Researchers Improve Random-Number Generation with Forced Memory 'Twitching'

A German research team has now developed a true random number generator that uses an extra layer of randomness by making a computer memory element, a flip-flop, twitch randomly between its two states 1 or 0. Immediately prior to the switch, the flip-flop is in a “metastable state” where its...

JRE TrueType font parsing crash (6815780)

Unspecified vulnerability in the TrueType font parsing functionality in Sun Java SE 5.0 before Update 22 and 6 before Update 17 allows remote attackers to cause a denial of service application crash via a certain test suite, aka Bug Id 6815780...

Article Directory Blind SQL Injection

-------------------------------------------------------------- Article Directory page.php Remote Blind SQL Injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.yourarticlesdirectory.com Software : Article Directory Thank You Very Mu...

Article Directory - page.php Blind SQL Injection

Article Directory - page.php Blind SQL Injection -------------------------------------------------------------- Article Directory page.php Remote Blind SQL Injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.yourarticlesdirectory.c...

OpenJDK Font processing vulnerability (6733336)

Heap-based buffer overflow in Java Runtime Environment JRE for Sun JDK and JRE 6 Update 10 and earlier; JDK and JRE 5.0 Update 16 and earlier; and SDK and JRE 1.4.218 and earlier might allow remote attackers to execute arbitrary code via a crafted TrueType font file...

Bluo CMS 1.2 (index.php id) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= Bluo CMS 1.2 index.php id Blind SQL Injection Vulnerability =============================================================...

webstudiocms-sql.txt

submitted: 09/01/2008 10:01 AM ----------------------------------------------------------------------------------- Scr!pt : WebStudio CMS V3rs!0n : ! S!t3 : http://www.bdigital.biz/?pageid=214 Dork : Powered by WebStudio Auth0r : BorN To K!LL...

SaturnCMS (view) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================== SaturnCMS view Blind SQL Injection Vulnerability ================================================== SaturnCMS view Blind SQL Injection Vulnerability Author: Hussin X script :...

Diesel Job Site - job_id Blind SQL Injection

Diesel Job Site - jobid Blind SQL Injection Diesel Job Site Blind Sql Injection P0c Author : Stack Home Script : http://www.dieselscripts.com Desc : look the select Job Viewed: in real id+and+1=1 true the times change each time but in real id+and+1=0 false it remains stable go to url exploit or p...

CVE-2008-3671

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3671

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3671

The CVE-2008-3671 entry concerns Acronis True Image Echo Server 9.x build 8072 running on Linux, where backups sent to an FTP server are not properly encrypted. This leads to potential information disclosure by remote attackers. The vulnerability description notes that the provenance is unknown a...

CVE-2008-3671: Undefined Security Weakness

Acronis True Image Echo Server 9.x build 8072 on Linux does not properly encrypt backups to an FTP server, which allows remote attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-3273: Undefined Security Weakness

JBoss Enterprise Application Platform aka JBossEAP or EAP before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string...

JBossEAP status servlet info leak

JBoss Enterprise Application Platform aka JBossEAP or EAP before 4.2.0.CP03, and 4.3.0 before 4.3.0.CP01, allows remote attackers to obtain sensitive information about "deployed web contexts" via a request to the status servlet, as demonstrated by a full=true query string...

DEBIAN-CVE-2008-1808

Multiple off-by-one errors in FreeType2 before 2.3.6 allow context-dependent attackers to execute arbitrary code via 1 a crafted table in a Printer Font Binary PFB file or 2 a crafted SHC instruction in a TrueType Font TTF file, which triggers a heap-based buffer overflow...

Invalid memory access in Acronis True Image Group Server 1.5.19.191

Luigi Auriemma Application: Acronis True Image Group Server http://www.acronis.com/enterprise/products/ATIES/group-server.html Versions: = 1.5.19.191 included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages Platforms: Windows Bug: invalid memory access...

NULL pointer in Acronis True Image Windows Agent 1.0.0.54

Luigi Auriemma Application: Acronis True Image Windows Agent http://www.acronis.com/enterprise/products/ATIES/windows-agent.html Versions: = 1.0.0.54 included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages Platforms: Windows Linux is not affected Bug: NULL...

Out-of-bounds

Acronis True Image Group Server 1.5.19.191 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service crash via a packet with an invalid length field, which causes an out-of-bounds read...

Null pointer dereference

Acronis True Image Windows Agent 1.0.0.54 and earlier, included in Acronis True Image Enterprise Server 9.5.0.8072 and the other True Image packages, allows remote attackers to cause a denial of service crash via a malformed packet to port 9876, which triggers a NULL pointer dereference...