< Back to JetLib.com

jetlib.sec » January 5, 2012

Feeds

167834 items (5263 unread) in 27 feeds

1337day (was: Inj3ct0r, 1337db) (722 unread)
OSVDB Vulnerabilities
Exploit-DB (374 unread)
SecurityFocus Vulnerabilities (1683 unread)
Bugtraq (560 unread)
Full Disclosure (914 unread)
XSSed (3 unread)
Packet Storm Security Headlines (546 unread)
Packet Storm Security Advisories (323 unread)
Packet Storm Security Exploits (115 unread)
Packet Storm Security Recent Files (2 unread)
Packet Storm Security Tools
Packet Storm Security Misc. Files
Sophos security news
Sophos product advisories
Penetration Testing (11 unread)
SecuriTeam (10 unread)
BackTrack Linux Forums
Threatpost
SecDocs
carnal0wnage.attackresearch.com
Carnal0wnage
Kernel Fun
Darknet
The Exploitant
Hack a Day
Wirevolution

« Expand/Collapse

January 05, 2012
21:45
Secunia Security Advisory 47453
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in the Lingotek module for Drupal, which can be exploited by malicious users to conduct script insertion attacks.
Tags: advisory secunia security malicious-users security-advisory
21:38
Secunia Security Advisory 47398
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Mavituna Security has reported a weakness in Orchard, which can be exploited by malicious people to conduct spoofing attacks.
Tags: advisory secunia security mavituna security-advisory
21:38
Secunia Security Advisory 47418
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been reported in the Fill PDF module for Drupal, which can be exploited by malicious users to compromise a vulnerable system and by malicious people to bypass certain security restrictions.
Tags: advisory secunia security malicious-users security-restrictions
20:29
Secunia Security Advisory 47383
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been reported in FFmpeg, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
Tags: advisory secunia security denial-of-service ffmpeg s-system
19:25
Secunia Security Advisory 47449
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Some vulnerabilities have been reported in Google Chrome, which potentially can be exploited by malicious people to compromise a user's system.
Tags: advisory secunia security s-system security-advisory
19:21
Secunia Security Advisory 47402
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Gentoo has issued an update for mysql. This fixes multiple security issues and vulnerabilities, where one has unknown impacts and others can be exploited by malicious, local users to bypass certain security restrictions and manipulate certain data, by malicious users to bypass certain security restrictions, manipulate certain data, cause a DoS (Denial of Service), gain escalated privileges, and potentially compromise a vulnerable system, and by malicious people to conduct script insertion and spoofing attacks, cause a DoS (Denial of Service), and compromise a vulnerable system.
Tags: advisory secunia security denial-of-service malicious-users security-restrictions
19:21
Secunia Security Advisory 47465
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for ffmpeg. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a user's system.
Tags: advisory secunia security denial-of-service s-system
19:20
Secunia Security Advisory 47470
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Two vulnerabilities have been discovered in Gelin's Guest Book, which can be exploited by malicious people to conduct script insertion attacks.
Tags: advisory secunia security security-advisory vulnerabilities
19:20
Secunia Security Advisory 47456
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in the Pretty Link Lite plugin for WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: secunia security-advisory vulnerability
19:20
Secunia Security Advisory 47469
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Stefan Schurtz has discovered a vulnerability in VertrigoServ, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security stefan-schurtz security-advisory vulnerability
19:20
Secunia Security Advisory 47454
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Vulnerability Research Laboratory has reported a vulnerability in @Mail Webmail Client, which can be exploited by malicious users to conduct script insertion attacks.
Tags: advisory secunia security vulnerability-research webmail-client malicious-users
19:20
Secunia Security Advisory 47444
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Zero Science Lab has discovered a vulnerability in Limny, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security science-lab security-advisory
19:20
Secunia Security Advisory 47389
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for foomatic-filters. This fixes a vulnerability, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory vulnerability
19:20
Secunia Security Advisory 47446
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for ghostscript. This fixes multiple vulnerabilities, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory ubuntu
19:20
Secunia Security Advisory 47438
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Ubuntu has issued an update for linux-ti-omap4. This fixes two weaknesses and a vulnerability, which can be exploited by malicious, local users to disclose potentially sensitive information and cause a DoS (Denial of Service).
Tags: advisory secunia security denial-of-service security-advisory
19:20
Secunia Security Advisory 47422
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Julio Potier has discovered a vulnerability in the WPtouch plugin for WordPress, which can be exploited by malicious people to conduct cross-site request forgery attacks.
Tags: advisory secunia security julio-potier potier security-advisory
19:20
Secunia Security Advisory 47423
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for openssl. This fixes two vulnerabilities, which can be exploited by malicious users to potentially compromise a vulnerable system and by malicious people to disclose potentially sensitive information or cause a DoS (Denial of Service).
Tags: denial-of-service malicious-users secunia
19:20
Secunia Security Advisory 47385
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Gentoo has issued an update for phpMyAdmin. This fixes multiple security issues and vulnerabilities, which can be exploited by malicious users to disclose sensitive information, bypass certain security restrictions, conduct cross-site scripting attacks, manipulate certain data, potentially perform certain actions with escalated privileges, and compromise a vulnerable system and by malicious people to disclose potentially sensitive information, bypass certain security restrictions, conduct cross-site scripting and script insertion attacks, and compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-restrictions
19:20
Secunia Security Advisory 47435
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been reported in spamdyke, which can be exploited by malicious people to manipulate certain data.
Tags: advisory secunia security security-advisory vulnerability
19:20
Secunia Security Advisory 47460
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for seamonkey. This fixes multiple vulnerabilities, where one has an unknown impact and others can be exploited by malicious people to disclose sensitive information and compromise a user's system.
Tags: advisory secunia security suse s-system security-advisory
19:20
Secunia Security Advisory 47448
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - High-Tech Bridge SA has discovered multiple vulnerabilities in ImpressCMS, which can be exploited by malicious people to conduct cross-site scripting attacks and by malicious users to compromise a vulnerable system.
Tags: advisory secunia security malicious-users security-advisory
19:20
Secunia Security Advisory 47433
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - SUSE has issued an update for net6. This fixes two weaknesses, which can be exploited by malicious people to disclose certain information and conduct session hijacking attacks.
Tags: advisory secunia security suse session-hijacking security-advisory

