Black Hole Exploit Kit 2.0 Released

The developer behind the notorious Black Hole exploit kit has released a new version of the software, adding in several new features designed to prevent security researchers from getting access to new exploits or reverse-engineering the kit’s inner workings. Conveniently, the pricing for Black Ho...

Slackware Advisory SSA:2005-111-02 Python SimpleXMLRPCServer module

The remote host is missing an update as announced via advisory SSA:2005-111-02. OpenVAS Vulnerability Test $Id: esoftslkssa200511102.nasl 6649 2017-07-10 11:37:47Z cfischer $ Description: Auto-generated from the corresponding slackware advisory Authors: Thomas Reinke Copyright: Copyright c 2012...

Slackware: Security Advisory (SSA:2011-284-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Slackware Advisory SSA:2011-189-01 bind

The remote host is missing an update as announced via advisory SSA:2011-189-01. OpenVAS Vulnerability Test $Id: esoftslkssa201118901.nasl 6581 2017-07-06 13:58:51Z cfischer $ Description: Auto-generated from advisory SSA:2011-189-01 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Mandrake Linux Security Advisory : modutils (MDKSA-2000:071-2)

All 2.3.x versions of modutils since March 12 1999 contain a vulnerability that can lead to a local root compromise. The modprobe program uses popen to execute the 'echo' program argumented with user input. Because popen relies on /bin/sh to parse the command string and execute 'echo', un-escaped...

Mandrake Linux Security Advisory : pine (MDKSA-2000:073-1)

By adding specific headers to messages, the pine mail reader could be made to exit with an error message when users attempted to manipulate mail folders containing those messages. Update : The previous announcement did not make mention of another vulnerability in pine 4.21 and previous in that it...

Debian: Security Advisory (DSA-2487-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-3965

Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window...

CVE-2012-3965

Mozilla Firefox before 15.0 does not properly restrict navigation to the about:newtab page, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via a crafted web site that triggers creation of a new tab and then a new window...

Escalation of privilege through about:newtab — Mozilla

Security researcher Mariusz Mlynski reported that when a page opens a new tab, a subsequent window can then be opened that can be navigated to about:newtab, a chrome privileged page. Once about:newtab is loaded, the special context can potentially be used to escalate privilege, allowing for...

New-CMS 2.2 Directory Traversal

Exploit for php platform in category web applications Exploit Title: New-CMS 2.2 Directory Traversal Date: 20/08/2012 Author: DaOne Software Link: http://www.new-cms.org/ Tested on: Windows XP / xmapp Exploit: http://localhost/path/struttura/editor/listaimg.php?cart=../../../ Greetings to LCA...

Stable Channel Update for Chrome OS

Update 5 Sept 10 am PDT - 21 Stable wifi issues are resolved, we are rolling out a new update to 21.0.1183.89 Platform version: 2268.142.0 The Google Chrome team is happy to announce the arrival of Chrome 21 to the Stable Channel for Chrome OS. More detailed updates are available on the Google...

PG Portal Pro - Cross-Site Request Forgery

PG Portal Pro - Cross-Site Request Forgery Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

PG Portal Pro Cross Site Request Forgery

Exploit Title: PG Portal pro CSRF Vulnerability Author: Noxious Team: WE SECRET Gr33tz: Fox link:http://www.hotscripts.com/listing/pg-portal-pro/ CSRF Change Password New Password: Confirm New Password:...

Patch 1 Release Notes for Veeam Backup & Replication 6.1.0.181

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge These are the issues resolved by the Patch 1 for Veeam Backup version 6.1.0.181. All patches are cumulative so each below fix is contained in this patch. Cau...

CVE-2012-2209

Multiple cross-site scripting XSS vulnerabilities in admin.php in Piwigo before 2.3.4 allow remote attackers to inject arbitrary web script or HTML via the 1 section parameter in the configuration module, 2 installstatus parameter in the languagesnew module, or 3 theme parameter in the theme modu...

BackTrack 5 R3 Released - Download Now !

The latest version of Backtrack is out! Check out Backtrack 5 R3! "The time has come to refresh our security tool arsenal – BackTrack 5 R3 has been released. R3 focuses on bug-fixes as well as the addition of over 60 new tools – several of which were released in BlackHat and Defcon 2012. A whole...

Inout Mobile Webmail APP - Multiple Web Vulnerabilities

Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System: ==================================== 3.5 Abstract: ========= The...

PT-2012-5160 · Pbboard · Pbboard

Name of the Vulnerable Software and Affected Versions: PBBoard version 2.1.4 Description: The issue allows remote attackers to change the password of arbitrary user accounts. This is achieved by exploiting the new password page, specifically through the member id and new password parameters to th...

Inout Mobile Webmail APP - Persistent Cross-Site Scripting

Inout Mobile Webmail APP - Persistent Cross-Site Scripting Title: ====== Inout Mobile Webmail APP - Multiple Web Vulnerabilities Date: ===== 2012-06-08 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=609 VL-ID: ===== 609 Common Vulnerability Scoring System:...