XSS in header for Personal Spaces

Create a user with username "alert'hahahaha' User creates a personal space Try to add a page to the personal space This is caused by code code However since the personal space doesn't work too well with usernames with crazy letters, I don't think its a Blocker...

XSS in header for Personal Spaces

Create a user with username "alert'hahahaha' User creates a personal space Try to add a page to the personal space This is caused by code code However since the personal space doesn't work too well with usernames with crazy letters, I don't think its a Blocker...

XSS in header for Personal Spaces

Create a user with username "alert'hahahaha' User creates a personal space Try to add a page to the personal space This is caused by code code However since the personal space doesn't work too well with usernames with crazy letters, I don't think its a Blocker...

[SECURITY] Fedora 11 Update: kdepimlibs-4.3.1-1.fc11

Personal Information Management PIM libraries for the K Desktop Environment 4...

[SECURITY] Fedora 11 Update: kdepim-4.3.1-1.fc11

PIM Personal Information Manager applications, including: akregator: feed aggregator kmail: email client knode: newsreader knotes: sticky notes for the desktop kontact: integrated PIM management korganizer: journal, appointments, events, todos kpilot: HotSync=C2=AE software for Palm OS=C2=AE devi...

EesySec Personal Firewall Remote Buffer Overflow Exploit

!/usr/bin/perl + Bug : EesySec Personal Firewall Remote Buffer Overflow Exploit + program Download : http://www.effectmatrix.com/easysec/ + Author : theEdit0r + Contact me : the3dit0ratYahoodotcoM + Greetz to all my friends + Tested on: Windows XP Pro SP3 + web site: Expl0iters.ir Anti-security.i...

EasySec Personal Firewall buffer overflow

Buffer overflow on FTP analysis...

Health Care Breach Notification Mandated

From SC Magazine Angela Moscaritolo Two new rules were created this week requiring health care organizations, and other entities that interact with personal health records PHRs, to issue notifications in the event of a data breach. The key rule, issued Wednesday by the U.S. Department of Health a...

Facebook Attack: Personal Info Theft via CSRF

This video is a demonstration of an attack exploiting a vulnerability in Facebook. It is a companion video to this blog post quaji.com that describes and discusses the hack. In a nutshell, a Facebook user’s personal is stolen. The only thing he does is view a regular, legitimate forum site...

Three Indicted For Hack Attacks on Heartland, Hannaford

A Miami man and two Russians have been indicted usdoj.gov by a grand jury in New Jersey on charges of conspiring to commit some of the largest data breaches in U.S. history. Albert Gonzalez, 28, and the two still-unnamed Russian citizens are charged with running an international scheme to steal...

CVE-2008-6962

Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary code via a crafted IOCTL request that overwrites a kernel pointer...

Microsoft Sues Alleged IM Spammers, Phishers

From CNet News Josh Lowensohn Microsoft is bringing out the big guns to combat instant message spam and phishing attacks done to users of its Live Messenger network. The Redmond, Wash.-based software giant filed a civil lawsuit Thursday in King County Superior Court in Seattle against Funmobile,...

CVE-2009-2450

The OAmon.sys kernel driver 3.1.0.0 and earlier in Tall Emu Online Armor Personal Firewall AV+ before 3.5.0.12, and Personal Firewall 3.5 before 3.5.0.14, allows local users to gain privileges via crafted METHODNEITHER IOCTL requests to \Device\OAmon containing arbitrary kernel addresses, as...

CVE-2009-2450

The CVE-2009-2450 issue affects the OAmon.sys kernel driver (version 3.1.0.0 and earlier) used by Tall Emu Online Armor Personal Firewall AV+ (before 3.5.0.12) and Online Armor Personal Firewall 3.5 (before 3.5.0.14). The vulnerability allows local users to gain privileges via crafted METHOD_NEIT...

XM Easy Personal FTP Service Denial Of Service

!usr/bin/perl -w XM Easy Personal FTP Server 5.x allows remote attackers to cause a denial of service via a "HELP" or "TYPE" command with an overly long argument. Refer: http://secunia.com/advisories/35271/ Original advisory avaiable at:...

XM Easy Personal FTP Server多个FTP命令远程溢出漏洞

BUGTRAQ ID: 35239 XM Easy Personal FTP Server是一款简单易用的个人FTP服务器工具。 如果远程攻击者向XM Easy Personal FTP Server发送了超过4700字节的超长HELP或TYPE FTP命令的话，就可能触发缓冲区溢出，导致服务器崩溃。攻击者必须首先能够登录到服务器才能利用这个漏洞；此外由于没有覆盖寄存器，因此无法执行任意代码。 dxmsoft XM Easy Personal FTP Server 5.7.0 厂商补丁： dxmsoft -------...

Online Armor个人防火墙IOCTL请求本地权限提升漏洞

BUGTRAQ ID: 35227 Online Armor是澳大利亚Tall Emu开发的个人防火墙。 Online Armor防火墙的OAmon.sys驱动在处理用户所提交的IOCTL请求时没有执行正确的地址空间验证，本地非特权用户可以向任意地址写入任意数据，导致执行任意内核态代码。 ... .text:00013E8D @@ioctl830020C3: .text:00013E8D mov eax, ebp+OutputBuffer ; UserBuffer .text:00013E90 mov dword ptr eax, 1 ; UserBuffer0 = 1...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Dokeos 1.8.5, and possibly earlier, allow remote attackers to inject arbitrary web script or HTML via the 1 searchterm parameter to main/auth/courses.php; the 2 frmtitle and 3 frmcontent parameters in a new personal agenda item action; the 4...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...

CVE-2009-2005

Cross-site request forgery CSRF vulnerability in Dokeos 1.8.5, and possibly earlier, allows remote attackers to hijack the authentication of unspecified victims and add new personal agenda items via unknown vectors...