USN-2279-1 transmission vulnerability

Ben Hawkes discovered that Transmission incorrectly handled certain peer messages. A remote attacker could use this issue to cause a denial of service, or possibly execute arbitrary code...

tbdev 01-01-2008 Multiple Vulnerabilities

No description provided by source. TBDev - Cross Site Scripting and HTML Injection Vulnerabilities Version Affected: 01-01-2008 16th January 2008 newest Info: TBDEV.NET is a project to further enhance, update and develop a software php peer-to-peer from the original torrentbits/bytemonsoon source...

Soulseek 157 NS < 13e/156.x - Remote Peer Search Code Execution PoC

No description provided by source. Soulseek 157 NS 13e & 156. Remote Peer Search Code Execution ============================================= - Release date: July 02, 2009 - Discovered by: Laurent Gaffié ; http://g-laurent.blogspot.com/ - Severity: critical...

Osprey <= 1.0 GetRecord.php Remote File Include Vulnerability

No description provided by source. --------------------------------------------------------------------------- Osprey = 1.0 libdir Remote File Include Vulnerability --------------------------------------------------------------------------- Discovered By Kw3RLn Romanian Security Team :...

Mac OS X <= 10.4.6 (launchd) Local Format String Exploit (ppc)

No description provided by source. !/usr/bin/perl http://www.digitalmunition.com/FailureToLaunch-ppc.pl Code by Kevin Finisterre kflistsatdigitalmunitiondotcom Much appreciation goes to John H for all kindsa random shit like exploiting Veritas and other random things in the past core... where the...

WS_FTP Server <= 5.03 (RNFR) Buffer Overflow Exploit

No description provided by source. ===== Start WSFTPOverflow.pl ===== Usage: WSFTPOverflow.pl ip ftp user ftp pass WSFTPOverflow.pl 127.0.0.1 hello moto WSFTP Server Version 5.03, 2004.10.14 Download: http://www.ipswitch.com/ use IO::Socket; use strict; my$socket = ; if $socket =...

Oracle Forms and Reports 11.1 - Remote Exploit

No description provided by source. !/usr/bin/env ruby Exploit Title: Oracle Reports 11.1 About: Automated exploit for CVE-2012-3153/CVE-2012-3152 Google Dork: inurl:/reports/rwservlet/ Date: 01/28/2014 Exploit Author: Mekanismen [email protected] Credits to: @misssudo for initial disclosure...

Mozilla to Provide WebRTC-based Free Firefox To Firefox Voice and Video Calling feature

Mozilla is planning to provide a new feature that will allow free audio and video calls between its Firefox web browser, thereby ending the need of any third-party client service or plugin. Mozilla will soon release a new experimental version of Firefox Nightly, which will include an open source...

YaCy - The Peer to Peer Search Engine

YaCy is a free search engine that anyone can use to build a search portal for their intranet or to help search the public internet. When contributing to the world-wide peer network, the scale of YaCy is limited only by the number of users in the world and can index billions of web pages. It is...

Zeus Peer to Peer Trojan Hits Banks in 10 New Countries

The Zeus financial malware may be old, but it’s hardly slowing down. The peer-to-peer version of the prolific Trojan was especially busy in the first quarter with infections reported by banks in 10 countries that previously had eluded Zeus’ reach. CSIS Security of Denmark said the gang behind Zeu...

PYSEC-2014-93

PyWBEM 0.7 and earlier uses a separate connection to validate X.509 certificates, which allows man-in-the-middle attackers to spoof a peer via an arbitrary certificate...

CVE-2014-2899: Improper Input Validation

wolfSSL CyaSSL before 2.9.4 allows remote attackers to cause a denial of service NULL pointer dereference via 1 a request for the peer certificate when a certificate parsing failure occurs or 2 a clientkeyexchange message when the ephemeral key is not found...

TextSecure: End-to-End encrypted and Open Source Messaging app

With revelations of NSA spying and some of the most jaw-dropping surveillance leaks, many people feel unencrypted and central-server service is bad in most of the cases, but end-to-end encryption can be used to reduce this problem. Worldwide Government surveillance raises privacy concerns and...

PT-2014-3239

Name of the Vulnerable Software and Affected Versions Cisco NX-OS versions 6.22a and earlier Description The issue is related to the BGP implementation, which does not properly handle the interaction of UPDATE messages with IPv6, VPNv4, and VPNv6 labeled unicast-address families. This allows remo...

Microsoft Says ZeroAccess Click-Fraud Botnet Abandoned

Microsoft is declaring the ZeroAccess botnet dead. Two weeks after obtaining a court order to disrupt the botnet’s ability to carry out click-fraud, assistant general counsel Richard Boscovich of Microsoft’s Digital Crimes Unit said late last week that the botmasters behind ZeroAccess had abandon...

cert name check ignore with GnuTLS

This issue is almost identical to the one named CVE-2013-4545, but this problem affects a different SSL backend. libcurl is vulnerable to a case of missing out the checking of the certificate CN or SAN name field when the digital signature verification is turned off. libcurl offers two separate a...

64-Bit Zeus Banking Trojan Communicates Over Tor Network

The infamous Zeus banking Trojan has gone 64-bit. But why? Researchers at Kaspersky Lab’s Global Research and Analysis Team spotted a new version of the malware that behaves much like its 32-bit contemporaries: it too uses Web injects to steal banking credentials to drain online accounts, steal...

ZeroAccess Peer To Peer Botnet Takedown Incomplete

Microsoft trumpeted its disruption of the ZeroAccess peer-to-peer botnet late last week, but some experts are holding off on scheduling a celebratory ticker-tape parade. With numerous successful takedowns of botnets with a centralized command and control infrastructure in its back pocket, Microso...

microsoft disrupts zeroaccess botnet

Microsoft’s crusade against botnets raged on yesterday as the Redmond, Wash., computer giant and a coalition of law enforcement agencies and Internet security companies disrupted the notorious ZeroAccess botnet. ZeroAccess, or Sirefef as Microsoft likes to call it, is a malware platform that...

BlackBerry Link Multiple Vulnerabilities (Mac OS X)

The remote host has a version of BlackBerry Link installed prior to version 1.1.1.39. It is, therefore, affected by multiple vulnerabilities : - A WebDAV server that listens on an IPv6 address allows remote access to the host's file system. It may also be possible to utilize this vulnerability vi...