9389 matches found
TinyWebGallery 1.8.9 Path Disclosure
============================================= INTERNET SECURITY AUDITORS ALERT 2013-012 - Original release date: March 19th, 2013 - Last revised: April 6th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 5/10 CVSS Base Score - CVE-ID: CVE-2013-2631...
[SECURITY] [DSA 2654-1] libxslt security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2654-1 [email protected] http://www.debian.org/security/ Salvatore Bonaccorso April 03, 2013 http://www.debian.org/security/faq -...
[AppUse] Android Pentest Platform Unified Standalone Environment
AppSec Labs recently developed the AppUse Virtual Machine. This system is a unique, free, platform for mobile application security testing in the android environment, and it includes unique custom-made tools created by AppSec Labs. There is no need for installation of simulators and testing tools...
DSA-2654-1 libxslt - denial of service
Bulletin has no description...
[Acunetix Web Vulnerability Scanner 8] Automated Web Application Security Testing Tool
Acunetix W eb V ulnerability S canner WVS is an automated web application security testing tool that audits your web applications by checking for exploitable hacking vulnerabilities. Automated scans may be supplemented and cross-checked with the variety of manual tools to allow for comprehensive...
[Matriux] The Open Source Security Distribution for Ethical Hackers and Penetration Testers and Forensic Experts
The Matriux is a phenomenon that was waiting to happen. It is a fully featured security distribution based on Debian consisting of a powerful bunch of more than 300 open source and free tools that can be used for various purposes including, but not limited to, penetration testing, ethical hacking...
Fedora Update for rubygem-actionpack FEDORA-2013-4199
Check for the Version of rubygem-actionpack OpenVAS Vulnerability Test Fedora Update for rubygem-actionpack FEDORA-2013-4199 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...
[SECURITY] Fedora 17 Update: rubygem-actionpack-3.0.11-9.fc17
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
[SECURITY] Fedora 18 Update: rubygem-actionpack-3.2.8-3.fc18
Eases web-request routing, handling, and response as a half-way front, half-way page controller. Implemented with specific emphasis on enabling ea sy unit/integration testing that doesn't require a browser...
SAProuter - Authentication Bypass
Application: SAP Network Interface Router SAProuter Versions Affected: 39.3 SP4 7100.0.0.201 – Win64/Linux x8664, 40.4 Vendor URL: http://www.sap.com Bugs: Authentication bypass Exploits: NO Reported: 23.03.2013 Vendor response: 24.03.2013 Date of Public Advisory: 25.11.2013 Reference: SAP Securi...
[SECURITY] [DSA 2649-1] lighttpd security update
------------------------------------------------------------------------- Debian Security Advisory DSA-2649-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez March 15, 2013 http://www.debian.org/security/faq -...
Debian Security Advisory DSA 2647-1 (firebird2.1 - buffer overflow)
A buffer overflow was discovered in the Firebird database server, which could result in the execution of arbitrary code. OpenVAS Vulnerability Test $Id: deb2647.nasl 6611 2017-07-07 12:07:20Z cfischer $ Auto-generated from advisory DSA 2647-1 using nvtgen 1.0 Script version: 1.0 Author: Greenbone...
DSA-2649-1 lighttpd - fixed socket name in world-writable directory
Bulletin has no description...
Microsoft IIS 6. 0 and 7. 5 multiple vulnerabilities and the use of method-vulnerability warning-the black bar safety net
Microsoft IIS 6.0 install PHP to bypass authentication vulnerability Microsoft IIS with PHP 6.0, which is on PHP5 in Windows Server 2 0 0 3 SP1 test detail: An attacker can send a special request is sent to the IIS 6.0 Service, successfully bypass access restrictions The attacker can access the...
[SSLyze v0.6] SSL Server Configuration Scanning Tool
SSLyze is a Python tool that can analyze the SSL configuration of a server by connecting to it. It is designed to be fast and comprehensive, and should help organizations and testers identify misconfigurations affecting their SSL servers. Features SSL 2.0/3.0 and TLS 1.0/1.1/1.2 compatibility...
Download Kali Linux, from the creators of BackTrack
Great news for Hackers and Backtrack Linux fans! The most awaited penetration testing Linux distribution has been released called 'Kali Linux' or 'Backrack 6', from the creators of BackTrack itself. From last 7 years we have seen five awesome versions of Backtrack Linux. But this time to achieve...
Download Kali Linux, from the creators of BackTrack
Great news for Hackers and Backtrack Linux fans! The most awaited penetration testing Linux distribution has been released called 'Kali Linux' or 'Backrack 6', from the creators of BackTrack itself. From last 7 years we have seen five awesome versions of Backtrack Linux. But this time to achieve...
[JSQL v0.3] Java Tool for Automatic Database Injection
jSQL Injection is a lightweight application used to find database information from a distant server. jSQL is free, open source and cross-platform Windows, Linux, Mac OS X, Solaris. Version 0.2 features: GET, POST, header, cookie methods normal, error based, blind, time based algorithms automatic...