Police Change Approach to Phone Hacking Case Involving Andy Coulson

The police have changed their approach to a phone hacking incident that could affect Andy Coulson. Coulson, the media adviser for the Prime Minister, was previously an editor for the News of the World. The police have taken steps to halt the flow of information that could implicate high-ranking...

Design/Logic Flaw

Cobbler before 2.0.4 uses an incorrect umask value, which allows local users to have an unspecified impact by leveraging world writable permissions for files and directories...

CVE-2010-4512

CVE-2010-4512 affects Cobbler, with the issue present in versions prior to 2.0.4. The root cause is an incorrect umask value that allows local users to create or modify files/directories with world-writable permissions, enabling a local-privilege-equivalent impact. The available descriptions do n...

Oh wow ! WikiLeaks data stored in Cold War-era bunker in Sweden !

Confidential files of the website WikiLeaks have been stored into a nuclear bunker in Stockholm, Sweden early this week. In particular, WikiLeaks servers are moved to the "Pionen" White Mountains data center, 30 meters below the ground after being dumped by Amazon. According to the Norwegian news...

HotWebScripts HotWeb Rentals SQL Injection Vulnerability

Exploit for asp platform in category web applications ======================================================== HotWebScripts HotWeb Rentals SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1...

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection

HotWebScripts HotWeb Rentals - resorts.asp SQL Injection Author: R4dc0re Exploit Title: HotWebScripts HotWeb Rentals SQL injection Vulnerability Date: 05-12-2010 Vendor or Software Link: http://www.hotwebscripts.co.uk/ Category:WebApp Price: £150 Contact: [email protected] Website: www.1337db.com...

Fedora Update for perl-libwww-perl FEDORA-2010-15405

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Fedora Update for perl-libwww-perl FEDORA-2010-15405 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

SuSE 11 Security Update : kdm (SAT Patch Number 2136)

The KDE display manager kdm contains a race condition which allows local attackers to make arbitrary files orld writable. CVE-2010-0436 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Code injection

Cisco Unified Videoconferencing UVC System 5110 and 5115, when the Linux operating system is used, uses world-readable permissions for the /etc/shadow file, which allows local users to discover encrypted passwords by reading this file, aka Bug ID CSCti54043...

Fedora Update for perl-libwww-perl FEDORA-2010-15532

Check for the Version of perl-libwww-perl OpenVAS Vulnerability Test Fedora Update for perl-libwww-perl FEDORA-2010-15532 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2010-3733

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file...

Design/Logic Flaw

The Engine Utilities component in IBM DB2 UDB 9.5 before FP6a uses world-writable permissions for the sqllib/cfg/db2sprf file, which might allow local users to gain privileges by modifying this file...

Microsoft IIS - WebDAV Write Access Code Execution (Metasploit)

$Id: iiswebdavuploadasp.rb 10397 2010-09-20 15:59:46Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Ubuntu Update for mountall vulnerability USN-985-1

Ubuntu Update for Linux kernel vulnerabilities USN-985-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9851.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for mountall vulnerability USN-985-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Ubuntu 10.04 LTS : mountall vulnerability (USN-985-1)

Alasdair MacGregor discovered that mountall created a udev rule file with world-writable permissions. A local attacker could exploit this under certain conditions to cause udev to execute arbitrary commands as the root user. Note that Tenable Network Security has extracted the preceding descripti...

[USN-985-1] mountall vulnerability

=========================================================== Ubuntu Security Notice USN-985-1 September 08, 2010 mountall vulnerability CVE-2010-2961 =========================================================== A security issue affects the following Ubuntu releases: Ubuntu 10.04 LTS This advisory...

Owning Virtual Worlds For Fun and Profit

I’m a security researcher. I find bugs in software, they get fixed. I write exploits, they give me a shell. It’s more or less always the same and it gets kind of boring. But there was one exploit I helped write back in 2007 that was a little different. This is the story of that exploit. Second Li...

CVE-2010-2241

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

redhat-ds: setup script insecure .inf file permissions

The 1 setup-ds.pl and 2 setup-ds-admin.pl setup scripts for Red Hat Directory Server 8 before 8.2 use world-readable permissions when creating cache files, which allows local users to obtain sensitive information including passwords for Directory and Administration Server administrative accounts...