10570 matches found
SuSE 11.1 Security Update : Xen (SAT Patch Number 4977)
Security / Collective Update for Xen Xen : - VUL-0: xen: VT-d PCI passthrough MSI trap injection. CVE-2011-1898. bnc702025 - update block-npiv scripts to support BFA HBA. bnc703924 - L3: Live migrations fail when guest crashes: domaincrashsync called from entry.S. bnc689954 - Bridge hangs cause...
xen: Fixed a security bug and various other bugs (important)
Security / Collective Update for Xen Xen: - bnc702025 - VUL-0: xen: VT-d PCI passthrough MSI trap injection CVE-2011-1898 - bnc703924 - update block-npiv scripts to support BFA HBA - bnc689954 - L3: Live migrations fail when guest crashes: domaincrashsync called from entry.S - bnc693472 - Bridge...
Matriux Krypton security distribution Released
Matriux Krypton security distribution Released The Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network...
Matriux Krypton security distribution Released
Matriux Krypton security distribution Released The Matriux is a fully featured security distribution consisting of a bunch of powerful, open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking, system and network...
Prediction Football 2.51 XRF / CSRF
Exploit for php platform in category web applications Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a usernam...
Prediction Football 2.51 - Cross-Site Request Forgery
Prediction Football 2.51 - Cross-Site Request Forgery Exploit Title: title Google Dork: if relevant intext:"Prediction football 2.51" Date: 08/08/2011 Author: Smith Falcon Software Link: http://www.predictionfootball.com/download/download.html Version: 2.51 Tested on: Linux First create a usernam...
Facebook Status Update With XFBML Injection
Facebook Status Update WithXFBML Injection i Last week Acizninja DeadcOde share Tweaking Facebook Status with HTML button. Well today he is going to share another kind of cool tricks to tweak Facebook Status Update using XFBML Injection. With this tweak, we will do an injection on Facebook URL an...
Facebook Status Update With XFBML Injection
Facebook Status Update With XFBML Injection i Last week Acizninja DeadcOde share Tweaking Facebook Status with HTML button. Well today he is going to share another kind of cool tricks to tweak Facebook Status Update using XFBML Injection. With this tweak, we will do an injection on Facebook URL a...
Xen DoS using IOMMU faults from PCI-passthrough guest
ISSUE DESCRIPTION A VM that controls a PCIE device directly can cause it to issue DMA requests to invalid addresses. Although these requests are denied by the IOMMU, the hypervisor needs to handle the interrupt and clear the error from the IOMMU, and this can be used to live-lock a CPU and...
WordPress St Newsletter File Upload
. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...
UUSee UUPlayer ActiveX控件多个远程代码执行漏洞
Bugtraq ID: 48975 CVE ID：CVE-2011-2589 CVE-2011-2590 UUSee是一款集P2P直播点播于一身的网络电视软件。 UUSee存在两个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当处理"SendLogAction"方法时UUPlayer ActiveX控件存在边界错误，通过提交超长参数可触发基于堆的缓冲区溢出。 -当处理"Play"方法时UUPlayer ActiveX控件存在输入验证错误，向"MPlayerPath"参数传递UNC路径可以应用程序上下文执行任意程序。 UUSee UUPlayer 6.0.0.1 厂商解决方案...
Jackie novel CMS serialized system arbitrary file upload 0day-vulnerability warning-the black bar safety net
Registered users Into space-the album-upload With oprea live firefox modifying the source code There is a. jpg . gif of the place changedto. You can upload any file Keywords: inurl:modules/space...
ICQ 7.5 Software - Remote Denial of Service Vulnerability
Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...
ICQ 7.5 Software - Remote Denial of Service Vulnerability
Document Title: =============== ICQ 7.5 Software - Remote Denial of Service Vulnerability References: =========== Article: http://www.vulnerability-lab.com/getcontent.php?id=236 Download: http://www.vulnerability-lab.com/resources/videos/235.wmv View: http://www.youtube.com/watch?v=7I1JNUWLeec...
Windows Live OneCare Unsupported Application Detection
Windows Live OneCare, an antivirus application, is installed on the remote Windows host. Official support for Windows Live OneCare ended on April 11, 2011. As a result, the application may contain critical vulnerabilities and will not detect the latest malware. C Tenable Network Security, Inc...
Concept Medya SQL Injection
Exploit Title: Concept Medya Admin Auth ByPass Date: 13 June 2011 Author: CriminalCoder Category: webapps Google dork: inurl:loginkontrol.asp Tested on: Windows Xp SP3 Home: spyroot.in & rootarea.com + Default admin panel : http://localhost/loginkontrol.asp + ByPass the admin auth by using Userna...
Walti Design SQL Injection
Title : Walti Design SQL Injection Vulnerability Author: CriminalCoder Home : http://beyz4de.wordpress.com Website : rootarea.org / el-kaide.com Vendor: www.walti-design.ch Contact : [email protected] Twitter : twitter.com/!/criminalcoder Date : 18/07/2011 Google Dork :...
WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella
WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella Dr. Alberto Fontanella found on Western Digital WD TV Live Hub appliance with the last firmware installed 2.06.10 and 3 exploits to get admin password, deface appliance and get root shell: Author: Dr. Alberto...
