OpenSSL 0.9.8 < 0.9.8s / 1.x < 1.0.0f Multiple Vulnerabilities

Binary data 801059.prm...

FreeSSHd Remote Denial of Service

Exploit for windows platform in category dos / poc import sys, socket, binascii print "\n" print "----------------------------------------------------------------" print "| FreeSSHd, Remote Denial of Service |" print "| Level, Smash the Stack |" print...

CVE-2011-4528

Unbound before 1.4.13p2 attempts to free unallocated memory during processing of duplicate CNAME records in a signed zone, which allows remote DNS servers to cause a denial of service daemon crash via a crafted response...

Session Race Conditions and Session Puzzling – Now Simplified

Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen , Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling , a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons...

Malaysiakini - Malaysia's Most Popular News Website Shutdown's after cyber attack !

Malaysiakini - Malaysia's Most Popular News Website Shutdown's after cyber attack ! It has been reported that Malaysia's most popular news website Malaysiakini https://www.malaysiakini.com has been hit by cyber attack from 11 AM afternoon shutting the website down. The attack created a stir when...

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence !

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence ! A former security guard at a Dallas medical office has been sentenced to more than nine years in prison in a hacking case that drew national attention because the hacker posted video of the crimes on YouTube. Jesse William McGraw was...

FreeBSD : django -- multiple vulnerabilities (14a37474-1383-11e0-8a58-00215c6a37bb)

Django project reports : Today the Django team is issuing multiple releases -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- to remedy two security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. Information leakage in Django administrative...

django -- multiple vulnerabilities

Django project reports: Today the Django team is issuing multiple releases -- Django 1.2.4, Django 1.1.3 and Django 1.3 beta 1 -- to remedy two security issues reported to us. All users of affected versions of Django are urged to upgrade immediately. Information leakage in Django administrative...

PHP168 V6. 01/6. 0 2 elevation of privilege and storm the local path vulnerability-vulnerability warning-the black bar safety net

PHP168 whole Station is the PHP field of the current most powerful build system, The code is all open source, can be extremely convenient for secondary development, all modules can be freely installed and removed, individual users completely free to use PHPCMS V6. 0 1 There is a serious security...

Native Instruments Reaktor 5 Player v5.5.1 Heap Memory Corruption Vulnerability

Summary REAKTOR 5 PLAYER is your free entry point to the award-winning and avant-garde audio world of REAKTOR 5 - the super-powerful modular sound studio that made Native Instruments famous. Description The NI's Reaktor 5 Player suffers from multiple file handling vulnerability when processing .e...

Banking Botnet in Eastern Europe Steals, Disrupts

Banks in Russia and Ukraine are under continued siege by criminal gangs wielding a sophisticated, next-generation exploitation kit that hacks the financial institutions’ authentication system and then hits it with a denial-of-service attack. Read the full article. The Register...

CompleteFTP v3.3.0 - Remote Memory Consumption DoS

!/usr/bin/perl Title: CompleteFTP v3.3.0 - Remote Memory Consumption DoS Author: Jonathan Salwan [email protected] Web: http://www.shell-storm.org | http://www.sysdream.com Advisories: http://www.sysdream.com/article.php?storyid=331&sectionid=78 60 sec for satured 2Go RAM use IO::Socket; prin...

Microsoft Releases April Security Bulletin

Microsoft has released an update to address vulnerabilities in Microsoft Windows, Office, and Exchange as part of the Microsoft Security Bulletin Summary for April 2010. These vulnerabilities may allow an attacker to execute arbitrary code, operate with elevated privileges, cause a...

TFTP Daemon v1.9 Denial of Service Exploit

Exploit for unknown platform in category dos / poc ========================================== TFTP Daemon v1.9 Denial of Service Exploit ========================================== Title: TFTP Daemon v1.9 Denial of Service Exploit CVE-ID: OSVDB-ID: Author: Socket0x03 Published: 2009-12-22 Verified...

PHP 5.3.1 version before the denial of service attack vulnerability(with test code)-vulnerability warning-the black bar safety net

Code: PHP MultiPart Form-Data Denial of Service proof of concept, 23-10-2009 Bogdan said Calin [email protected] import httplib, urllib, sys, string, threading from string import replace from urlparse import urlparse def usage: print"" print "PHP MultiPart Form-Data Denial of Service proof of...

CVE-2009-3615

The OSCAR protocol plugin in libpurple in Pidgin before 2.6.3 and Adium before 1.3.7 allows remote attackers to cause a denial of service application crash via crafted contact-list data for 1 ICQ and possibly 2 AIM, as demonstrated by the SIM IM client...

SuSE9 Security Update : Red Carpet (YOU Patch Number 11461)

This update fixes a bug in the HTTP header parsing code of the included libsoup. This bug makes rcd vulnerable to a remote denial-of-service attack. CVE-2006-5876 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc...

SuSE 10 Security Update : ipsec-tools (ZYPP Patch Number 6301)

This update of ipsec-tools fixes a crash of racoon in ISAKMP's de-fragmentation code due to a NULL pointer dereference. CVE-2009-1574 Additionally multiple memory leaks were fixed that allowed to execute a remote denial of service attack. CVE-2009-1632 %NASLMINLEVEL 70300 C Tenable Network...

Novell eDirectory 8.8 SP5 Dhost Http Server DoS

Affected Software: Novell eDirectory 8.8 SP5 Vulnerability Description: Novell eDirectory 8.8 SP5 is vulnerable to a denial of service attack. If a remote attacker sends Unicode strings with Http Request to "8028 port" "8028" is the default port of Novell eDirectory Dhost Http Server, the attacke...

Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2009:217-3)

A number of security vulnerabilities have been discovered in Mozilla Thunderbird : Security issues in thunderbird could lead to a man-in-the-middle attack via a spoofed X.509 certificate CVE-2009-2408. A vulnerability was found in xmltokimpl.c expat that with specially crafted XML could be...