Debian DSAs document fixes. Remediation ...

CVE-2009-1254

James Stone Tunapie 2.1 allows remote attackers to execute arbitrary commands via shell metacharacters in a stream URL...

CVE-2009-1253

James Stone Tunapie 2.1 allows local users to overwrite arbitrary files via a symlink attack on an unspecified temporary file...

CVE-2009-1253

Removed by vendor...

CVE-2009-1253

Tunapie is affected by CVE-2009-1253, a local vulnerability caused by insecure handling of temporary files that allows a local user to overwrite arbitrary files via a symlink attack. Debian's DSA-1764-1 notes fixes in tunapie 2.1.8-2 for the lenny release (and earlier 1.3.1-1+etch2 for etch), add...

Unfixed XSS vulnerability at www.animetv.it

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.animetv.it, which at the time of submission ranked 5475111 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...

Unfixed XSS vulnerability at digitaldecatur.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting digitaldecatur.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.freecovers.net

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.freecovers.net, which at the time of submission ranked 11095 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/10/2010. It is...

Unfixed XSS vulnerability at www.stjeromeschool.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.stjeromeschool.com, which at the time of submission ranked 21314366 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. ...

Unfixed XSS vulnerability at database.iem.ac.ru

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting database.iem.ac.ru, which at the time of submission ranked 21542 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.gslc-bsa.org

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.gslc-bsa.org, which at the time of submission ranked 748576 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at www.airtec-aria.it

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.airtec-aria.it, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 26/10/2010. It is...

Unfixed XSS vulnerability at www.chrismonster.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.chrismonster.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is...

Unfixed XSS vulnerability at actachemscand.dk

Security researcher Jesse-james, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting actachemscand.dk, which at the time of submission ranked 6833051 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/11/2011. It is...