CVE-2009-1806

Unspecified vulnerability in IBM Hardware Management Console HMC 7 release 3.4.0 SP2, when Active Memory Sharing is used, has unknown impact and attack vectors, related to a shared memory partition and a shared memory pool with redundant paging Virtual I/O Server VIOS partitions. NOTE: some of...

CVE-2009-1806

CVE-2009-1806 concerns IBM Hardware Management Console (HMC) 7 release 3.4.0 SP2, where the issue arises when Active Memory Sharing is used. The connected documents describe the vulnerability as related to a shared memory partition and a shared memory pool with redundant paging within VIOS partit...

Soulseek 157 NS x/156.x - Remote Distributed Search Code Execution

============================================= - Release date: May 24th, 2009 - Discovered by: Laurent Gaffié - Severity: critical ============================================= I. VULNERABILITY ------------------------- Soulseek 157 NS & 156. Remote Distributed Search Code Execution II. BACKGROUN...

Soulseek 157 NS */ 156.* Remote Distributed Search Code Execution

Exploit for unknown platform in category dos / poc ================================================================= Soulseek 157 NS / 156. Remote Distributed Search Code Execution ================================================================= ============================================= -...

Defense Industrial Base information-sharing program a good start

The recent flood of stories on attacks against the electrical grid, various government agencies and other portions of the critical infrastructure has renewed the calls for improvements in federal cybersecurity and, especially, information sharing between the government and the private sector on...

Old phishing sites still sending spam, attracting victims

The cooperative effort of ISPs, security vendors, volunteer groups and other interested parties has helped develop a quick and efficient method for taking down phishing sites, usually within hours or days of their appearance. However, many phishing sites that have been up for a week or more still...

Yahoo Messenger Detection

Yahoo Messenger is running on this machine and this port. It can be used to share files and chat with other users. SPDX-FileCopyrightText: 2009 LSS Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

SAP Cfolders Multiple Stored XSS Vulnerabilies

Digital Security Research Group DSecRG Advisory DSECRG-09-014 Original advisory: http://dsecrg.com/pages/vul/show.php?id=114 Application: SAP Cfolders included in: SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms Vendor URL: http://SAP.com Bugs: Multiple Stored XSS Risk: Hight...

SAP Cfolders Stored Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-014 Original advisory: http://dsecrg.com/pages/vul/show.php?id=114 Application: SAP Cfolders included in: SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms Vendor URL: http://SAP.com Bugs: Multiple Stored XSS Risk: Hight...

Zervit Webserver 0.02 Remote Directory Traversal Vulnerability

No description provided by source. Zervit Webserver Directory Traversal By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Site: http://zervit.sourceforge.net/ Info: Zervit is the first compact, portable HTTP/Web Server made for human beings. It...

MonGoose 2.4 Directory Traversal Vulnerability

MonGoose 2.4 win webserver Directory Traversal By: e.wiZz! Site: www.balcansecurity.com Found with ServMeNot world's sexiest fuzzer :P In the wild... Info: Easy to use web server for Windows and UNIX. Mongoose provides simple and clean API for embedding it into existing programs. Targeting Web...

FTPDMIN 0.96 - Arbitrary File Disclosure

FTPDMIN 0.96 - Arbitrary File Disclosure !/usr/bin/perl ftpdmin 0.96 Arbitrary File Disclosure Exploit Vulnerability Disclosure by 1 Slach or 2 Slach Tested on Win XP SP2 but it work in other box environment Abouts Exploit : first thing after we exec the application it make our box a simple ftp...

De-perimeterization and open standards

From Cnet, by Jon Oltsik The openness and universal connectivity that helped break down the barriers between coporate networks has also turned out to be a security liability. Jon Oltsik, an analyst at Enterprise Strategy Group, writes that there’s now a need for open standards in security Cnet...

U.S. falling far behind on cybersecurity

In the next few weeks President Barack Obama will be handed a report detailing the country’s cybersecurity defenses and laying out what’s needed to protect America’s technology resources from hostile nations and organized crime groups. It will not be a pretty picture. Cybersecurity experts, forme...

[SECURITY] Fedora 10 Update: netatalk-2.0.3-23.fc10

This package enables Linux to talk to Macintosh computers via the AppleTalk networking protocol. It includes a daemon to allow Linux to act as a file server over EtherTalk or IP for Mac's...

CVE-2009-1237

creationtimestamp| type| source ---|---|--- 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8264 2009-03-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8263 2025-08-31 03:01:18+00:00| seen| MISP/ab0b745f-bbd5-338e-8b92-97dd0c757e9d...

CanSecWest: Caution, community at play

CanSecWest, in beautiful Vancouver BC, is one of my favorite conferences each year. It’s a cozy little security con that brings together security researchers from all parts of the security ecosystem. Like a PhNeutral or a BlueHat, one never quite knows what to expect out of a CanSecWest, but we d...

MLDonkey <= 2.9.7 Arbitrary File Download Vulnerability - Active Check

MLDonkey is prone to a vulnerability that lets attackers download arbitrary files. The issue occurs because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are...

Comcast passwords left unprotected online

User names and passwords belonging to more than 8,000 Comcast Internet customers were left exposed on the Web for at least two months. A post by Brad Stone on the Bits blog NYTimes.com details the situation, which was exposed by a Comcast customer from Pennsylvania. Kevin Andreyo, an educational...

Easy File Sharing Web Server vfolder参数目录遍历漏洞

BUGTRAQ ID: 33973 Easy File Sharing Web Server允许访客经由浏览器上传/下载文件，拥有FTP和WEB版本。 Easy File Sharing Web Server的thumbnail.ghp模块没有正确地过滤对vfolder参数的输入便用于打开文件，远程攻击者可以通过提交特殊格式的文件请求执行目录遍历攻击，打开任意本地文件。 EFS Software Easy File Sharing Web Server 4.8 厂商补丁： EFS Software ------------...