New IE Zero Day Found Targeting Military Intelligence

Attackers were able to compromise the U.S. Veterans of Foreign Wars’ website this week and serve up a previously unknown zero day exploit in Internet Explorer 10, and while motivation behind the campaign is still unclear, experts are speculating its aim was to procure military intelligence...

CVE-2013-0412

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax...

Design/Logic Flaw

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax...

CVE-2013-0412

Unspecified vulnerability in Oracle Sun Solaris 8, 9, 10, and 11 allows local users to affect integrity and availability via unknown vectors related to Utility/pax...

CVE-2013-0412

CVE-2013-0412 affects Oracle Solaris 8–11 with a vulnerability in the Solaris utility pax subcomponent. The underlying issue allows local users to impact integrity and availability via unknown or hard-to-exploit vectors, requiring local access and typically user interaction or multiple logins dep...

java-1_7_0-openjdk: update to icedtea-2.3.4 (critical)

java-170-openjdk was updated to icedtea-2.3.4 fixing bugs and also severe security issues: Security fixes - S8004933, CVE-2012-3174: Improve MethodHandle interaction with libraries - S8006017, CVE-2013-0422: Improve lookup resolutions - S8006125: Update MethodHandles library interactions Bug fixe...

Linux Gather Protection Enumeration

This module checks whether popular system hardening mechanisms are in place, such as SMEP, SMAP, SELinux, PaX and grsecurity. It also tries to find installed applications that can be used to hinder, prevent, or detect attacks, such as tripwire, snort, and apparmor. This module is meant to identif...

GNU Tar PAX Extended Headers Handling Buffer Overflow (CVE-2006-0300)

The GNU tar program provides the ability to create and extract TAR archives along with various other kinds of manipulations. The program was initially designed to store files on magnetic tape, but has since then become a widely used archiving utility. A buffer overflow vulnerability exists in the...

Joomla PAX Gallery Component 0.1 Blind SQL Injection

■ Joomla Component PAX Gallery v 0.1 gid --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery ---------------------------------------Version: |:...

Joomla! Component PAX Gallery 0.1 - Blind SQL Injection

Joomla! Component PAX Gallery 0.1 - Blind SQL Injection ■Joomla Component PAX Gallery v 0.1 gid --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery...

Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability

No description provided by source. ■Joomla Component PAX Gallery v 0.1 gid = Blind SQL Injection Vulnerability --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery...

Joomla! Component PAX Gallery 0.1 - Blind SQL Injection

■Joomla Component PAX Gallery v 0.1 gid --------------------------------------- AuToR: XaDoS SecurityCode Team Contact M&: xados at hotmail dot it B§g: Blind $ql inJection Note: safe mode = ON Autor script: Tobias Floery ---------------------------------------Version: |:...

Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Joomla Component PAX Gallery 0.1 Blind SQL Injection Vulnerability ================================================================== ¦ Joomla Component PAX Gallery v 0.1...

FreeBSD Security Advisory (FreeBSD-SA-07:05.libarchive.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-07:05.libarchive.asc SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

libarchive does not properly terminate loop

Overview libarchive contains a vulnerability that may allow an attacker to cause a denial of service. Description The libarchive library provides an interface for reading and writing archive files.There is a vulnerability in libarchive that occurs when it parses the pax interchange format. If an...

CVE-2008-0992

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...

CVE-2008-0992

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...

Code injection

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...

CVE-2008-0992

CVE-2008-0992 affects Apple Mac OS X 10.5.2 and is caused by an array index error in pax when processing an archive with a crafted length value, enabling context-dependent attackers to execute arbitrary code. Covered products in the sources include Mac OS X 10.5.2; no explicit remediation version...

CVE-2008-0992

Array index error in pax in Apple Mac OS X 10.5.2 allows context-dependent attackers to execute arbitrary code via an archive with a crafted length value...