CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

UBUNTU-CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

Design/Logic Flaw

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

CVE-2011-3012

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates...

Report: China Suffered 500K Cyber Attacks Last Year

The Chinese government claims they’ve seen nearly 500,000 cyber attacks designed to hit their computers over the past year, with the U.S. and India among the countries believed to be responsible. A report issued Tuesday by the nation’s chief computer security monitoring network, the National...

Signaling network of independently developed web site source code 0day vulnerabilities-vulnerability warning-the black bar safety net

Author: script kiddies This website source code Super cow. Anti-implantation to upload very difficult to break. Background system/login. asp is also Into the ewebeditor is also anti-password A lot of big cattle are very difficult to engage the under This source code after a social worker was...

Taoyuan Network Hard Drive&IIS6. 0 parsing vulnerability and the Fix-vulnerability warning-the black bar safety net

IIS6. 0 filename parsing vulnerability, as long as the use IIS6. 0 of Taoyuan Network Hard Drive to upload a php Trojan:1 2 3;asp;123.jpg that Then through the show. aspx? type=1&filepath=http://www. badguest. cn/the method takes a file path, The last to perform, you can. Repair: frequently asked...

DEBIAN-CVE-2011-2764

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...

CVE-2011-2764

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...

Design/Logic Flaw

Google Chrome before 13.0.782.107 does not ensure that developer-mode NPAPI extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension...

Design/Logic Flaw

Google Chrome before 13.0.782.107 does not ensure that extension installations are confirmed by a browser dialog, which makes it easier for remote attackers to modify the product's functionality via a Trojan horse extension...

CA security finds Android Trojan which records phone calls

CA security finds Android Trojan which records phone calls A new Android Trojan is capable of recording phone conversations, according to a CA security researcher. The trojan is triggered when the Android device places or receives a phone call. It saves the audio file and related information to t...

CA security finds Android Trojan which records phone calls

CA security finds Android Trojan which records phone calls A new Android Trojan is capable of recording phone conversations, according to a CA security researcher. The trojan is triggered when the Android device places or receives a phone call. It saves the audio file and related information to t...

rgmanager: insecure library loading vulnerability

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

Zeus Banking Trojan Comes to Android Phones

The Zeus banking Trojan has jumped the bridge to the large and growing ecosystem of mobile devices powered by Google’s Android operating system, according to security researchers at Fortinet. Researchers say they have obtained a Zeus variant, dubbed “Zitmo,” that can run on Android phones and tha...

Design/Logic Flaw

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

CVE-2011-1338

XnView on Windows is affected by an untrusted search path vulnerability in versions prior to 1.98.1. The flaw arises when loading executables via the Open containing folder path, allowing a local user to gain privileges by placing a Trojan horse .exe in a target folder. Impact: local privilege es...

CVE-2011-1338

Untrusted search path vulnerability in XnView before 1.98.1 allows local users to gain privileges via a Trojan horse .exe file in a folder selected by the "Open containing folder" menu item...

New SMS Trojan Targeting Android Users

The Apple iPhone may still be the gold standard when it comes to smartphones, but the Android platform has become the playground of choice for attackers and malware authors looking to make a quick buck. The latest example is a premium-rate SMS Trojan that not only automatically sends costly SMS...