8302 matches found
Sun Java Runtime New Plugin docbase Buffer Overflow
This module exploits a flaw in the new plugin component of the Sun Java Runtime Environment before v6 Update 22. By specifying specific parameters to the new plugin, an attacker can cause a stack-based buffer overflow and execute arbitrary code. When the new plugin is invoked with a "launchjnlp"...
SuSE9 Security Update : glibc (YOU Patch Number 12641)
Several security issues were fixed : - Integer overflow causing arbitrary code execution in ld.so --verify mode could be induced by a specially crafted binary. CVE-2010-0830 - The addmntent function would not escape the newline character properly, allowing the user to insert arbitrary newlines to...
HOPE (Hackers on Planet Earth)
New York City, New York, U.S. A production of 2600: The Hacker Quarterly, Hackers on Planet Earth or HOPE is in its 18th year give or take a couple and offers an utterly unique blend of technology, culture and media. Previous HOPE events have seen speakers like private investigator Steve Rambam...
generic win32 - add new local administrator 326 bytes
generic win32 - add new local administrator 326 bytes. Shellcode exploit for windows platform / Title: generic win32 - add new local administrator 326 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Dynamic opcode, encoded shellcode Tested on: WinXP Pro SP3 EN 32bit -...
win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes
win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes. Shellcode exploit for windows platform / Title: win32/xp pro sp3 EN 32-bit - add new local administrator 113 bytes Author: Anastasios Monachos secuid0 - anastasiosmatgmaildotcom Method: Hardcoded opcodes kernel32.winexec@7c8623ad...
DSA-2115-1 moodle - several vulnerabilities
Bulletin has no description...
DEBIAN-CVE-2010-3304
The ACL plugin in Dovecot 1.2.x before 1.2.13 propagates INBOX ACLs to newly created mailboxes in certain configurations, which might allow remote attackers to read mailboxes that have unintended weak ACLs...
53 Charged in New Jersey ID Theft Case
Fifty-three individuals were charged today in connection with widespread, sophisticated identity theft and fraud, including 43 individuals charged with participating in one large-scale criminal enterprise, United States Attorney Paul J. Fishman and FBI Special Agent in Charge Michael B. Ward...
win32/xp sp3 (Tr) Create New File (zrl.txt) 74 bytes
Exploit for win32 platform in category shellcode...
Botnet-For-Hire Model Resurfaces in New IMDDOS Botnet
Researchers have identified a new botnet based in China that was openly selling DDoS-for-hire services and had managed to plant roots inside a number of major U.S. ISPs. The botnet, known as IMDDOS, is mostly contained right now and the researchers are working with authorities to locate its...
Fedora 13 : sudo-1.7.4p4-1.fc13 (2010-14355)
update to new upstream version - sudo now uses /var/db/sudo for timestamps - new command available: sudoreplay - use native audit support - corrected license field value: BSD - ISC - added envkeep += HOME see rhbz614025 for backwards compatibility - added Defaults !visiblepw - fixes CVE-2010-2956...
Unfixed XSS vulnerability at shwephonecard.com
Security researcher PlanetCreator, has submitted on 26/08/2010 a cross-site-scripting XSS vulnerability affecting shwephonecard.com, which at the time of submission ranked 2724857 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It i...
OpenSSH 5.6 Updates Authentication Bugs
According to the developers, the latest release of the free SSH connectivity tools include a number of bug fixes and several new features. Read the full article. The H Security...
XSS vulnerability in pimcore
Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...
Pimcore 1.1.0 Cross Site Scripting
Vulnerability ID: HTB22562 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinpimcore.html Product: pimcore Vendor: elements.at New Media Solutions GmbH. http://www.pimcore.org/ Vulnerable Version: 1.1.0 and Probably Prior Versions Vendor Notification: 02 August 2010 Vulnerability Type:...
MYBB 1.6 (admin/index.php) XSS Vulnerabilities
Exploit for php platform in category web applications ============================================== MYBB 1.6 admin/index.php XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...
Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities
Insomnia Security Vulnerability Advisory: ISVA-100730.1 Name: EasyManage CMS Multiple SQL injection Vulnerabilities Released: 30 July 2010 Vendor Link: http://www.face.co.nz/easymanage Affected Products: Easy Manage CMS Original Advisory: http://www.insomniasec.com/advisories/ISVA-100730.1.htm...
MDVA-2009:063 : mdkonline
This update fixes several issues with mdkapplet. On 2009.1 PowerPack, mdkonline wrongly set up the 2009.0 restricted media instead of the 2009.1 ones 50478. Mdkapplet checks once a day if a new distribution is availlable. When checking again for updates every 3 hoours by default, mdkapplet forgot...
MDVA-2009:224 : mandriva-kde4-config
This package adds new top bar for Mandriva Flash 2010 edition. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...
MDVA-2009:271 : k3b
Mandriva 2010 includes k3b 1.68 alpha3 and the stable release won't be ready before a long time, this update introduces the Aplha4 version, with lot's of bugfixes and some new features including: New features Added close buttons on project tabs 159751 Added support for new libmpcdec API 214149...