Skype多个字段多个HTML注入漏洞

Bugtraq ID: 49194 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Skype不正确过滤下面用户信息条目中的输入和输出： - home - office - mobile 攻击者可以进行跨站脚本攻击，可能获得敏感信息或劫持用户会话。 Skype Technologies Skype 4.2 169 Skype Technologies Skype 4.2 155 Skype Technologies Skype 4.2 152 Skype Technologies Skype 4.1 .179 Skype Technologies Skype 4...

UUSee UUPlayer ActiveX控件多个远程代码执行漏洞

Bugtraq ID: 48975 CVE ID：CVE-2011-2589 CVE-2011-2590 UUSee是一款集P2P直播点播于一身的网络电视软件。 UUSee存在两个安全漏洞，允许攻击者以应用程序上下文执行任意代码。 -当处理"SendLogAction"方法时UUPlayer ActiveX控件存在边界错误，通过提交超长参数可触发基于堆的缓冲区溢出。 -当处理"Play"方法时UUPlayer ActiveX控件存在输入验证错误，向"MPlayerPath"参数传递UNC路径可以应用程序上下文执行任意程序。 UUSee UUPlayer 6.0.0.1 厂商解决方案...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

TDSS rootkit infects 1.5 million US computers

TDSS rootkit infects 1.5 million US computers Millions of PCs around the world infected by the dangerous TDSS 'super-malware' rootkit as part of a campaign to build a giant new botnet. The report is presented by researchers from security firm Kaspersky Lab. TDSS also known as 'TDL' and sometimes ...

Nmap NSE net: p2p-conficker

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Skype Technologies Skype (Mac OS X) 5未明远程代码执行漏洞

Bugtraq ID: 47747 Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务。 Mac OS X平台上运行的Skype存在一个安全漏洞，允许攻击者只发送一条消息就完全控制目标机器。目前没有详细漏洞细节提供。 Skype Technologies Skype Mac OS X 5 厂商解决方案 －－－－ Skype Technologies Skype Mac OS X 5.1.0.922已经修复此漏洞，建议用户下载使用： http://www.skype.com/...

Search Google Censorship Gently Piracy !

Google was not kidding when he said he would fight against illegal file sharing, and now he died autocomplete when it comes to investigation of piracy. If they were not sure that the digital world has decided this year to piracy, it would be quite clear now. First, Nintendo announces "the golden...

Nmap NSE: P2P Conficker

This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Skype: Client Error Causes Global Outage

In response to a 24 hour outage that occurred last week on their internet voice and video chat platform, Skype’s Chief Information Officer has revealed that an error in some versions of the company’s software client is to blame. CIO Lars Rabbe, writing on Skype’s ‘The Big Blog,’ confirmed reports...

File Sharing Site LimeWire Shut Down Following Injunction

Long a treasure trove for free illegal music, file-sharing website LimeWire was ordered to shut its doors Tuesday after receiving an injunction from the U.S. district court of New York. The ruling specifically mandated Lime Group, the operators of LimeWire, to disable its searching, downloading,...

JVN#54336184: Winny BBS information processing vulnerability

Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of BBS information, which can be used to launch Distributed Denial of Service DDoS attacks. Impact A user may take part in a DDoS attack by a remote attacker. Solution Do not use Winny Please discontinue use of...

JVN#25393522: Winny node information processing vulnerability

Winny is a P2P file sharing software. Winny contains a vulnerability in the processing of node information, which can be used to launch Distributed Denial of Service DDoS attacks. Impact A user may take part in a DDoS attack by a remote attacker. Solution Do not use Winny Please discontinue use o...

JVN#21471805: Winny vulnerable to buffer overflow

Winny is a P2P file sharing software. Winny contains a buffer overflow vulnerability. This vulnerability is different from JVN91740962 and JVN74294680. Impact A remote attacker may be able to execute arbitary code. Solution Do not use Winny Please discontinue use of Winny. Products Affected Winny...

Transmission: Multiple vulnerabilities

Background Transmission is a cross-platform BitTorrent client. Description Multiple stack-based buffer overflows in the trmagnetParse function in libtransmission/magnet.c have been discovered. Impact A remote attacker could cause a Denial of Service or possibly execute arbitrary code via a crafte...

Fedora Update for opendchub FEDORA-2010-6426

Check for the Version of opendchub OpenVAS Vulnerability Test Fedora Update for opendchub FEDORA-2010-6426 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

[SECURITY] Fedora 11 Update: opendchub-0.8.2-2.fc11

Opendchub is the hub software for Direct Connect P2P network...

[SECURITY] Fedora 12 Update: opendchub-0.8.2-2.fc12

Opendchub is the hub software for Direct Connect P2P network...

New Storm Variant Merely a Spambot, Experts Say

The new piece of malware that surfaced this week and has been hailed as a return of the Storm worm, is in fact simply the worm’s original spam engine with some new components wrapped around it, researchers say, and not a rebirth of the botnet itself. Storm was a major botnet threat during its...

P2P Networks Can Nab Private Medical Info

The personal health and financial information stored in thousands of North American home computers may be vulnerable to theft through file-sharing software, according to a research study published online in the Journal of the American Medical Informatics Association. Read the full article...

FTC: P2P Networks Rife With Leaked ID Data

The Federal Trade Commission today finally voiced concern about the long-known problem of data leaking into criminal hands via LimeWire, BearShare, Kazaa and dozens of other peer-to-peer p2p file sharing networks. The FTC put nearly 100 companies and agencies on notice that their employees appear...