Top 5 Social Networking Business Threats

Social networking sites are ideal havens for online criminal activities as they provide a combination of two key factors: a huge number of users and a high-level of trust among these users, cautioned a security specialist. ZDNet Asia spoke to industry experts who highlight the top five security...

cPanel and WHM 11.25 - failurl HTTP Response Splitting

cPanel and WHM 11.25 - failurl HTTP Response Splitting source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This...

cPanel and WHM 11.25 - 'failurl' HTTP Response Splitting

source: https://www.securityfocus.com/bid/37902/info cPanel and WHM is prone to an HTTP response-splitting vulnerability. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This could aid in various attacks that try to entice client...

Debian Security Advisory DSA 1961-1 (bind9)

The remote host is missing an update to bind9 announced via advisory DSA 1961-1. OpenVAS Vulnerability Test $Id: deb19611.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1961-1 bind9 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Adobe Reader: Multiple vulnerabilities

No description provided by source. - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - Gentoo Linux Security Advisory GLSA 200910-03 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - http://security.gentoo.org/ - - - - - - - - - - - - - - - - - - - - - - ...

Wowd Search Client 1.3.0 XSS

Exploit for unknown platform in category web applications ============================ Wowd Search Client 1.3.0 XSS ============================ Wowd search client multiple variable xss Vendor URL: http://www.wowd.com/ Vendor notify:yes exploit available:yes What is Wowd? Wowd is a real-time sear...

GLSA-200910-03 : Adobe Reader: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200910-03 Adobe Reader: Multiple vulnerabilities Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletin referenced below. Impact : A remote...

Adobe Reader: Multiple vulnerabilities

Background Adobe Reader formerly Adobe Acrobat Reader is a closed-source PDF reader. Description Multiple vulnerabilities were discovered in Adobe Reader. For further information please consult the CVE entries and the Adobe Security Bulletin referenced below. Impact A remote attacker might entice...

Update Protection against Recent Malware Threats (21-Oct-09)

The update includes new protections against 11 recent malware threats: Backdoor: Teevsock CRogue-Software: Antivirus Pro 2010Rogue-Software: NoAdwareRogue-Software: Trust WarriorTrickler: Trojan-Downloader.Win32.Agent.cqcvTrickler: TrojanDownloader.Win32.Caxnet.ATrickler:...

CVE-2009-2981

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

CVE-2009-2981

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

Design/Logic Flaw

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

CVE-2009-2981

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

CVE-2009-2981

Technical details for CVE-2009-2981 (affected Adobe Reader/Acrobat versions and exploit vectors) are not publicly provided in the connected documents. Monitor for updates from vendors/advisories to obtain concrete remediation information and confirmed impact.

RedHat Security Advisory RHSA-2009:1499

The remote host is missing updates announced in advisory RHSA-2009:1499. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A specially-crafted PDF file could cause Adobe Reader to crash or, potentially, execute...

CVE-2009-2981: Improper Input Validation

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...

RHEL 5 : acroread (RHSA-2009:1499)

The remote Redhat Enterprise Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1499 advisory. Adobe Reader allows users to view and print documents in Portable Document Format PDF. Multiple flaws were discovered in Adobe Reader. A...

Shibboleth Service Provider NULL Character Spoofing Vulnerability (Windows)

The host has Shibboleth Service Provider installed and is prone to NULL Character Spoofing vulnerability. OpenVAS Vulnerability Test $Id: gbshibbolethspnullcharspoofingvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Shibboleth Service Provider NULL Character Spoofing Vulnerability Windows Authors...

Shibboleth Service Provider NULL Character Spoofing Vulnerability - Windows

Shibboleth Service Provider is prone to a NULL character spoofing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

acroread: Trust Manager restrictions bypass fixed in 8.1.7 (APSB09-15)

Adobe Reader and Acrobat 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2 do not properly validate input, which might allow attackers to bypass intended Trust Manager restrictions via unspecified vectors...