CVE-2012-0861

The CVE-2012-0861 issue affects Red Hat Enterprise Virtualization Manager (RHEV-M) prior to version 3.1. During host addition, the vds_installer downloads deployUtil.py and vds_bootstrap.py with curl -k, skipping SSL certificate validation. This MITM condition lets an attacker on the local networ...

CVE-2012-5516

Red Hat Enterprise Virtualization Manager RHEV-M before 3.1, when moving disks between storage domains, does not properly wipe-after-delete, which prevents disks from being securely deleted and might allow local users to obtain sensitive information via unspecified vectors...

CVE-2011-4316

Red Hat Enterprise Virtualization Manager RHEV-M before 3.1, in certain unspecified conditions, does not lock the desktop screen between SPICE sessions, which allows local users with access to a virtual machine to gain access to other users' desktop sessions via unspecified vectors...

A Look Back at 2012: The Armory

As we are mere hours away from celebrating 2013, we'd like to focus today on M-Unition's Armory channel. The Armory is the place to be if you want to be the first to find out about the latest releases, free tools and of course, our ever popular M-Trends report. The most popular posts in this...

IBM Lotus Notes Client URL Handler Command Injection

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 "IBM Lotus Notes...

Malware Swipes Rocket Data from Japanese space agency

Japan's space agency says it is investigating a possible leak of data about its Epsilon rocket due to a computer virus. Malware Case : The Japan Aerospace Exploration Agency said the virus, in a computer at its Tsukuba Space Centre, north-east of Tokyo, was found to be secretly collecting data an...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Design/Logic Flaw

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

CVE-2012-6044

CVE-2012-6044 affects M-Player 0.4 . A crafted MP3 file can be used by a remote attacker to cause a denial of service (crash). The entry indicates a network-exposed vulnerability with partial availability impact, and no authentication required. The provided connected documents confirm the descrip...

CVE-2012-6044

M-Player 0.4 allows remote attackers to cause a denial of service crash via a crafted MP3 file...

Gray Hat Pyrhon by Justin Seitz

Завершился перевод книги Gray Hat Python от Justin Seitz командой r0 crew, а также M. Chumichev. Задать вопросы и полистать книгу вы можете на форуме, либо скачать pdf-версию и наслаждаться книгой на локалхосте...

Explosion a metinfo m extension background to modify any user password vulnerability-vulnerability warning-the black bar safety net

The last explosion of the metinfo a lot of loopholes, the official action soon, in the afternoon on the upgrade, which front Desk to modify any user password, and later found that a background can also, the front surface of the same, with the official said, Now upgraded to 5. 0. 4 is not yet...

Texas A&M University Cross Site Scripting

======================================================================= XSS on Texas A&M University - xyleborini site ! ======================================================================= Site: xyleborini.tamu.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

Cross site request forgery (csrf)

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-4669

The CVE-2012-4669 entry concerns M-Link R14.6 (before R14.6v14) and R15.1 (before R15.1v10). The vulnerability arises because the XMPP Server Dialback verification does not verify that a request was made for a Dialback response, enabling remote XMPP servers to spoof domains via responses for doma...

CVE-2012-4669

M-Link R14.6 before R14.6v14 and R15.1 before R15.1v10 does not verify that a request was made for an XMPP Server Dialback response, which allows remote XMPP servers to spoof domains via responses for domains that were not asserted...

CVE-2012-2949

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

Hardcoded credentials

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...

CVE-2012-2949

The ZTE syncagent program for Android 2.3.4 on the Score M device uses a hardcoded ztex1609523 password to control access to commands, which allows remote attackers to gain privileges via a crafted application...