PT-2011-44: Denial of Service in SAP

The specialists of the Positive Research center have detected "Denial of Service" vulnerability in SAP. A vulnerability has been reported in the SAP DIAG protocol parser, which can be exploited by attackers to cause a denial of service. How to fix Update your software up to the latest version...

PT-2011-46: Information disclosure in SAP

The specialists of the Positive Research center have detected "Information disclosure" vulnerability in SAP. An Information Leakage vulnerability exists in the way SAProuter works with dynamic memory. The cause of the leakage is that SAProuter does not clear the dynamically captured memory before...

PT-2011-47: Denial of Service in SAP

The specialists of the Positive Research center have detected "Denial of Service" vulnerability in SAP. A vulnerability has been reported in the SAP DIAG protocol parser, which can be exploited by attackers to cause a denial of service. How to fix Update your software up to the latest version...

Sonic.net Selected by Google to Operate Stanford Fiber Network !

Sonic.net today announced it has been selected to operate and support the trial fiber-to-the-home network Google is building at Stanford University. This experimental project will test new fiber construction and operation methods, while delivering full gigabit speeds to approximately 850 faculty...

Fedora Update for galeon FEDORA-2010-18773

Check for the Version of galeon OpenVAS Vulnerability Test Fedora Update for galeon FEDORA-2010-18773 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

Users Credit Card Information Stolen by Hackers from CitySights NY Website !

Most of us believe that by making online purchases through a secure website, with reputable companies, our credit card information is safe, right. That is not entirely true, as users of the popular website, CitySights NY recently discovered. You see, while the site itself may be secure, the...

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities

Radius Manager 3.8.0 - Multiple Cross-Site Scripting Vulnerabilities Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for...

Radius Manager Cross Site Scripting

Check Point Software Technologies - Vulnerability Discovery Team VDT http://www.checkpoint.com/defense/ Radius Manager Multiple Cross Site Scripting Issues CVE-2010-4275 INTRODUCTION Radius Manager is a centralized way for administration of Mikrotik, Cisco, Chillispot and StarOS routers and...

[CORE-2010-0728] Symantec Intel Handler Service Remote Denial-of-Service

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Symantec Intel Handler Service Remote DoS 1. Advisory Information Title: Symantec Intel Handler Service Remote DoS Advisory Id: CORE-2010-0728 Advisory URL:...

Symantec Intel Handler Service Remote DoS

Core Security - CoreLabsSymantec Intel Handler Service Remote DoS 1. Advisory Information Title: Symantec Intel Handler Service Remote DoS Advisory Id: CORE-2010-0728 Advisory URL: http://www.coresecurity.com/content/symantec-intel-handler-service-remote-dos Date published: 2010-12-13 Date of las...

CA20101209-01: Security Notice for CA XOsoft

-----BEGIN PGP SIGNED MESSAGE----- CA20101209-01: Security Notice for CA XOsoft Issued: December 9, 2010 CA Technologies support is alerting customers to a security risk with CA XOsoft. A vulnerability exists that can allow a remote attacker to execute arbitrary code. CA has issued a patch to...

BugTracker.Net 3.4.4 Multiple Vulnerabilities

Exploit for asp platform in category web applications ============================================= BugTracker.Net 3.4.4 Multiple Vulnerabilities ============================================= 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109...

Fedora Update for rekonq FEDORA-2010-15874

Check for the Version of rekonq OpenVAS Vulnerability Test Fedora Update for rekonq FEDORA-2010-15874 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the ter...

RealFlex RealWin SCADA SCPC_INITIALIZE Buffer Overflow (CVE-2010-4142)

RealWin is a SCADA Supervisory Control And Data Acquisition server product developed by RealFlex Technologies. SCADA is an industrial control system, in which a computer system monitors and controls an industrial, infrastructure or facility based process A buffer overflow vulnerability has been...

BugTracker.NET 3.4.4 - Multiple Vulnerabilities

Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...

BugTracker.NET 3.4.4 - Multiple Vulnerabilities

BugTracker.NET 3.4.4 - Multiple Vulnerabilities Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...

CORE-2010-1109 - Multiple vulnerabilities in BugTracker.Net

Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Multiple vulnerabilities in BugTracker.Net 1. Advisory Information Title: Multiple vulnerabilities in BugTracker.Net Advisory Id: CORE-2010-1109 Advisory URL:...

Security Worth Buying

I’m a dirty vendor. That may not be the best way to start a serious dialogue about security product effectiveness, but I hate to read a post on security theory by some insincere tie-wearing wonk only to discover afterwards that he or she is Lord High Poobah of Marketing at “Scaring You For Profit...

CORE-2010-1018 - Landesk OS command injection

Core Security Technologies - CoreLabs Advisory http://corelabs.coresecurity.com/ Landesk OS command injection 1. Advisory Information Title: Landesk OS command injection Advisory Id: CORE-2010-1018 Advisory URL: http://www.coresecurity.com/content/landesk-os-command-injection-vulnerability Date...

LFI and XSS vulnerability in openEngine

openEngine Local File Inclusion and XSS Vulnerabilities SecPod Technologies www.secpod.com SecPod ID: 1009 10/20/2010 Issue Discovered Class: Local File Inclusion and XSS Severity: High Overview: --------- openEngine is prone to local file inclusion and XSS vulnerabilities. Technical Description:...