Norwich University Receives $9.9 M for Cybersecurity Research

Norwich University, a small military college nestled in the Green Mountains of Vermont, secured another round of funding for cybersecurity research this week. The grant, $9.9 million in federal funds, will feed into a project that ensures groups in the private and public sector can better plan fo...

Ubuntu 4.10 / 5.10 : linux-source-2.6.8.1/-2.6.10/-2.6.12 vulnerabilities (USN-219-1)

Al Viro discovered a race condition in the /proc file handler of network devices. A local attacker could exploit this by opening any file in /proc/sys/net/ipv4/conf// and waiting until that interface was shut down. Under certain circumstances this could lead to a kernel crash or even arbitrary co...

Moderate: Red Hat Security Advisory: pki security update

Updated pki-common and pki-tps packages that fix multiple security issues are now available for Red Hat Certificate System 8.1. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Remote Anything Player 5.60.15 Denial Of Service

!python Title: Remote-Anything Player 5.60.15 PoC Author: Saint Patrick Date: 4/25/2012 Just a heads up, you can get full EIP by pushing on. However, at crash time no registers point to buffer, so I chose instead to work with the 3 byte overwrite shown here. This allows calling of other...

SA-CONTRIB-2012-066 - Spaces and Spaces OG - Access Bypass

CVE: CVE-2012-2303 Spaces is an API module intended to make configuration options generally avaliable only at the sitewide level to be configurable and overridden by individual "spaces" on a Drupal site. The spaces and spacesog modules part of the spaces package in some cases do not apply the...

NIST, Maryland Plan New Cybersecurity Center

The US National Institute of Standards and Technology NIST announced plans Tuesday to break ground on a new center that will be committed to cybersecurity research. The National Cybersecurity Center of Excellence will be built near NIST’s Gaithersburg, Md., campus in hopes of strengthening the...

OSI Security: Civica Spydus Library Management System (LMS) - Cross-Site Scripting Vulnerability

Civica Spydus Library Management System LMS - Cross-site Scripting Vulnerability http://www.osisecurity.com.au/advisories/civica-spydus-library-management-system-cross-site-scripting Release Date: 04-May-2011 Software: Civica - Spydus http://www.civicaplc.com/ "Libraries and information service...

OSI Security: LANSA aXes Web Terminal (TN5250) Cross-Site Scripting Vulnerability

LANSA aXes Web Terminal TN5250 Cross-Site Scripting Vulnerability http://www.osisecurity.com.au/advisories/lansa-axes-web-terminal-tn5250-cross-site-scripting Release Date: 30-Apr-2011 Software: LANSA - aXes http://www.lansa.com http://www.axeslive.com "Transform your 5250 applications into GUI...

LANSA aXes Web Terminal Cross Site Scripting

LANSA aXes Web Terminal TN5250 Cross-Site Scripting Vulnerability http://www.osisecurity.com.au/advisories/lansa-axes-web-terminal-tn5250-cross-site-scripting Release Date: 30-Apr-2011 Software: LANSA - aXes http://www.lansa.com http://www.axeslive.com "Transform your 5250 applications into GUI...

Quick TFTP Server Pro 2.1 - Transfer-Mode Overflow (Metasploit)

$Id: quicktftppromode.rb 9525 2010-06-15 07:18:08Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

BolinTech Dream FTP Server 1.02 Format String

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'BolinTech...

LeapWare LeapFTP v2.7.3.600 PASV Reply Client Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'LeapWare LeapFTP v2.7.3.600 PAS...

Two Data Breach Notification Bills Advance in Senate

Two separate bills that would require organizations to notify consumers when their personal information has been compromised have made their way out of committee in the Senate, a critical step toward the creation of a national data-breach notification bill. A variety of technology vendors, consum...

pumpkin-dos.txt

require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached quicker when hammered repeatedly. , 'Author' = 'Saint...

PumpKIN TFTP Server 2.7.2.0 Denial of Service Exploit (meta)

No description provided by source. require 'msf/core' class Metasploit3 Msf::Auxiliary include Msf::Exploit::Remote::Udp def initializeinfo = superupdateinfoinfo, 'Name' = 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided wi...

PumpKIN TFTP Server 2.7.2.0 - Denial of Service (Metasploit)

PumpKIN TFTP Server 2.7.2.0 - Denial of Service Metasploit require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached...

PumpKIN TFTP Server 2.7.2.0 - Denial of Service (Metasploit)

require 'msf/core' class Metasploit3 'PumpKIN TFTP Server DoS', 'Description' = %q PumpKIN TFTP Server 2.7.2.0 eventually reaches a DoS condition when provided with an overly long mode value. It'll take a minute. This condition is reached quicker when hammered repeatedly. , 'Author' = 'Saint...

Debian DSA-1289-1 : linux-2.6 - several vulnerabilities

Several local and remote vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service or the execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-1496 Michal Miroslaw reported a DoS...

webMethods Glue Management Console Directory Traversal

aushack.com - Vulnerability Advisory ----------------------------------------------- Release Date: 11-Apr-2007 Software: webMethods - webMethods Glue Management Console http://www.webmethods.com/ "With webMethods Glue developers can easily create SOAP interfaces for their existing Java and C/C++...

CVE-2006-4988

Patrick Michaelis Wili-CMS is affected by CVE-2006-4988, with multiple XSS vulnerabilities allowing remote injection of scripts via the query string to relocate.php and the globals[pageid] parameter in example-view/inc/print_button.php, among other vectors. The NVD entry assigns a CVSSv2 base sco...