apr-util heap buffer underwrite

The aprstrmatchprecompile function in strmatch/aprstrmatch.c in Apache APR-util before 1.3.5 allows remote attackers to cause a denial of service daemon crash via crafted input involving 1 a .htaccess file used with the Apache HTTP Server, 2 the SVNMasterURI directive in the moddavsvn module in t...

HP-UX PHSS_39886 : HP OpenView SNMP Emanate Master Agent Remote Unauthorized Access (HPSBMA02439 SSRT080082 rev.3)

s700800 11.X OV EMANATE15.3 PA-RISC Consolidated Patch 6 : A potential vulnerability has been identified with HP OpenView SNMP Emanate Master Agent Running on HP-UX, Linux, Solaris, and Windows. The vulnerability could be exploited remotely to gain unauthorized access. %NASLMINLEVEL 70300 C Tenab...

bbPress v1.0.2 Cross-Site Request Forgery

No description provided by source. : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : Author : saudi0hacker : Date : May 25, 2010 : Type : CSRF : Greetz to : pr.al7rbi : so busy : evil-ksa : Dr.dakota : v4-team.com html body onload=\"document.forms\'Login\'.submit;\" form...

bbPress v1.0.2 Cross-Site Request Forgery

Exploit for php platform in category web applications ========================================= bbPress v1.0.2 Cross-Site Request Forgery ========================================= : Software : bbPress v 1.0.2 CSRF : site : www.bbpress.org : date : 29/6/2010 : Author : saudi0hacker : Date : May 25...

DNSSEC Ceremony Generates Master Root Key

The dream of bolting security onto the Internet’s Domain Name System takes one step closer to reality as Internet policymakers hosted a ceremony in northern Virginia to generate and store the first cryptographic key that will be used to secure the Internet’s root zone. Read the full article...

Unfixed XSS vulnerability at www.recordstore.co.uk

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.recordstore.co.uk, which at the time of submission ranked 225710 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/04/2011. It is...

Unfixed XSS vulnerability at www.mobileburn.com

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting www.mobileburn.com, which at the time of submission ranked 30163 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is...

Unfixed XSS vulnerability at wap.megachat.fi

Security researcher MasTer, has submitted on 06/10/2010 a cross-site-scripting XSS vulnerability affecting wap.megachat.fi, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/12/2011. It is currently...

Medium security hole in Varnish reverse proxy

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Nth Dimension Security Advisory NDSA20090908 Date: 26th September 2009 Author: Tim Brown mailto:[email protected] URL: http://www.nth-dimension.org.uk/ / http://www.machine.org.uk/ Product: Varnish 2.0.4 http://www.varnish-cache.org/ Vendor:...

HP-UX PHSS_40229 : HP Enterprise Cluster Master Toolkit (ECMT) running on HP-UX, Local Unauthorized Access (HPSBUX02464 SSRT090210 rev.1)

s700800 11.23 ECMT B.05.00 patch : A potential security vulnerability has been identified on HP Enterprise Cluster Master Toolkit ECMT version B.05.00 running on HP-UX. This vulnerability could be exploited by local users to gain unauthorized access. %NASLMINLEVEL 70300 C Tenable Network Security...

Mozilla Admits Malware Sneaked into Firefox Add-ons

Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...

CVE-2009-4184

HP Enterprise Cluster Master Toolkit (ECMT) B.05.00 on HP-UX B.11.23 (11i v2) and B.11.31 (11i v3) is affected by CVE-2009-4184, a local vulnerability that could allow an unprivileged user to gain unauthorized access to Oracle or Sybase databases via unspecified vectors. HP’s security bulletin HP...

CVE-2009-4184

Unspecified vulnerability in HP Enterprise Cluster Master Toolkit ECMT B.05.00 on HP-UX B.11.23 11i v2 and HP-UX B.11.31 11i v3 allows local users to gain access to an Oracle or Sybase database via unknown vectors...

CVE-2009-4184: Undefined Security Weakness

Unspecified vulnerability in HP Enterprise Cluster Master Toolkit ECMT B.05.00 on HP-UX B.11.23 11i v2 and HP-UX B.11.31 11i v3 allows local users to gain access to an Oracle or Sybase database via unknown vectors...

HP Enterprise Cluster Master Toolkit privilege escalation

No description provided...

Tracking The Destructive Worm Zimuse

Zimuse-A and its variant, Zimuse-B, overwrite MBR Master Boot Record files on infected drives with their own data, either 40 days or 20 days respectively after infection. This malicious behavior corrupts records and makes data recovery difficult if not impossible, researchers report. Read the ful...

mssql hash password cracking method-vulnerability warning-the black bar safety net

mssql hash stored in the table master. dbo. sysxlogins, with select name,password from master. dbo. sysxlogins can extract the user hash. 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b Decomposition: Constant part: 0×0 1 0 0 Salt part: 4E04BE46 Mixi...

CentOS 5 : autofs (CESA-2007:1176)

Updated autofs packages that fix a security issue are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The autofs utility controls the operation of the automount daemon, which automatically mounts...

The Uploader 2.0 Remote File Upload Vulnerability

Exploit for unknown platform in category web applications ================================================= The Uploader 2.0 Remote File Upload Vulnerability =================================================...

The Uploader 2.0 Remote File Upload Vulnerability

No description provided by source. ======================================================================================================= Script Name : The Uploader 2.0 Language : php Author : Master Mind Home : www.vbspiders.com ============================================== Exploit : example:...