Mozilla: Same-origin bypass using IPv6-like hostname syntax (MFSA 2012-02)

Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and...

TFTP Server 1.4 - ST 'RRQ' Remote Buffer Overflow

!/usr/bin/python --------------------------------------------------------------------------- Exploit: TFTP SERVER V1.4 ST RRQ Overflow OS: Windows XP PRO SP3 Author: b33f --------------------------------------------------------------------------- Smashing the stack for fun and practise... This tf...

[SECURITY] Fedora 15 Update: net6-1.3.14-1.fc15

net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...

[SECURITY] Fedora 14 Update: net6-1.3.14-1.fc14

net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...

[SECURITY] Fedora 16 Update: net6-1.3.14-1.fc16

net6 is a library which eases the development of network-based applications as it provides a TCP protocol abstraction for C++. It is portable to both the Windows and Unix-like platforms...

Fedora Update for net6 FEDORA-2011-15332

Check for the Version of net6 OpenVAS Vulnerability Test Fedora Update for net6 FEDORA-2011-15332 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

Fedora Update for proftpd FEDORA-2011-15741

Check for the Version of proftpd OpenVAS Vulnerability Test Fedora Update for proftpd FEDORA-2011-15741 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Facebook User Error Behind Porn, Mutilation Spam

A campaign of explicit spam on Facebook this week has been linked to a relatively obscure exploit method known as self-inflicted JavaScript injection and not malicious code running on Facebook’s massive network, an independent analysis has shown. The campaign, in which violent and pornographic...

Hidden Apple iOS 5 Autocorrect Keyboard Bar Found by Researcher

In the month since Apple’s release of iOS 5, a handful of features and workarounds have been found hidden beneath the mobile operating system’s surface. A few days ago, another feature was added to that list – an autocorrect keyboard bar. According to 9to5Mac, the “Android-like” feature allows...

CrySyS Duqu Detector Open source Toolkit Released

CrySyS Duqu Detector Open source Toolkit Released Two weeks ago Researchers at the Laboratory of Cryptography and System Security CrySyS in Hungary confirmed the existence of the zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like...

Windows Kernel Zero Day Vulnerability Found in Duqu Installer

Windows Kernel Zero Day Vulnerability Found in Duqu Installer Duqu malware attack exploited a zero-day vulnerability in the Windows kernel, according to security researchers tracking the Stuxnet-like cyber-surveillance Trojan. The vulnerability has since been reported to Microsoft and Microsoft i...

Duqu - Next Major Cyber Weapon like Stuxnet

Duqu - Next Major Cyber Weapon like Stuxnet The Stuxnet cyberworm could soon be modified to attack vital industrial facilities in the US and abroad, cybersecurity experts warned Wednesday at a Senate hearing. Computer security companies agree that these virus is unprecedented and it means the daw...

[SECURITY] Fedora 16 Update: nip2-7.24.2-1.fc16

nip2 is a graphical front end to the VIPS package. With nip2, rather than directly editing images, you build relationships between objects in a spreadsheet-like fashion. When you make a change somewhere, nip2 recalculates the objects affected by that change. Since it is demand-driven this update ...

Postfix SMTP Server SASL Authentication Memory Corruption (CVE-2011-1720)

A memory corruption vulnerability has been reported in Postfix SMTP server. Postfix is a popular mail server for Unix-like platforms. The vulnerability is specific to Postfix servers that use Cyrus Simple Authentication and Security Layer SASL library. SASL is a framework for providing...

Shocking Winehouse Death Videos Linked to Scams

Scammers wasted little time generating campaigns to exploit the untimely death of troubled pop-diva, Amy Winehouse. Anti malware experts have identified at least five separate scams attempting to exploit the event, promising videos of Winehouse shortly before her death.The scams include Facebook...

Facebook Like Cross Site Scripting

+Title : FaceBook Like Cross Site Scripting +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 04/07/2011 +D0rk : inurl:"facebook/like.php?id" +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com This is a simple java script code for test ... now we inject...

Microsoft's Bing And Facebook's Like Button Team Up Against Google !

Microsoft's Bing And Facebook's Like Button Team Up Against Google ! Microsoft has deepened its ties with Facebook by integrating the platform's social network data with the Bing search engine. Under the new partnership, users will be able to view 'likes' and recommendations made by their friends...

#Anonymous attacks Iranian state websites

Anonymous attacks Iranian state websites The infamous Anonymous hacking group has crippled a string of Iranian state websites including those of the Office of the Supreme Leader, state police and the Islamic Revolutionary Guards in attacks launched yesterday. The coordinated Distributed Denial of...

Facebook Like-Jacking Going Multi-Lingual

Facebook like-jacking scams are popping up in a wider variety of languages, according to research by Kaspersky Lab. Kaspersky Lab Expert Christian Funk writes on the Securelist blog that Like-jacking scams will expand from an English-only phenomenon, becoming a nuisance to speakers of all the...

vsftpd Detection

The remote host is running vsftpd, an FTP server for UNIX-like systems written in C. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid52703; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"vsftpd Detection"; scriptsummaryenglish:"Determines the...