Linux Foundation Says UEFI Doesn't Have to Prevent Other OS Installations

The Linux Foundation has released a document outlining ways in which the UEFI secure boot specification can be used to support the installation of Linux and other open operating systems on UEFI-enabled hardware. As long as hardware vendors set up their systems in the proper way, UEFI should be no...

ipv6-node-info NSE Script

Obtains hostnames, IPv4 and IPv6 addresses through IPv6 Node Information Queries. IPv6 Node Information Queries are defined in RFC 4620. There are three useful types of queries: qtype=2: Node Name qtype=3: Node Addresses qtype=4: IPv4 Addresses Some operating systems Mac OS X and OpenBSD return...

Google App Enging SDK Code Execution Vulnerability (CVE 2011-1364)

We recently identified an interesting code execution vulnerability in the Google App Engine SDK for Python. By combining a CSRF vulnerability in the administration web UI, with some other unique vulnerabilities we found in the Google python libraries, a remote hacker could gain remote code...

OpenSSH X11UseLocalhost X11 Forwarding Port Hijacking

According to its banner, the version of SSH installed on the remote host is older than 5.1 and may allow a local user to hijack the X11 forwarding port. The application improperly sets the 'SOREUSEADDR' socket option when the 'X11UseLocalhost' configuration option is disabled. Note that most...

Virus removal website compromised to serving malware

Virus removal website compromised to serving malware One of the Famous Virus Removal Service website : laptopvirusrepair.co.uk is compromised and Hacker is Serving Malware on the website. In above screenshot Avira detects the JS/Blacole.psak Java script Virus hosted on the site. The snippet of co...

Nmap-scanner

This module requires argument like: "Target Host" or IP address to work. A port Scanner uses raw IP packets in novel ways to determine what hosts are available on the network It was designed to rapidly scan large networks, but works fine against single hosts Nmap "Network Mapper" is an open sourc...

Microsoft Defends Secure Boot in Windows 8

Microsoft officials are seeking to assuage concerns that its implementation of UEFI in Windows 8 will prevent users from loading non-Microsoft operating systems or applications on their machines. Despite concerns raised by security researchers and open-source advocates about vendor lock-in and...

Secure Boot in Windows 8 Worries Researchers

Windows 8, like Windows 7 and Vista before it, is being touted as the most secure version of Windows ever. In past releases, many of the security improvements have come through exploit mitigations such as ASLR and DEP and better software security practices during development. In Windows 8, howeve...

Nmap 5.61TEST1 Released

Nmap 5.61 TEST1 Released This Nmap 5.61TEST1 is an informal test release with all of the latest features from the SVN. Nmap "Network Mapper" is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such a...

Nmap 5.61TEST1 Released

Nmap 5.61TEST1 Released This Nmap 5.61TEST1 is an informal test release with all of the latest features from the SVN. Nmap "Network Mapper" is a free and open source utility for network exploration or security auditing. Many systems and network administrators also find it useful for tasks such as...

PT-2011-3531 · Microsoft · Display Panning Cpl Extension +11

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2 through R2 SP1 Microsoft Windows 7 versions Gold through SP1 Description: T...

Fedora Update for cups FEDORA-2011-11221

Check for the Version of cups OpenVAS Vulnerability Test Fedora Update for cups FEDORA-2011-11221 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

MPlayer SAMI Subtitle File Overflow

Added: 09/07/2011 BID: 49149 OSVDB: 74604 Background MPlayer is an open source media player with support for many operating systems. Problem MPlayer does not properly validate the contents of Synchronized Accessible Media Interchange SAMI caption files. If a video references a malformed SAMI file...

Apple Updates XProtect to Detect Mac Trojan

Apple released an update today for its built-in, malware protection platform, XProtect, in response to the emergence of Mac-targeting trojan that hijacks Google searches, according to an article posted on Softpedia. Once the trojan has installed itself on a user’s machine, it starts adding fake...

CentOS Update for libvirt CESA-2010:0615 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Apple, Google Need Mobile Security Rethink

Threatpost interviews Mickey Boodaei, the CEO of Trusteer, about the state of mobile device security. Mobile security issues have been getting more press recently – on Threatpost and elsewhere. Partially, this is because they’re new, and because mobile devices are proliferating both at home and i...

PT-2011-3445 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...

Fedora Update for apr FEDORA-2011-6750

Check for the Version of apr OpenVAS Vulnerability Test Fedora Update for apr FEDORA-2011-6750 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

[SECURITY] Fedora 13 Update: apr-1.4.5-1.fc13

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...

[SECURITY] Fedora 15 Update: apr-1.4.5-1.fc15

The mission of the Apache Portable Runtime APR is to provide a free library of C data structures and routines, forming a system portability layer to as many operating systems as possible, including Unices, MS Win32, BeOS and OS/2...