Unfixed XSS vulnerability at imobile.us

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting imobile.us, which at the time of submission ranked 1049591 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.vildawebben.se

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.vildawebben.se, which at the time of submission ranked 322758 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at www.upcode.fi

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.upcode.fi, which at the time of submission ranked 792945 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currently...

Unfixed XSS vulnerability at www.domanregister.se

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting www.domanregister.se, which at the time of submission ranked 2005460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is...

Unfixed XSS vulnerability at wap.nettavisen.no

Security researcher MasTer, has submitted on 25/05/2011 a cross-site-scripting XSS vulnerability affecting wap.nettavisen.no, which at the time of submission ranked 5496 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/12/2011. It is currentl...

Dovecot: Busy master process, receiving a lot of SIGCHLD signals rapidly while logging, could die

Dovecot 1.2.x before 1.2.15 allows remote authenticated users to cause a denial of service master process outage by simultaneously disconnecting many 1 IMAP or 2 POP3 sessions...

Citrix Provisioning Services streamprocess.exe Stack Buffer Overflow

Citrix Provisioning Service allows computers to obtain application from the network in real-time. Administrators can prepare a master device for imaging purposes by creating a vDisk image that would be stored on a Provisioning Server. Then, this vDisk would be used by devices to boot directly fro...

November, 2010: PS3 Master Key Hacked Retweeted – by Sony

Maybe the only thing worse than having the master key to your company’s incredibly valuable video gaming platform published online by a brilliant and iconoclastic hacker is having the social networking account for the fictitious TV personality your company spent millions of dollars creating forwa...

November, 2010: PS3 Master Key Hacked, Leaked

Like most game and console vendors, Sony fights a never-ending battle for control of its own platform against a shadowy community of hacker enthusiasts and modders who want to exploit Sony’s hardware for all its worth. It’s a near-constant cat and mouse game, which made the 2010 hack of the...

LastPass Forces Users to Change Master Passwords Following Suspicious Activity

LastPass, one of the most popular cloud-based password management services, is forcing users to change their master passwords as a precaution after it discovered an unauthorized data transfer out of its network. In a post on its blog the company explains, in sufficient detail, what prompted this...

1024cms ACP 1.1.0 Master-cPanel Local File Inclusion

========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...

Mandriva Update for openldap MDVSA-2011:055 (openldap)

Check for the Version of openldap OpenVAS Vulnerability Test Mandriva Update for openldap MDVSA-2011:055 openldap Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

[ MDVSA-2011:055 ] openldap

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:055 http://www.mandriva.com/security/ Package : openldap Date : March 30, 2011 Affected: 2009.0, Enterprise Server 5.0 Problem Description: Multiple vulnerabilities has been identified and fixed in openldap:...

Mandriva Linux Security Advisory : openldap (MDVSA-2011:055)

Multiple vulnerabilities has been identified and fixed in openldap : chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

CVE-2011-1024

chain.c in back-ldap in OpenLDAP 2.4.x before 2.4.24, when a master-slave configuration with a chain overlay and ppolicyforwardupdates aka authentication-failure forwarding is used, allows remote authenticated users to bypass external-program authentication by sending an invalid password to a sla...

Saltstack Minion Payload Deployer

This exploit module uses saltstack salt to deploy a payload and run it on all targets which have been selected default all. Currently only works against nix targets. Module Options msf use exploit/linux/local/saltstack/saltminiondeployer msf undefinedsaltminiondeployer show actions ...actions...

quake3-master-getservers NSE Script

Queries Quake3-style master servers for game servers many games other than Quake 3 use this same protocol. Script Arguments quake3-master-getservers.outputlimit If set, limits the amount of hosts returned by the script. All discovered hosts are still stored in the registry for other scripts to us...

Microsoft confirms Windows BROWSER protocol zero-day !

A security researcher has released proof-of-concept code for an unpatched security vulnerability affecting all versions of Windows, prompting a warning from Microsoft that remote code execution attacks are theoretically possible. Details on the vulnerability were released on the Full Disclosure...