exploit for old rlpdaemon bug

!/opt/perl5/bin/perl -w HP-UX rlpdaemon local exploit Bulletin HPSBUX0111-176 November 2001 For use only on machines where you have legitimate root. This attempts to add junk including "localhost +" to /.rhosts. Obvious variants could include /etc/passwd. use IO::Socket; $PORT = 9000; pick...

HP-UX rlpdaemon Local .rhosts Append

!/opt/perl5/bin/perl -w HP-UX rlpdaemon local exploit Bulletin HPSBUX0111-176 November 2001 For use only on machines where you have legitimate root. This attempts to add junk including "localhost +" to /.rhosts. Obvious variants could include /etc/passwd. use IO::Socket; $PORT = 9000; pick...

Updated zarafa packages fix security vulnerabilities

Robert Scheck discovered multiple vulnerabilities in Zarafa that could allow a remote unauthenticated attacker to crash the zarafa-server daemon, preventing access to any other legitimate Zarafa users CVE-2014-0037, CVE-2014-0079...

NSA Officials Say Snowden Used Legitimate Access to Steal Data

It’s taken more than six months, but top officials at the National Security Agency are finally discussing some of the details of how former agency contractor Edward Snowden got access to all of the documents he stole and what kind of damage they believe the publication of the information they...

MySQL 5.0.x Denial Of Service

source: http://www.securityfocus.com/bid/23911/info MySQL is prone to a remote denial-of-service vulnerability because it fails to handle certain specially crafted queries. An attacker can exploit this issue to crash the application, denying access to legitimate users. NOTE: An attacker must be...

Design/Logic Flaw

NAS4Free 9.1.0.1.804 and earlier allows remote authenticated users to execute arbitrary PHP code via a request to exec.php, aka the "Advanced | Execute Command" feature. NOTE: this issue might not be a vulnerability, since it appears to be part of legitimate, intentionally-exposed functionality b...

Another Master Key vulnerability discovered in Android 4.3

Earlier this year, in the month of July it was first discovered that 99% of Android devices are vulnerable to a flaw called "Android Master Key vulnerability" that allow hackers to modify any legitimate and digitally signed application in order to transform it into a Trojan program that can be us...

Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service

Blue Coat ProxySG 5.x and Security Gateway OS - Denial of Service source: https://www.securityfocus.com/bid/62647/info Blue Coat ProxySG and Security Gateway OS are prone to a denial-of-service vulnerability. Successful exploits may allow an attacker to consume excessive resources, denying servic...

ShareKM - Remote Denial of Service

source: https://www.securityfocus.com/bid/62586/info ShareKM is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the server to crash or disconnect, denying service to legitimate users. ShareKM 1.0.19 is vulnerable; prior versions may also be affected...

ShareKM - Remote Denial of Service

ShareKM - Remote Denial of Service source: https://www.securityfocus.com/bid/62586/info ShareKM is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause the server to crash or disconnect, denying service to legitimate users. ShareKM 1.0.19 is vulnerable; prior...

Decision in Street View WiFi Case Could Hinder Some Security Research

The decision by the Ninth Circuit Court last week to allow the class-action suit against Google over its collection of WiFi data to continue was welcomed as good news by privacy advocates, but it may have considerable consequences for security researchers who collect such data during legitimate...

Chinese Hackers discovered second Android master key vulnerability

Android Security Squad, the China-based group that uncovered a second Android master key vulnerability that might be abused to modify smartphone apps without breaking their digital signatures. The whole point of digitally signing a document or file is to prove the file hasn't been modified. The...

libvirt - 'virConnectListAllInterfaces' Method Denial of Service

source: https://www.securityfocus.com/bid/60876/info libvirt is prone to a denial-of-service vulnerability. Attackers can exploit this issue to crash the application that uses the affected library, denying service to legitimate users. virsh -c qemu:///system --readonly iface-list --inactive...

FBI sponsored Ragebooter DDoS attack service

A website that can be described as "DDoS for hire" is perfectly legitimate, according to the owner. Malicious sites that offer attack services are not strangers on the Internet, but web sites sponsored by law enforcement is another story altogether. Ragebooter, is one of many sites that accepts...

Cisco Linksys WRT310N Router - Multiple Denial of Service Vulnerabilities

Cisco Linksys WRT310N Router - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/59445/info The Cisco Linksys WRT310N Router is prone to multiple denial-of-service vulnerabilities when handling specially crafted HTTP requests. Successful exploits will cause the...

MiniWeb Arbitrary File Upload and Directory Traversal Vulnerabilities

This host is installed with MiniWeb and is prone to file upload and directory traversal vulnerabilities. OpenVAS Vulnerability Test $Id: gbminiwebfileuploadndirtravvuln.nasl 6093 2017-05-10 09:03:18Z teissa $ MiniWeb Arbitrary File Upload and Directory Traversal Vulnerabilities Authors: Thanga...

Pwstore - Denial of Service

source: https://www.securityfocus.com/bid/62112/info pwStore is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to crash the application, denying service to legitimate users. pwStore 2010.8.30.0 is vulnerable; other versions may also be affected. !/usr/bin/en...

Varnish Cache - Multiple Denial of Service Vulnerabilities

Varnish Cache - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/58314/info Varnish Cache is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to crash the application, effectively denying service to legitimate users...

Varnish Cache - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/58314/info Varnish Cache is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to crash the application, effectively denying service to legitimate users. Varnish Cache 2.1.5 is vulnerable; other versions may also be...

FAKEM RAT Mimics Normal Network Traffic

A family of remote access Trojans RATs known as FAKEM has been evading detection for more than three years by camouflaging themselves as legitimate network traffic. Nate Villeneuve, a senior threat researcher at Trend Micro, said that remote access Trojans are a favorite among attackers seeking t...