With Autos At CES, Are Vehicle Hacks Far Behind?

Sometimes news events just come together in a way that opens a window – even if its a kind of cloudy window – onto the future. So it was this week, as stories about a coming generation of wired automobiles collided with some thought-provoking reports on the vulnerability of said cars to tradition...

Is your Internet TV vulnerable to hackers ?

Manufacturers racing to create HDTVs that can connect to the Web may have rushed over an important step in trying to rush them to market: keeping them safe from hackers. According to the New York Times, security firm Mocana was able to hack an Internet-connected set "with unsettling ease." The ha...

Pune police conducted 'Cyber Safe Pune 2010' !

The Pune police commissionerate conducted 'Cyber Safe Pune 2010' initiative from December 16 to 22 in the city. The initiative was aimed at creating awareness among people regarding cyber safety. The cyber crime cell conducted lectures at housing societies, schools, banks and colleges last week...

Researchers Expose Security Flaw in Internet-Ready HDTVs

Researchers at Mocana, a security technology firm in San Francisco, recently demonstrated the ease with which they could hack into a popular Internet-ready HDTV model. They exploited a vulnerability in the software that displays websites on the TV, allowing them to control the information sent to...

Wikileaks: Controversial, But is it NSFW?

As government agencies and the military bar access to the WIkileaks documents, a poll of Web filtering providers finds most label the leak site more “newsy” than “naughty.” HED: Wikileaks: Controversial, But is it NSFW? DEK: As companies look to bar access to the WIkileaks documents or not Web...

IOCTL Fuzzer v1.2 Download

"IOCTL Fuzzer is a tool designed to automate the task of searching vulnerabilities in Windows kernel drivers by performing fuzz tests on them. The fuzzer's own driver hooks NtDeviceIoControlFile in order to take control of all IOCTL requests throughout the system. While processing IOCTLs, the...

Thousands of Social Security Numbers Stolen in New York Data Breach

Thousands of Social Security numbers have been stolen from the computers of a New York state agency. The Social Security Administration in New York City reports that a subcontractor, who was working for the Office of Temporary Disability Assistance on computer infrastructure upgrades, illegally...

Solar FTP Server 2.0 - Multiple Denial of Service Vulnerabilities

Solar FTP Server 2.0 - Multiple Denial of Service Vulnerabilities !/usr/bin/python Exploit Title: SolarFTP 2.0 Multiple Commands Denial of Service Vulnerability Date: 12/17/2010 Author: modpr0be Software Link: http://www.solarftp.com/files/solarftps-setup.exe Vulnerable version: 2.0 Tested on:...

CVE-2009-3843

creationtimestamp| type| source ---|---|--- 2010-12-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/16317 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/tomcatmgrdeploy.rb 2018-05-29 15:50:33+00:00| seen|...

Microsoft Office FlashPix Image Converter (CVE-2010-3951) Buffer Overflow Vulnerability

Description Microsoft Office is prone to a remote buffer-overflow vulnerability because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit this issue by enticing an unsuspecting user into opening an Office document that contains a specially craft...

Microsoft Office FlashPix Image Converter (CVE-2010-3952) Multiple Buffer Overflow Vulnerabilities

Description Microsoft Office is prone to multiple remote buffer-overflow vulnerabilities because the software fails to perform adequate boundary-checks on user-supplied data. An attacker can exploit these issues by enticing an unsuspecting user into opening an Office document containing a special...

Microsoft Internet Explorer Select HTML Element Use-After-Free Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions. Technologies Affected Avaya Au...

Microsoft Publisher (CVE-2010-3954) Memory Corruption Remote Code Execution Vulnerability

Description Microsoft Publisher is prone to a remote code-execution vulnerability. An attacker can exploit this issue by enticing an unsuspecting user into opening a specially crafted Publisher file. Successfully exploiting this issue allows attackers to execute arbitrary code in the context of t...

DSA-2133-1 collectd - denial of service

Bulletin has no description...

DiskPulse Server Detection

The remote host is running a DiskPulse Server, a tool that monitors changes to the filesystem and reports them to all authenticated clients. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid51093; scriptversion"1.7"...

Important: Red Hat Security Advisory: kernel-rt security and bug fix update

Updated kernel-rt packages that fix multiple security issues and three bugs are now available for Red Hat Enterprise MRG 1.3. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Fedora Update for zabbix FEDORA-2010-12646

Check for the Version of zabbix OpenVAS Vulnerability Test Fedora Update for zabbix FEDORA-2010-12646 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Pandora FMS Command Injection / SQL Injection / Path Traversal

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities CVE IDs in this security advisory: 1 Authentication bypass - CVE-2010-4279 2 OS Command Injection - CVE-2010-4278 3 SQL Injection - CVE-2010-4280 4 Blind SQL Injection -...

Pandora FMS Console Detection

The web console for Pandora FMS, an open source monitoring system, is running on the remote host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid50860; scriptversion"1.11"; scriptsetattributeattribute:"pluginmodificationdate", value:"2022/10/12";...

Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities CVE IDs in this security advisory: 1 Authentication bypass - CVE-2010-4279 2 OS Command Injection - CVE-2010-4278 3 SQL Injection - CVE-2010-4280 4 Blind SQL Injection -...