[SECURITY] [DSA 2711-1] haproxy security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2711-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff June 19, 2013 http://www.debian.org/security/faq -...

dbus -- local dos

Simon McVittie reports: Alexandru Cornea discovered a vulnerability in libdbus caused by an implementation bug in dbusprintfstringupperbound. This vulnerability can be exploited by a local user to crash system services that use libdbus, causing denial of service. It is platform-specific: x86-64...

wordpress_fingerprint

This plugin finds the version of a WordPress installation by fingerprinting it. It first checks whether or not the version is in the index header and then it checks for the "real version" through the existance of files that are only present in specific versions. Plugin type Crawl Options This...

find_backdoors

This plugin searches for web shells in the directories that are sent as input. For example, if the input is: http://host.tld/w3af/f00b4r.php The plugin will perform these requests: http://host.tld/w3af/c99.php http://host.tld/w3af/cmd.php http://host.tld/w3af/webshell.php … Plugin type Crawl...

[SECURITY] [DSA 2673-1] libdmx security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2673-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2677-1] libxrender security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2677-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2683-1] libxi security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2683-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2690-1] libxxf86dga security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2690-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2685-1] libxp security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2685-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 23, 2013 http://www.debian.org/security/faq -...

New Android malware forwards incoming messages to hacker

A new type of Android malware that can intercept text messages and forwarding to hackers is discovered by the Russian firm Doctor Web. This is a very serious threat to users, because using this malware attackers can easily get two factor authentication code of your Email or bank accounts. The...

[SECURITY] [DSA 2670-1] request-tracker3.8 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2670-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso May 22, 2013 http://www.debian.org/security/faq -...

CVE-2013-3341

Adobe Reader and Acrobat are affected by CVE-2013-3341: multiple versions (9.x before 9.5.5, 10.x before 10.1.7, 11.x before 11.0.03) permit memory-corruption-based exploits leading to arbitrary code execution or denial of service via unspecified vectors. The connected advisories indicate remedia...

Vulnerabilities Drop Per Site, Most Sites Remain Vulnerable

For at least the third year in a row, the number of serious vulnerabilities per website has fallen. That sounds like good news until you look at the numbers and realize that the average website carried an astonishing 56 holes in 2012, according to statistics compiled by WhiteHat Security...

Mozilla Firefox - Cookie Verification Denial of Service

Mozilla Firefox - Cookie Verification Denial of Service source: https://www.securityfocus.com/bid/62969/info Mozilla Firefox is prone to a denial-of-service vulnerability because it fails to verify the user supplied input. Successfully exploiting this issue will allow an attacker to inject specia...

[SECURITY] [DSA 2650-1] libvirt-bin security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2650-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2646-1] typo3-src security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2646-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...

Potential SQL injection due to execution of platform-specific SQL containing interpolations

More info at https://framework.zend.com/security/advisory/ZF2013-03...

DNS ANY Request

Blocking DNS ANY requests. Such requests return all the DNS records that exist on the DNS server for the specific query...

AIX 6.1 TL 6 : bos.mp64 (U849131)

The remote host is missing AIX PTF U849131, which is related to the security of the package bos.mp64. Some WPAR specific system calls may cause undefined behavior, possibly resulting in a denial of service. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package chec...

kernel: x86/msr: /dev/cpu/*/msr local privilege escalation

The msropen function in arch/x86/kernel/msr.c in the Linux kernel before 3.7.6 allows local users to bypass intended capability restrictions by executing a crafted application as root, as demonstrated by msr32.c...