Scientific Linux Security Update : texlive on SL6.x i386/x86_64 (20120215)

TeX Live is an implementation of TeX. TeX takes a text file and a set of formatting commands as input, and creates a typesetter-independent DeVice Independent DVI file as output. The texlive packages provide a number of utilities, including dvips. TeX Live embeds a copy of t1lib. The t1lib librar...

Scientific Linux Security Update : xen on SL5.x i386/x86_64

Xen was found to allow unprivileged DomU domains to overwrite xenstore values which should only be changeable by the privileged Dom0 domain. An attacker controlling a DomU domain could, potentially, use this flaw to kill arbitrary processes in Dom0 or trick a Dom0 user into accessing the text...

CentOS Update for kpathsea CESA-2012:0137 centos6

Check for the Version of kpathsea OpenVAS Vulnerability Test CentOS Update for kpathsea CESA-2012:0137 centos6 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

CentOS Update for kpathsea CESA-2012:0137 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Barracuda SSL VPN - Input Filter Bypass Vulnerability

Document Title: =============== Barracuda SSL VPN - Input Filter Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/563.wmv View: http://www.youtube.com/watch?v=ICR0iFJkDg0 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=661 News:...

NO BOOT FOR YOU ! Will Windows 8 Kill Live CDs and USBs?

In January 2012, Microsoft confirmed to PC manufacturers that they must enable Secure Boot by default on PCs to be "Certified for Windows 8". The purpose of Secure Boot is to put an end to computer viruses that sneak between the hardware and the operating system. These viruses, also known as...

RedHat Update for texlive RHSA-2012:0137-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Root Exploit Western Digital's WD TV Live SMP/Hub

Exploit for hardware platform in category remote exploits Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device...

Western Digitals WD TV Live SMPHub - Privilege Escalation

Western Digitals WD TV Live SMPHub - Privilege Escalation Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device...

GLSA-201206-28 : TeX Live: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201206-28 TeX Live: Multiple vulnerabilities Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details. Impact : These vulnerabilities might allow user-assisted...

TeX Live: Multiple vulnerabilities

Background TeX Live is a complete TeX distribution. Description Multiple vulnerabilities have been discovered in texlive-core. Please review the CVE identifiers referenced below for details. Impact These vulnerabilities might allow user-assisted remote attackers to execute arbitrary code via a...

Western Digital TV (WD-TV) Live Remote Code Execution

Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of its user interface and limited remote...

Western Digital TV (WD-TV) Live Remote Code Execution

Exploit for windows platform in category remote exploits Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allo...

[SECURITY] Fedora 16 Update: nut-2.6.3-4.fc16

These programs are part of a developing project to monitor the assortment of UPSes that are found out there in the field. Many models have serial ports of some kind that allow some form of state checking. This capability has been harnessed where possible to allow for safe shutdowns, live status...

Espejo Design SQL Injection

== ABOUT ME: --- TAURUS OMAR --- INDEPENDENT SECURITY RESEARCHER --- ACCESOILEGAL.BLOGSPOT.COM --- @omartaurus --- omar-taurusatdragonsecuritydotorg --- omar-taurusatlivedotcom === INFO: Author : TAURUS OMAR Category : Webapps / 0day Title Exploit : Espejo Design - SQL Injection Vulnerability...

bind: deleted domain name resolving flaw

The resolver in ISC BIND 9 through 9.8.1-P1 overwrites cached server names and TTL values in NS records during the processing of a response to an A record query, which allows remote attackers to trigger continued resolvability of revoked domain names via a "ghost domain names" attack...

April 2012 – Xbox Credit Card Hack

Microsoft, makers of the ubiquitous Xbox gaming console are still looking into an issue with the device’s hard drive that could allow attackers to collect sensitive information about prior users. The investigation started after a group of students from Dakota State University allegedly recovered...

Facebook Open to Comments on Proposed Privacy Policy Changes

Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...

Fedora Update for maniadrive FEDORA-2012-6907

Check for the Version of maniadrive OpenVAS Vulnerability Test Fedora Update for maniadrive FEDORA-2012-6907 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

[SECURITY] Fedora 15 Update: maniadrive-1.2-32.fc15.3

ManiaDrive is an arcade car game on acrobatic tracks, with a quick and nerv ous gameplay tracks almost never exceed one minute. Features: Complex car physics, Challenging "story mode", LAN and Internet mode, Live scores, Track editor, Dedicated server with HTTP interface and More than 30 blocks...