openSUSE Security Update : wireshark (openSUSE-SU-2013:0276-1)

wireshark was updated to 1.8.5 to fix bugs and security issues. Vulnerabilities fixed : - Infinite and large loops in the Bluetooth HCI, CSN.1, DCP-ETSI DOCSIS CM-STAUS, IEEE 802.3 Slow Protocols, MPLS, R3, RTPS, SDP, and SIP dissectors wnpa-sec-2013-01 CVE-2013-1572 CVE-2013-1573 CVE-2013-1574...

MS KB2957151: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB2957151. It is, therefore, affected by multiple vulnerabilities : - An unspecified use-after-free vulnerability exists that could allow for the execution of arbitrary code. CVE-2014-0510 - An unspecified vulnerability exists that could be used to bypass the same origi...

MS KB2962393: Update for Vulnerability in Juniper Networks Windows In-Box Junos Pulse Client (Heartbleed)

The remote host is missing KB2962393, which resolves an OpenSSL information disclosure vulnerability Heartbleed in the Juniper VPN client software shipped with Windows 8.1. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid73865; scriptversion"1.17";...

MS KB2963983: Vulnerability in Internet Explorer Could Allow Remote Code Execution

The remote host is missing one of the workarounds referenced in Microsoft Security Advisory 2963983. The remote Internet Explorer install is affected by an unspecified use-after-free vulnerability related to the VML and Flash components. By exploiting this flaw, a remote, unauthenticated attacker...

MS-DOS: एमएस डॉस प्राणघाती है।

नमस्ते, बग का पुनर्निर्माण करने के लिए नीचे लिखे गए क़दमों का पालन करें : - १. किसी कंप्यूटर में एम्-एस डॉस को स्थापित करें २. कंप्यूटर को चालू करें ३. अब, आप ३६५ दिनों क लिए डॉस प्रॉम्प्ट को लगातार देखते रहें, ४. ३६५ दिनों के अंदर आपकी मौत हो जाएगी ठीक कैसे करें: एमएस डॉस अपने आप को बंद करे कुछ द...

MS-DOS: Injecting Distrust and Disbelief in Addicted Gamers

Hi, Here Attacker worried parents can ask Victim their children who are addicted towards gaming to play Pong for MS-DOS.Playing this kinda pong may lead to frustration, headache and eventually total distrust in gaming PS: This feature can save millions of young children who are addicted...

MS-DOS: History Disclosure of MS-Dos

I was searching for MS-Dos bugs in search engines.Suddenly I got a surprising result.That result discloses the history of MS-Dos,designers names,and many other secret information. Here is the POC: http://en.wikipedia.org/wiki/MS-DOS...

MS-DOS: Permanent Denial of Service

Steps to Reproduce: 1. Install MS DOS 2.0 on a computer 2. Start your car and run it over that computer. 3. Now MS DOS would not start. Possible Fix: MSDOS owners shouldn't own a car for sake of proper functioning of the operating system I've attached proof of concept...

MS-DOS: Arbitrary command execution in MS-DOS

Versions 1.1 and 2.0 of MS-DOS allow a malicious actor to execute arbitrary system commands via the main application interface. Prerequisites: MS-DOS 1.1 or MS-DOS 2.0 installation Input device e.g. keyboard Steps to reproduce: Enter the command mode Type VER to make sure that the system is on of...

MS-DOS: Bug in Source Code Files(v1.1)

Hello, While i was Going through object Files of v1.1 and Opened MS-dos Applications everything was going fine, Then i opened 'CHKDSK' Then suddenly the interface Crashed and It After That it Gave Such a Feedback to my Windows That All the DOS Related Applications are incompatible And are not a...

MS-DOS: Hack administrator password even if you are a guest

Step1:Go to command prompt Step2:Type "net user" Step3:Find the administrator name which you would like to change the password Step4:Type " net user" space "administrator name" space Step5:It will ask you to change the password Step6:Type the password and confirm it...

MS-DOS: Please contact me @sehacure otherwise i am going to disclose in Full disclosure mailing list :p

I found all these issues in MS-DOS. Please increase the reward amount. Then i will report :D :D Best regards, Anand...

MS-DOS: CRITICAL BUG!

CRITICAL BUG! If you type in color followed by a space and 2 numbers it can potentially render the screen unreadable! So far, my extensive testing has led me to find that certain letters work as well, though without a real pattern I'm not sure which ones. So far I know the letters "AF" will rende...

Microsoft Internet Authentication Service MS-CHAP Security Bypass (MS09-071) - Ver2 (CVE-2009-3677)

An elevation of privilege vulnerability has been reported in the Internet Authentication Service. Internet Authentication Service IAS is the Microsoft implementation of a Remote Authentication Dial-in User Service RADIUS server and proxy. As a RADIUS server, IAS performs centralized connection...

OpenXchange crossite scripting

Crossite scripting on MS Office and EML documents viewing...

[SECURITY] Fedora 20 Update: mantis-1.2.17-1.fc20

Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis When t...

[SECURITY] Fedora 19 Update: mantis-1.2.17-1.fc19

Mantis is a free popular web-based issue tracking system. It is written in the PHP scripting language and works with MySQL, MS SQL, and PostgreSQL databases and a web server. Almost any web browser should be able to function as a client. Documentation can be found in: /usr/share/doc/mantis-1.2.17...

My PDF Creator DE DM 1.4 iOS - Multiple Vulnerabilities

My PDF Creator DE DM 1.4 iOS - Multiple Vulnerabilities Document Title: =============== My PDF Creator & DE DM v1.4 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1201 Release Date: ============= 2014-02-16 Vulnerability...

MS-SQL Server Protocol - General Settings - Ver2 (CVE-2002-1123)

...

[THC-Hydra 7.5] Fast Parallel Network Logon Cracker

Hydra is a parallelized network logon cracker which supports numerous protocols to attack, new modules are easy to add, beside that, it is flexible and very fast. Features IPv6 Support Graphic User Interface Internationalized support RFC 4013 HTTP proxy support SOCKS proxy support The tool suppor...