RHEL 6 : fuse (RHSA-2011:1083)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1083 advisory. FUSE Filesystem in Userspace can implement a fully functional file system in a user-space program. These packages provide the mount utility,...

Moderate: Red Hat Security Advisory: fuse security update

Updated fuse packages that fix multiple security issues are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

USN-1167-1: Linux kernel vulnerabilities

Aristide Fattori and Roberto Paleari reported a flaw in the Linux kernel's handling of IPv4 icmp packets. A remote user could exploit this to cause a denial of service. CVE-2011-1927 Goldwyn Rodrigues discovered that the OCFS2 filesystem did not correctly clear memory when writing certain file...

Discuz! NT 3.6 user-space cross-site vulnerabilities and fixes-vulnerability warning-the black bar safety net

Affected version: Discuz! NT 3.6 Vulnerability description: Discuz! NT3. 6 version of the user space log edit not user-submitted data do security filtering, and can lead to insertion of malicious code. Attacker to exploit the vulnerability, you may get a normal user the Cookie of sensitive data,...

Discuz!NT 3.6用户空间跨站漏洞

Discuz!NT3.6版本的用户空间日志编辑未对用户提交的数据做安全性过滤，导致可以插入恶意代码。攻击者利用该漏洞，可能获取正常用户Cookie中的敏感数据、屏蔽页面特定信息、伪造页面信息、拒绝服务攻击、突破外网内网不同安全设置、与其它漏洞结合，修改系统设置，查看系统文件，执行系统命令等！ bug体验地址： http://nt.discuz.net/space/viewspacepost.aspx?postid=3770&spaceid=1882 Discuz!NT 3.6 等待官网出升级补丁 再发表新日志的内容框里输入以下测试语句。 iframe...

Opera < 11.50 Multiple Vulnerabilities

The version of Opera installed on the remote Windows host is earlier than 11.50 and thus potentially affected by multiple vulnerabilities: - An error exists in the handling of data URIs that allows cross-site scripting in some unspecified cases. Issue 995 - An error exists in the browser's handli...

Issue with error pages can cause a system crash

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

Issue with error pages can cause a system crash – Opera Security Advisories

When attempting to resolve a URL which cannot be interpreted as a legal URL, Opera will create an error page to display to the user when they load it. If enough invalid URLs can be created, Opera can use up all available disk space with these error pages, causing the browser or operating system t...

ClubHack: CHMag Issue 17th, June 2011 Download

ClubHack: CHMag Issue 17th, June 2011 Download Contents of this Issue:- 1. Tech Gyan - Pentesting your own Wireless Network 2. Tool Gyan - Wi-Fi tools 3. Mom's Guide - Wireless Security - Best Practices 4. Legal Gyan - Copyrights and cyber space 5. Matriux Vibhag - Forensics with Matriux Part - 2...

Anonymous Leaks 10,000 E-mails of Iranian Government

Anonymous Leaks 10,000 E-mails of Iranian Government A collection of 10,365 e-mails of the Iranian government were leaked by Anonymous OpIran on June 2, 2011. According to members of Anonymous the files were taken after the hacker accessed the Iranian Passport and Visa Office email center. These...

Nmap NSE net: nfs-statfs

Retrieves disk space statistics and information from a remote NFS share. The output is intended to resemble the output of 'df'. The script will provide pathconf information of the remote NFS if the version used is NFSv3. SYNTAX: nfs-statfs.human: If set to '1' or 'true', shows file sizes in a hum...

Report: U.S. Needs Cyber Monroe Doctrine

A New Report from a Washington D.C. think tank with ties to the Obama Administration says the U.S. needs to overhaul its cyber security planning and issue a kind of Monroe Doctrine for cyber space to discourage attacks against U.S. interests. The report, “America’s Cyber Future: Security and...

[SECURITY] [DSA 2240-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq -...

Dropbox potential security flaw revealed, could be exploited by hackers !

It seems that information which Dropbox, the popular web-based file-sharing site/service, issued in response to a US Federal Trade Commission complaint, has revealed a potential security flaw that, according to Ray Bryant, CEO of Idappcom, could be exploited by hackers. According to Bryant, after...

Hack Targets NASA's Earth Observation System

A hacker is claiming that a security hole in a server at NASA’s Goddard Space Flight Center has exposed data related to a satellite-based Earth observation system used to aid in disaster relief. The hacker, who uses the handle “Tinkode” has published a screen capture from what he claims is an FTP...

TinKode Hack FTP of NASA Goddard Space Flight Center !

TinKode Hack FTP of NASA Goddard Space Flight Center ! TinKode Give another big Hack. This time he hack FTP of NASA Goddard Space Flight Center at servir.gsfc.nasa.gov , Some Months before European Space Agency ESA.INT was also Hacked by TinKode. In Above image you can see the proof of hack...

Fedora Update for acpid FEDORA-2011-6460

Check for the Version of acpid OpenVAS Vulnerability Test Fedora Update for acpid FEDORA-2011-6460 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms ...

Scarecrow enterprise Station management system wide byte injection exploit-vulnerability warning-the black bar safety net

Scarecrow enterprise Station based on php+sqlite and php+mysql two versions, php+sqlite features and asp+access almost,the advantage is in favor of the backup, now mostly web space to support php+sqlite. php+mysql features is conducive to processing large amounts of data, but backup and restore i...

FreeBSD Ports: asterisk14

The remote host is missing an update to the system as announced in the referenced advisory. VID 3c7d565a-6c64-11e0-813a-6c626dd55a41 OpenVAS Vulnerability Test $ Description: Auto generated from VID 3c7d565a-6c64-11e0-813a-6c626dd55a41 Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

kernel: proc: protect mm start_code/end_code in /proc/pid/stat

The dotaskstat function in fs/proc/array.c in the Linux kernel before 2.6.39-rc1 does not perform an expected uid check, which makes it easier for local users to defeat the ASLR protection mechanism by reading the startcode and endcode fields in the /proc//stat file for a process executing a PIE...