RedHat Security Advisory RHSA-2008:0002

The remote host is missing updates announced in advisory RHSA-2008:0002. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

Microsoft plugs 14 PowerPoint security holes

Microsoft has slapped a massive band-aid on its PowerPoint presentation software to cover at least 14 documented security vulnerabilities. The MS09-017 update, rated “critical,” includes a fix for a known code execution flaw that was used to launch targeted exploits via rigged PowerPoint files...

Patch coming for MS PowerPoint zero-day flaw

Exactly one month after malicious hackers started using rigged PowerPoint files to launch targeted attacks, Microsoft announced plans to ship a “critical” bulletin affecting its flagship presentation program. The PowerPoint update is the only bulletin scheduled for this month’s Patch Tuesday on M...

Targeted attacks use 'Recession Relief' theme

Internet fraudsters are increasingly taking advantage of the deepening recession to dupe unsuspecting email recipients. The e-mail often includes a request for personal details on the pretense of receiving some financial reward, which later leads to fraud. Common themes include prize wins,...

Microsoft issues PowerPoint zero-day warning

Microsoft has issued an advisory to warn about an under-attack zero-day vulnerability affecting its PowerPoint software. According to the pre-patch advisory, the flaw allows remote code execution if a user opens a booby-trapped PowerPoint file. The company described the attacks as “limited and...

Attack of the mini-botnets

From DarkReading.com Kelly Jackson Higgins Big-name botnets like Kraken/Bobax, Srizbi, Rustock, the former Storm — and even the possible botnet-in-waiting, Conficker — have gained plenty of notoriety, but it’s the smaller and less conspicuous ones you can’t see that are doing the most damage...

Details Facebook the latest high-risk XSS security vulnerability-vulnerability warning-the black bar safety net

Recently, Facebook discovered high-riskXSSto security vulnerabilities, causing its users to suffer huge threat. This article will for these vulnerabilities are published in detail. Facebook in 2 0 0 8 year 1 2 on 1 5 December 2 0 0 9 years 1 months 4 days was traced to a series of high-riskXSSa...

czarnewsaccount-sql.txt

czarNews Account Hijacking = 1.20 user and password Leak ---------------------------------------------------------- Author: Maycon Maia Vitali 0ut0fBound Contact: mayconmaia at yahoo dot com dot br http://maycon.gsec.com.br Original Xploit by StAkeR http://www.milw0rm.com/exploits/6462 Gerenal...

Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability

Exploit for unknown platform in category web applications =============================================================== Joomla 1.5.x Token Remote Admin Change Password Vulnerability =============================================================== Joomla 1.5.x Remote Admin Password Change Greets:...

The use of xss vulnerability can do? - Vulnerability warning-the black bar safety net

Perhaps we often see some of the master testXSSvulnerabilities are alert a window. They thoughtXSSthat is the case, when your own alert out of the window, then said he found the vulnerability. In fact, far not so simple. You found the only programmer of a small bug only, far fromXSS. Their...

drupal -- Cross site request forgeries

The Drupal Project reports: Several parts in Drupal core are not protected against cross site request forgeries due to inproper use of the Forms API, or by taking action solely on GET requests. Malicious users are able to delete comments and content revisions and disable menu items by enticing a...

drupal -- Multiple cross-site scripting vulnerabilities

The Drupal Project reports: Some server variables are not escaped consistently. When a malicious user is able to entice a victim to visit a specially crafted link or webpage, arbitrary HTML and script code can be injected and executed in the context of the victim's session on the targeted website...

Information disclosure through cache collisions — Mozilla

Aad reported that two web pages can collide in the disk cache with the result that depending on order loaded the end of the longer document can be appended to the shorter when the shorter is reloaded from the cache. It is possible a determined hacker could construct a targeted attack to steal som...

CVE-2007-0621

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2006-6456. Reason: This candidate is a duplicate of CVE-2006-6456. It was assigned for a targeted zero-day attack, but further analysis revealed it was for an older issue. Notes: All CVE users should reference CVE-2006-6456 instea...

TIBCO Rendezvous <= 7.4.11 (add router) Remote BOF Exploit

Exploit for unknown platform in category remote exploits ========================================================== TIBCO Rendezvous = 7.4.11 add router Remote BOF Exploit ========================================================== / Exploit: TIBCO RendezVous remote buffer overflow exploit for Win...

Microsoft Office 20002002 - Property Code Execution

Microsoft Office 20002002 - Property Code Execution source: https://www.securityfocus.com/bid/18911/info Microsoft Office is prone to a code-execution vulnerability. This is due to a failure to handle exceptional conditions. Successfully exploiting this issue allows attackers to corrupt process...

CentOS 3 / 4 : php (CESA-2005:748)

Updated PHP packages that fix a security issue are now available. This update has been rated as having important security impact by the Red Hat Security Response Team. PHP is an HTML-embedded scripting language commonly used with the Apache HTTP Web server. A bug was discovered in the PEAR XML-RP...

Targeted attack: experience from the trenches

Targeted attack: experience from the trenches Published: 2006-05-19, Last Updated: 2006-05-19 17:36:01 UTC by Chris Carboni Version: 2click to highlight changes Learning lessons from incidents is a very important part of incident handling. Yet with targeted attacks it is very hard as you need to...

Symantec Enterprise Firewall Gateway Security - HTTP Proxy Internal IP Leakage

Symantec Enterprise Firewall Gateway Security - HTTP Proxy Internal IP Leakage source: https://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component...

Symantec Enterprise Firewall / Gateway Security - HTTP Proxy Internal IP Leakage

source: https://www.securityfocus.com/bid/17936/info Symantec Enterprise Firewall and Gateway Security products are prone to an information-disclosure weakness. The vendor has reported that the NAT/HTTP proxy component of the products may reveal the internal IP addresses of protected computers. A...