Security issues addressed in SeaMonkey 2.3 — Mozilla

Miscellaneous memory safety hazards rv:4.0 Impact: Critical Description: Mozilla identified and fixed several memory safety bugs in the browser engine used in SeaMonkey 2.2 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and w...

Schneider Electric Vijeo Historian Web Server Multiple Vulnerabilities

Overview ICS-CERT originally released Advisory ICSA-11-307-01P on the US-CERT secure Portal on November 03, 2011. This web page release was delayed to allow users time to download and install the update. Researcher Kuang-Chun Hung of Security Research and Service Institute--Information and...

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers

Paypal gives FBI the list of IP Address of 1,000 Anomymous hackers Paypal collected 1000 IP addresses of those carrying out Anonymous' DDoS attacks against PayPal last December. To be fair the names on the list will probably be the bottom feeding script kiddies rather than the hackers at the top ...

Shocking Winehouse Death Videos Linked to Scams

Scammers wasted little time generating campaigns to exploit the untimely death of troubled pop-diva, Amy Winehouse. Anti malware experts have identified at least five separate scams attempting to exploit the event, promising videos of Winehouse shortly before her death.The scams include Facebook...

Microsoft Research Team Reports Bugs in Facebook, Google Picasa

Microsoft’s Vulnerability Research team is keeping itself busy finding bugs in other vendors’ products, with the two latest being a vulnerability in Google’s Picasa photo editing and sharing application and a bug in Facebook that could lead to the compromise of a victim’s account. The bug in Pica...

Mobius Forensic Toolkit v0.5.8 Released

Mobius Forensic Toolkit v0.5.8 Released Mobius Forensic Toolkit is a forensic framework written in Python/GTK that manages cases and case items, providing an abstract interface for developing extensions. Cases and item categories are defined using XML files for easy integration with other tool...

HITB Quartal Magazine - eZine Issue 006

Document Title: =============== HITB Quartal Magazine - eZine Issue 006 References: =========== Download: http://www.vulnerability-lab.com/resources/documents/204.pdf Original: http://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-006.pdf Release Date: ============= 2011-06-16 Vulnerability...

Novell File Reporter Agent XML Parser Buffer Overflow

Added: 05/16/2011 CVE: CVE-2011-0994 BID: 47144 OSVDB: 71980 Background Novell File Reporter is software that allows network administrators to identify files stored on the network and generates reports regarding the size of individual files, file type, when files were last accessed, and where...

SAP Crystal Reports 2008 - Multiple XSS

Application: SAP Crystal Reports Vendor URL: Bugs: XSS Risk: Medium Exploits: YES Reported: 13.05.2011 Vendor response: 17.05.2011 Patched: 13.11.2011 Date of Public Advisory: 13.03.2012 Reference: SAP Security Note 1647871 Author: Dmitriy Chastuchin ERPScan Description XSS in MessagingSystem SAP...

October, 2006: 9.6 million Sony batteries recalled after reports of overheating

This was just the first in what would prove to be a string of embarrassments to the Japanese firm over the manufacture of laptop batteries. It began with reports in both Japan and the U.S. about Sony-manufactured lithium ion batteries that were overheating and, in some cases, bursting into flames...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

This host is installed with SAP Crystal Reports and is prone to heap-based buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbsapcrystalreportsbofvuln.nasl 7024 2017-08-30 11:51:43Z teissa $ SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability Authors: Madhuri D...

SAP Crystal Reports Print ActiveX Control Buffer Overflow Vulnerability

SAP Crystal Reports is prone to heap-based buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2011-1660

Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...

CVE-2011-1660

Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the DataDynamics.Reports.Web class library in GrapeCity Data Dynamics Reports before 1.6.2084.14 allow remote attackers to inject arbitrary web script or HTML via 1 the reportName or 2 uniqueId parameter to CoreViewerInit.js, or the 3 uniqueId ...

CVE-2011-1660

GrapeCity Data Dynamics Reports: The DataDynamics.Reports.Web class library is affected by multiple XSS flaws in CoreViewerInit.js and CoreController.js (via reportName, uniqueId, or traceLevel parameters) reachable through CoreHandler.ashx. Vulnerable versions are before 1.6.2084.14. Impact is r...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

Format string

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

Unidesk Management Administrative Bypass

------------------------------------------------------------------ 1. Summary: Unidesk management appliance is prone to a forceful browsing vulnerability that allows an attacker access to administrator resources. ------------------------------------------------------------------ 2. Description: T...