USN-1018-1: OpenSSL vulnerability

Rob Hulswit discovered a race condition in the OpenSSL TLS server extension parsing code when used within a threaded server. A remote attacker could trigger this flaw to cause a denial of service or possibly execute arbitrary code with application privileges. CVE-2010-3864...

Rob Cheyne on Security Education and the Problem of People in Security

Dennis Fisher talks with Rob Cheyne of Safelight Security Advisors about the classical problem of user education, how much of an obstacle to security people are and the ways in which technology has made security more difficult. Podcast audio courtesy of sykboy65 Subscribe to the Digital Undergrou...

Amaya 11.1 - W3C EditorBrowser defer Remote Stack Overflow

Amaya 11.1 - W3C EditorBrowser defer Remote Stack Overflow exploit.py Amaya 11.1 W3C Editor/Browser defer Stack Overflow Exploit By: Encrypt3d.M!nd Origninal Advisory: http://www.milw0rm.com/exploits/8314 Fully Based on Rob Carter's Exploit http://www.milw0rm.com/exploits/7988 Note:you need to...

Amaya 11.1 - W3C Editor/Browser 'defer' Remote Stack Overflow

exploit.py Amaya 11.1 W3C Editor/Browser defer Stack Overflow Exploit By: Encrypt3d.M!nd Origninal Advisory: http://www.milw0rm.com/exploits/8314 Fully Based on Rob Carter's Exploit http://www.milw0rm.com/exploits/7988 Note:you need to upload Devilinside.html to a remote host Works with windows x...

JLMForo System (modificarPerfil.php) Cross-Site Scripting Vulnerability

JLMForo System modificarPerfil.php Cross-Site Scripting Vulnerability Download: http://www.miscodigos.com/aplicaciones/JLMForo20System/ Bug found by Jose Luis Gуngora Fernбndez / JosS Contact: sys-projectathotmail.com Spanish Hackers Team www.spanish-hackers.com /server irc.freenode.net /join...

CVE-2006-5228

CVE-2006-5228 refers to multiple SQL injection vulnerabilities in the Google Gadget login.php (gadget/login.php) for Rob Hensley appckerTodo 4.2 and earlier. The vulnerable component is the login script (up_login, up_pass, up_num_tasks parameters) that allows remote attackers to execute arbitrary...

CVE-2006-5050

Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI...

CVE-2006-5050

CVE-2006-5050 affects BusyBox by its httpd component, enabling directory traversal through URL-encoded "%2e%2e/" sequences in the URI. The underlying issue is a path traversal vulnerability that could allow remote attackers to read arbitrary files. According to the NVD entry, this is a network-ac...