Update for Microsoft Silverlight (KB2526954)

This update to Silverlight improves security, reliability, accessibility support, startup performance, enhances line-of-business support and includes several fixes to better support rich internet applications. This update is backward compatible with web applications built using previous versions ...

NASDAQ Hack Raises Critical Infrastructure Concerns

NASDAQ OMX, owners and operators of the NASDAQ Stock Exchange, reported this weekend that their systems had been infiltrated by unknown hackers. According to a report in the New York Times, NASDAQ OMX contacted federal law enforcement officials after discovering suspicious files in a part of thei...

DSA-2157-1 postgresql-8.3 - buffer overflow

Bulletin has no description...

Multi Gather Generic Operating System Environment Settings

This module prints out the operating system environment variables. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather Generic Operating System Environment Settings', 'Description' = %...

[SECURITY] [DSA-2104-1] New quagga packages fix denial of service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2104-1 [email protected] http://www.debian.org/security/ Florian Weimer September 06, 2010 http://www.debian.org/security/faq -...

Debian DSA-2104-1 : quagga - several vulnerabilities

Several remote vulnerabilities have been discovered in the BGP implementation of Quagga, a routing daemon. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2948 When processing a crafted Route Refresh message received from a configured, authenticated...

[SECURITY] [DSA-2104-1] New quagga packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-2104-1 [email protected] http://www.debian.org/security/ Florian Weimer September 06, 2010 http://www.debian.org/security/faq -...

Cisco IOS Software TELNET Option Handling Vulnerability - Cisco Systems

A defect in multiple Cisco IOS software versions will cause a Cisco router to reload unexpectedly when the router is tested for security vulnerabilities by security scanning software programs. The defect can be exploited repeatedly to produce a consistent denial of service DoS attack. Customers...

Facebook Employees Crack Admin Security

Senior engineers at Facebook responsible for SRE site reliability engineering challenged Facebook employees to try to compromise him and gain access to Facebook’s administrative system via information obtained from him. They succeeded. Read the full article. TechCrunch...

DSA-1964-1 postgresql-7.4 postgresql-8.1 postgresql-8.3 - several vulnerabilities

Bulletin has no description...

Sybase EAServer 5.2 Remote Stack Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Sybase...

Debian Security Advisory DSA 1900-1 (postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4)

The remote host is missing an update to postgresql-7.4, postgresql-8.1, postgresql-8.3, postgresql-8.4 announced via advisory DSA 1900-1. OpenVAS Vulnerability Test $Id: deb19001.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1900-1 postgresql-7.4,...

Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 09/06/2009 - Microsoft Excel String Parsing Integer Overflow - ====================================================================== Table of Contents Affected...

Critical infrastructure security still lagging

The interdependencies and interconnections of the networks that run the country’s critical infrastructure assets such as water, power and gas have created a dangerously fragile system in which security is just now becoming a priority, experts say. For years the priorities for these networks have...

Nessus UDP Scanner

Binary data nessusudpscanner.nbin...

FreeBSD Security Advisory (FreeBSD-SA-04:01.mksnap_ffs.asc)

The remote host is missing an update to the system as announced in the referenced advisory FreeBSD-SA-04:01.mksnapffs.asc ADV FreeBSD-SA-04:01.mksnapffs.asc OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008...

Immunity Canvas: MS08_001

Name| ms08001 ---|--- CVE| CVE-2007-0069 Exploit Pack| CANVAS Description| Windows TCP/IP IGMPv3 Overflow Notes| CVE Name: CVE-2007-0069 VENDOR: Microsoft NOTES: Due to the complexity of the bug, this exploit will never be 100% reliable. This version of the exploit will only work against non MP...

BitchX 1.1 Final MODE Remote Heap Overflow Exploit (0-day)

No description provided by source. !/usr/bin/env ruby BitchX-1.1 Final MODE Heap Overflow 0-day By bannedit Discovered May 16th 2007 - Yet another overflow which can overwrite GOT I found this vuln after modifying ilja's ircfuzz code. Currently this exploit attempts to overwrite the GOT with the...

Design/Logic Flaw

The Session Reliability Service XTE in Citrix MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0 and 1.5, allows remote attackers to bypass network security policies and connect to arbitrary TCP ports via a modified address:port string...

CVE-2007-2850

The CVE-2007-2850 vulnerability affects Citrix Session Reliability Service (XTE) in MetaFrame Presentation Server 3.0, Presentation Server 4.0, and Access Essentials 1.0/1.5. The issue allows remote attackers to bypass network security policies and connect to arbitrary TCP ports by sending a modi...