P2P Network Users Allow Access To Private Info

At SchmooCon, researchers thought it would be a hoot to take a look at some of the information people send out over peer-to-peer P2P networks. They were taken aback by what they found. Read the full article. Network World...

NSFOCUS SA2009-01 : UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability

NSFOCUS Security Advisory SA2009-01 UiTV UiPlayer UiCheck Component Stack Buffer Overflow Vulnerability Release Date: 2009-10-16 CVE ID: CVE-2009-2970 http://www.nsfocus.com/en/advisories/0901.html Affected system: ============== UiTV UiPlayer UiCheck.dll 1.0.0.6 and prior versions Unaffected...

PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC (1)

Exploit for unknown platform in category dos / poc ============================================================ PPstream 2.6.86.8900 PPSMediaList ActiveX Remote BOF PoC 1 ============================================================ PARAM NAME="Keyword"...

Soulseek 157 NS < 13e/156.x - Remote Peer Search Code Execution (PoC)

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

[Full-disclosure] Soulseek 157 NS < 13e & 156.* Remote Direct Peer Search Code Execution

Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffi ; http://g-laurent.blogspot.com/ - Severity: critical ============================================= I. VULNERABILITY...

Soulseek Detection

Soulseek, a peer-to-peer P2P file-sharing application is installed on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid38948; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Soulseek...

Conficker P2P Service Detection

Binary data confickerp2pdetect.nbin...

Code injection

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

Foxy P2P software allows remote attackers to cause a denial of service memory consumption via a foxy URI with a download action and a large fs value...

CVE-2008-6742

The CVE-2008-6742 entry describes a DoS in Foxy P2P software caused by processing a foxy URI with a download action and an excessively large fs parameter, leading to memory consumption. The vulnerability is network-exploitable, with no authentication required, and the available documents do not s...

SRI releases Conficker scanner source code

The experts at SRI International, who have been tracking the Conficker worm as closely as anyone, have released the source code to the scanner they wrote to detect the active P2P scanning that Conficker-infected machines perform. The Conficker worm exhibits a number of interesting characteristics...

Honeynet Project finds way to fingerprint Conficker infections

Just days ahead of an April 1st activation date for the Conficker worm, a pair of security researchers from the Honeynet Project have scored a major breakthrough, finding a way to remotely and anonymously fingerprint the malware on infected networks. Now, with the help of Dan Kaminsky and Rich...

PPLive 1.9.21 - '/LoadModule' URI Handlers Argument Injection

-------------------------------------------------------------------------------- PPLive = 1.9.21 uri handlers "/LoadModule" remote argument injection by Nine:Situations:Group::strawdog -------------------------------------------------------------------------------- software...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1739-1] New mldonkey packages fix information disclosure

------------------------------------------------------------------------ Debian Security Advisory DSA-1739-1 [email protected] http://www.debian.org/security/ Florian Weimer March 13, 2009 http://www.debian.org/security/faq -...

DSA-1739-1 mldonkey - information disclosure

Bulletin has no description...

Thunder

Thunder AKA Xunlei is a popular peer to peer Chinese download manager and file sharing client that supports BitTorrent, eDonkey, Kad, and FTP. Thunder accelerates downloads by accessing its proprietary P2P network in addition to the given HTTP download. There are cases in which certain traffic,...

ooVoo URI处理器远程栈溢出漏洞

BUGTRAQ ID: 32251 ooVoo是免费的视频聊天工具。 ooVoo在处理命令行参数时存在栈溢出漏洞。如果用户受骗访问了恶意网页并向ooVoo: URI处理器传送了超长字符串的话，就可能触发这个溢出，导致执行任意指令。 ooVoo LLC ooVoo 1.7.1.57 ooVoo LLC ooVoo 1.7.1.35 ooVoo LLC --------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.oovoo.com ?php / ooVoo 1.7.1.35 URL Protocol remote...

Gentoo Security Advisory GLSA 200710-25 (mldonkey)

The remote host is missing updates announced in advisory GLSA 200710-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...