8190 matches found
Linux <= 2.6.37-rc1 serial_core TIOCGICOUNT Leak Exploit
Exploit for linux platform in category dos / poc / Linux include include include include include include int mainint argc, char argv int fd, ret = 0, i; struct serialicounterstruct buffer; printf" Linux = 2.6.37-rc1 serialcore TIOCGICOUNT leak exploit\n"; ifargc 2 printf" You need to supply a...
Cyber terrorism among greatest challenges of today for India !
Your credit card number and its code is the new currency in contemporary world where thieves skim the money right from your banking account. It is the new world where the cyberspace poses threats along with its immense impact on how we live and conduct our day-to-day business - it is the topic of...
kernel security and bug fix update
2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...
Nvidia CUDA drivers for Linux information leak
Information leak from kernel to user space via cudaHostAlloc/cuMemHostAlloc calls...
Linux Kernel "execve()"内存扩展"OOM-killer"本地拒绝服务漏洞
BUGTRAQ ID: 45004 CVE ID: CVE-2010-4243 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的"OOM-killer"功能在实现上存在安全漏洞，本地攻击者可利用此漏洞终止不相关的进程，造成拒绝服务。 漏洞源于oomkill函数看不到没有附加到任何线程的已分配内存。 Linux kernel 2.6.24.3 - 2.6.37 RedHat Enterprise Linux Desktop v.5 client 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载...
BlogEngine.NET api/BlogImporter.asmx GetFile Function Unauthorized Access
The web server hosts BlogEngine.NET, an open source .NET blogging project. An install of the software on the remote host allows unauthenticated access to the 'GetFile' function of the 'api/BlogImporter.asmx' script. An unauthenticated, remote attacker may be able to abuse this function to copy...
CVE-2010-4677
emWEB on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to cause a denial of service daemon crash via a request for a document whose name contains space characters, aka Bug ID CSCsy08416...
CVE-2010-4681: Undefined Security Weakness
Unspecified vulnerability on Cisco Adaptive Security Appliances ASA 5500 series devices with software before 8.23 allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character, aka Bug ID CSCte14901...
PT-2011-1636 · Cisco · Cisco Asa
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions prior to 8.23 Description: The issue allows remote attackers to bypass SMTP inspection via vectors involving a prepended space character. Recommendations: For versions prior ...
Dongfan "Greg" Chung (Boeing)
Chung, a 72 year old engineer from Orange, California was charged with eight counts of economic espionage in 2008. According to a statement by the U.S. Department of Justice, Chung, a naturalized U.S. citizen, had secret clearance for work on the U.S. Space Shuttle program that he performed as an...
CVE-2010-4606
Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management HSM component in IBM Tivoli Storage Manager TSM 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary...
Remote code execution
Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management HSM component in IBM Tivoli Storage Manager TSM 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary...
CVE-2010-4606
The CVE concerns the Space Management client in the Hierarchical Storage Management (HSM) component of IBM Tivoli Storage Manager (TSM). Affected versions are 5.4.x (until 5.4.3.4), 5.5.x (until 5.5.3), 6.1.x (until 6.1.4), and 6.2.x (until 6.2.2) on Unix/Linux. The issue allows remote attackers ...
CVE-2010-4606: Undefined Security Weakness
Unspecified vulnerability in the Space Management client in the Hierarchical Storage Management HSM component in IBM Tivoli Storage Manager TSM 5.4.x before 5.4.3.4, 5.5.x before 5.5.3, 6.1.x before 6.1.4, and 6.2.x before 6.2.2 on Unix and Linux allows remote attackers to execute arbitrary...
PT-2010-5572 · Ibm · Ibm Tivoli Storage Manager
Name of the Vulnerable Software and Affected Versions: IBM Tivoli Storage Manager TSM versions 5.4.x through 5.4.3.3 IBM Tivoli Storage Manager TSM versions 5.5.x through 5.5.2 IBM Tivoli Storage Manager TSM versions 6.1.x through 6.1.3 IBM Tivoli Storage Manager TSM versions 6.2.x through 6.2.1...
Unpatched Flaw in IE Bypasses Key Windows Security Features
An exploit exploiting an unpatched vulnerability in Internet Explorer IE has gone public. Security researcher Shahin Ramezany announced in a Tuesday tweet that he successfully exploited the flaw, which involves how IE handles CSS style sheets on Windows 7 and Vista machines. Offensive Security, a...
Microsoft Warns On New Browser Vulnerability
Microsoft on Wednesday issued a security advisory to users of its Internet Explorer Web browser about a newly disclosed vulnerability that could be exploited and used to run malicious code on vulnerable Windows systems. The Redmond, Washington company said it is investigating new, public reports ...
Audit: NASA Fails To Properly Wipe Data From Discarded Drives
A recent internal audit at NASA, the U.S. space agency, found significant weakness in the way the agency disposes of IT equipment, including evidence that used hard drives containing sensitive NASA data may have been sold to the public on the secondhand market. The audit focused on the Johnson an...
CVE-2010-3904
The rdspagecopyuser function in net/rds/page.c in the Reliable Datagram Sockets RDS protocol implementation in the Linux kernel before 2.6.36 does not properly validate addresses obtained from user space, which allows local users to gain privileges via crafted use of the sendmsg and recvmsg syste...
XSS vulnerability in Create Space Button macro
We have identified and fixed a cross-site scripting XSS vulnerability in the Confluence create-space-button macro. XSS vulnerabilities potentially allow an attacker to embed their own JavaScript into a Confluence page. You can read more about XSS attacks at various places on the web, including...