CVE-2009-3864

The Java Update functionality in Java Runtime Environment JRE in Sun Java SE in JDK and JRE 5.0 before Update 22 and JDK and JRE 6 before Update 17, when a non-English version of Windows is used, does not retrieve available new JRE versions, which allows remote attackers to leverage vulnerabiliti...

/proc Filesystem Directory Permission Bypass

Hi! This is forward from lkml, so no, I did not invent this hole. Unfortunately, I do not think lkml sees this as a security hole, so... Jamie Lokier said: a the current permission model under /proc/PID/fd has a security hole which Jamie is worried about I believe its bugtraq time. Being able to...

proc File Descriptors Directory Permissions bypass

Exploit for unknown platform in category local exploits ================================================== proc File Descriptors Directory Permissions bypass ================================================== Title: proc File Descriptors Directory Permissions bypass CVE-ID: OSVDB-ID: Author: Pave...

[SECURITY] [DSA 1915-1] New Linux 2.6.26 packages fix several vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-1915-1 [email protected] http://www.debian.org/security/ dann frazier October 22, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1909-1] New postgresql-ocaml packages provide secure escaping

------------------------------------------------------------------------ Debian Security Advisory DSA-1909-1 [email protected] http://www.debian.org/security/ Steffen Joeris October 14, 2009 http://www.debian.org/security/faq -...

SLES9: Security update for XFree86-server

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: XFree86-Xnest XFree86-Xvfb XFree86-server More details may also be found by searching for keyword 5012942 within the SuSE Enterprise Server 9 patch database...

Dialysis hacking techniques of penetration of the firewall to the Shellcode-exploit warning-the black bar safety net

Summary 1. Remote shellcode several ways 2. Reuse the current connection technology of some of the issues and advantages 3. Win32 platform-specific implementation 4. Linux x86 platform specific implementation 5. AIX PowerPC platform-specific implementation Implementation introduction 1...

Unfixed XSS vulnerability at www.usenet.to

Security researcher Viper.aT, has submitted on 09/01/2009 a cross-site-scripting XSS vulnerability affecting www.usenet.to, which at the time of submission ranked 45128 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/02/2009. It is currently...

Unfixed XSS vulnerability at phd.deis.unibo.it

Security researcher Dark.Man, has submitted on 29/08/2009 a cross-site-scripting XSS vulnerability affecting phd.deis.unibo.it, which at the time of submission ranked 10056 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.comsult.co.za

Security researcher Gamoscu, has submitted on 08/11/2009 a cross-site-scripting XSS vulnerability affecting www.comsult.co.za, which at the time of submission ranked 26252129 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/07/2010. It is...

Unfixed XSS vulnerability at www.watheefteuropagedaan.be

Security researcher Mystick, has submitted on 08/04/2009 a cross-site-scripting XSS vulnerability affecting www.watheefteuropagedaan.be, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 14/06/2010. It is...

Unfixed XSS vulnerability at www.clickindia.com

Security researcher austinator, has submitted on 08/03/2009 a cross-site-scripting XSS vulnerability affecting www.clickindia.com, which at the time of submission ranked 1160 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2009. It is...

Unfixed XSS vulnerability at www.heaven-hill.com

Security researcher skathgh420, has submitted on 24/07/2009 a cross-site-scripting XSS vulnerability affecting www.heaven-hill.com, which at the time of submission ranked 1478814 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/06/2010. It is...

Unfixed XSS vulnerability at www.deltahotels.com

Security researcher nopic01, has submitted on 22/07/2009 a cross-site-scripting XSS vulnerability affecting www.deltahotels.com, which at the time of submission ranked 90593 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/09/2009. It is...

[SECURITY] [DSA 1837-1] New dbus packages fix denial of service

------------------------------------------------------------------------ Debian Security Advisory DSA-1837-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 18, 2009 http://www.debian.org/security/faq -...

Fedora 10 : phpMyAdmin-3.2.0.1-1.fc10 (2009-7340)

The first security release for phpMyAdmin 3.2.0: - security XSS: Insufficient output sanitizing in bookmarks This version contains a number of small new features and some bug fixes: - core better support for vendor customisation based on what Debian needs - rfe warn when session.gcmaxlifetime is...

[SECURITY] [DSA 1826-1] New eggdrop packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1826-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 04, 2009 http://www.debian.org/security/faq -...

Unfixed XSS vulnerability at www.systempro.com.br

Security researcher Vinicius Viana, has submitted on 07/03/2009 a cross-site-scripting XSS vulnerability affecting www.systempro.com.br, which at the time of submission ranked 13623141 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2010...

More Privacy Controls Coming to Facebook

From The New York Times Riva Richmond Facebook launched a beta test today that foreshadows new privacy controls coming to “Publisher” – the box at the top of your home and profile pages where you add content. The changes will let you easily specify who among your friends gets to see that specific...

DEBIAN-CVE-2009-1888

The aclgroupoverride function in smbd/posixacls.c in smbd in Samba 3.0.x before 3.0.35, 3.1.x and 3.2.x before 3.2.13, and 3.3.x before 3.3.6, when dos filemode is enabled, allows remote attackers to modify access control lists for files via vectors related to read access to uninitialized memory...