Balaji Plus Cloud Antivirus Released - Mix of 32 antivirus Engines for ultra Protection

Balaji Plus Cloud Antivirus Released - Mix of 32 antivirus Engines for ultra Protection Leo Impact Launch World first Antivirus scanning software which protects your PC from viruses, trojans, spyware, rootkits and other malicious programs zero day exploits by using 32+ antivirus on cloud. Most of...

PacketFence v2.0.0 - Latest Version !

"PacketFencePacketFence is an open-source network access control NAC system which provides the following features: registration, detection of abnormal network activities, proactive vulnerability scans, isolation of problematic devices, remediation through a captive portal, 802.1X, wireless...

Shopping Cart Script with Affiliate Program - SQL Injection

Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Shopping Cart Script with Affiliate Program SQL Injection Vendor url:http://www.yourfreeworld.com Version:n/a Price:399$ Published: 2010-06-19 Greetz to:Sid3^effects, MaYur, M4n0j, Dark Blue, S1ayer,d3c0d3r,KD and to all ICW member...

kernel security and bug fix update

2.4.21-63.0.0.0.1.EL - add directio support for qla drivers herb ora 6346849 - support PT Quad card ora 5751043 - io to nfs partition hangs ora 5088963 - add entropy for bnx2 nic ora 5931647 - avoid large allocation-fragmentation in MTU zab - fix clear highpage wli 2.4.21-63.EL - fs: fix pipe nul...

Unfixed XSS vulnerability at www.alfa.com.lb

Security researcher NoPh0BiA, has submitted on 22/10/2007 a cross-site-scripting XSS vulnerability affecting www.alfa.com.lb, which at the time of submission ranked 11119 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/10/2007. It is current...

Fedora Core 6 : rpm-4.4.2.1-1.fc6 (2007-668)

Summary of changes : - update to 4.4.2.1 fixing 247749 and countless others - avoid unnecessary .rpmsave / .rpmnew files 29470, 128622 - stricter docdir checking 246819 - allow checking for pending signals from python 181434 - add hook to python for cleaning up on unclean exit 245389 - resurrect...

PT-2007-5470 · Frontaccounting · Frontaccounting

Name of the Vulnerable Software and Affected Versions: FrontAccounting version 1.12 Build 31 Description: The issue allows remote attackers to execute arbitrary PHP code via a URL in the path to root parameter in the config.php file. Recommendations: For FrontAccounting version 1.12 Build 31,...

netvigilance-sa10.txt

netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...

dt_guestbook version 1.0f XSS vulnerability

netVigilance Security Advisory 10 dtguestbook version 1.0f XSS vulnerability Description: dtguestbook is a fully-featured message board system with admin interface. Due to program flaws it is possible for the remote attacker to conduct XSS attacks. The remote attacker can convince the victim to...

Kerio可注入伪造iphlpapi DLL漏洞

Kerio Personal Firewall是一款个人桌面系统防火墙。 Kerio Personal Firewall处理程序相关组件的加载时存在漏洞，本地攻击者可能利用此漏洞提升权限或使防火墙失效。 Kerio Personal Firewall在加载相关的库文件iphlpapi.dll时，首先从软件的安装目录搜索，如果搜索不到才从操作系统目录加载，而且软件的安装目录是可写的，本地攻击者可以创建伪造的DLL文件，防火墙服务在初始化时加载执行其中的代码，导致执行攻击者的任意指令。 Kerio Personal Firewall 4.3.268 Kerio Personal Firewa...

Linux Kernel Local DoS vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello. I'd like to present one of Linux Kernel vulnerabilities. As far as I know, this one affects 2.6.x kernels. Problem - -- The problem lies in systimercreate in Linux/kernel/posix-timers.c. Each time user creates a posix timer, some kernel memory ...

Dropbear SSH Authorization-pending Connection Saturation DoS

The remote host is running Dropbear, a small, open source SSH server. The version of Dropbear installed on the remote host, by default, has a limit of 30 connections in the authorization-pending state; subsequent connections are closed immediately. This issue can be exploited trivially by an...

security flaw

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

DEBIAN-CVE-2005-2794

store.c in Squid 2.5.STABLE10 and earlier allows remote attackers to cause a denial of service crash via certain aborted requests that trigger an assert error related to STOREPENDING...

CVE-2005-2431

The 1 lost password and 2 account pending features in GForge 4.5 do not properly set a limit on the number of e-mails sent to an e-mail address, which allows remote attackers to send a large number of messages to arbitrary e-mail addresses aka mail bomb...

Sun Ray Smartcard reader may leave desktop session open when card is quickly removed

Overview The Sun Ray Smartcard reader fails to properly detect a "quick removal, reinsertion and removal of a Smartcard." Description The Sun Ray is a thin client computing device designed to process user input and output, and provide access to computing services hosted by a server. Authenticatio...

[security bulletin] SSRT2362 WEBES Service Tools (HP Tru64 UNIX, HP OpenVMS, Windows) Potential File Access Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SECURITY BULLETIN SSRT2362 WEBES Service Tools HP Tru64 UNIX, HP OpenVMS, Windows Potential File Access Vulnerability REVISION: 0 ------------------------------------------------------------ NOTICE: There are no restrictions for distribution of this...

KICQ 2.0.0b1 can be remotely crashed

KICQ is an ICQ client, specifically designed for the KDE. Versions affected: KICQ 2.0.0b1 using icqlib 1.0.0 Description KICQ can be remotely crashed in a very simple way. Just telnet the machine on wich KICQ is running on the port it's bound and feed some garbage. bash-2.05$ telnet 10.0.0.1 1030...

ICQ remote buffer overflow vulnerability

This is very similar to the AIM overflow recently discovered. ICQ protocol uses the same TLV 2711 packet and there is a similar weakness in the parsing of the packet. The details of this vulnerability will not be released until a further time when a patch has been implemented, probably. ICQ2000...

PerlCal (CGI) show files vulnerability

whizkunde security advisory: PerlCal CGI http://www.whizkunde.org | [email protected] ---------------------------------------------------------- Release date: April 27th 2001 Subject: PerlCal CGI security problem Systems affected: NIX not windows systems running PerlCal CGI script Vendor:...