Design/Logic Flaw

Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.60 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...

[SECURITY] [DSA 2416-1] notmuch security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2416-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst February 22, 2012 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2417-1] libxml2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2417-1 [email protected] http://www.debian.org/security/ Nico Golde February 22, 2012 http://www.debian.org/security/faq -...

DSA-2411-1 mumble - information disclosure

Bulletin has no description...

Unfixed XSS vulnerability at jogjacamp.org

Security researcher xwungu, has submitted on 17/02/2012 a cross-site-scripting XSS vulnerability affecting jogjacamp.org, which at the time of submission ranked 398931 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...

[SECURITY] [DSA 2409-1] devscripts security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2409-1 [email protected] http://www.debian.org/security/ Raphael Geissert February 15, 2012 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at hopla.fr

Security researcher VirtualSystEm, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting hopla.fr, which at the time of submission ranked 2133983 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is current...

Total Defense Suite UNC Management Web Service Database Credentials Disclosure Vulnerability

This vulnerability allows attackers to remotely obtain domain credentials on vulnerable installations of CA Total Defense Suite UNC Management Web Service. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AppCode.dll service listening by default on...

[SECURITY] [DSA 2400-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2400-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 02, 2012 http://www.debian.org/security/faq -...

tomcat: large number of parameters DoS

Apache Tomcat 5.5.x before 5.5.35, 6.x before 6.0.34, and 7.x before 7.0.23 uses an inefficient approach for handling parameters, which allows remote attackers to cause a denial of service CPU consumption via a request that contains many parameters and parameter values, a different vulnerability...

Unfixed XSS vulnerability at www.jager-immobilier.com

Security researcher Atmon3r, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.jager-immobilier.com, which at the time of submission ranked 9860565 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/02/2012. It ...

Revamped Pwn2Own to Offer $105K in Prizes, Cash From Google for Chrome 0-Days

The Pwn2Own contest at the CanSecWest conference has become one of the landmark events on the calendar each year, as researchers gather with nervous vendors in a tiny room to see who can own which browser on which platform and how quickly. But this year’s contest will have a much different look...

Unfixed XSS vulnerability at www.annuaire.journaldupirate.com

Security researcher Atmon3r, has submitted on 16/01/2012 a cross-site-scripting XSS vulnerability affecting www.annuaire.journaldupirate.com, which at the time of submission ranked 216205 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...

CVE-2012-0695

Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...

Design/Logic Flaw

Multiple unspecified vulnerabilities in Google Chrome before 17.0.963.27 on the Acer AC700, Samsung Series 5, and Cr-48 Chromebook platforms have unknown impact and attack vectors...

membase-brute NSE Script

Performs brute force password auditing against Couchbase Membase servers. Script Arguments membase-brute.bucketname if specified, password guessing is performed only against this bucket. creds.service, creds.global See the documentation for the creds library. smbdomain, smbhash, smbnoguest,...

Look411.com Cross Site Scripting

WhiteHatZone Vulnerable : http://www.look411.com/ Script : alert'XSS found by Girish Shrimali'; Vulnerable link : http://www.look411.com/?p=numbersearch&q=%3Cscript%3Ealert%28%27XSS+found+by+Girish+Shrimali%27%29%3B%3C%2Fscript%3E&country=US Greetz : Vidit Baxi, Sumit Pareek...

[SECURITY] [DSA 2376-1] ipmitool security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2376-1 [email protected] http://www.debian.org/security/ Thijs Kinkhorst December 30, 2011 http://www.debian.org/security/faq -...

EchoClient

This small handy tool uses raw IP packets in to establish a connection to the target in order to see if there is any response to a echo type of packet and determine if the connection or the channel is alive an properly established. Modified by JSacco - [email protected]...

dns-blacklist NSE Script

Checks target IP addresses against multiple DNS anti-spam and open proxy blacklists and returns a list of services for which an IP has been flagged. Checks may be limited by service category eg: SPAM, PROXY or to a specific service name. Script Arguments dns-blacklist.services string containing a...