17:29
eEye Retina Audit Script Execution of Arbitrary Code
» ‎ SecuriTeam

eEye Retina audit scripts have the capability to run remote shell scripts in order to determine vulnerable applications. One audit script in particular (audit ID 2499) uses find(1) and execute (-exec) when assessing a vulnerability within Gauntlet Firewall. An attacker who can write an executable file in the portion of the file system searched with the find command may be able to exploit this vulnerability to execute arbitrary code with the same privileges provided to Retina to perform a vulnerability scan.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: vulnerability retina audit gauntlet-firewall shell-scripts remote-shell
16:49
Adobe Reader Image Data Buffer Allocation Integer Overflow Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code reader adobe overflow-code integer-overflow code-execution
16:49
Novell Groupwise Client DOCX Loader Relationship Id Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Groupwise Client.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell client groupwise novell-groupwise groupwise-client code-execution
16:49
Novell Groupwise iCal COMMENT, RRULE, TZNAME Code Execution Vulnerabilities
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell GroupWise.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: novell code groupwise novell-groupwise code-execution safer-use
16:44
Adobe Reader U3D TIFF Resource Buffer Overflow Code Execution Vulnerability
» ‎ SecuriTeam

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader X.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!

Tags: code reader adobe d-tiff-resource overflow-code code-execution buffer-overflow

16:31
Worm Steals 45,000 Facebook Passwords, Researchers Say
» ‎ Packet Storm Security Headlines

Worm Steals 45,000 Facebook Passwords, Researchers Say
Tags: steals facebook worm passwords

16:25
Zero Day Initiative Advisory 12-007
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-07 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP and TCP port 32778. When decoding the xdr encoded data from an STAT_NOTIFY procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:25
Zero Day Initiative Advisory 12-007
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-07 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP and TCP port 32778. When decoding the xdr encoded data from an STAT_NOTIFY procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:25
Zero Day Initiative Advisory 12-007
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-07 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP and TCP port 32778. When decoding the xdr encoded data from an STAT_NOTIFY procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:23
Linux IPTables Firewall 1.4.12.2
» ‎ Packet Storm Security Recent Files

iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.
Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

16:23
Linux IPTables Firewall 1.4.12.2
» ‎ Packet Storm Security Tools

iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.
Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

16:23
Linux IPTables Firewall 1.4.12.2
» ‎ Packet Storm Security Misc. Files

iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.
Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

16:22
WiRouter KeyRec 1.1.1
» ‎ Packet Storm Security Recent Files

WiRouter KeyRec is a powerful and platform independent piece of software that recovers the default WPA passphrases of the supported router's models (Telecom Italia Alice AGPF, Fastweb Pirelli, Fastweb Tesley).
Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

16:22
WiRouter KeyRec 1.1.1
» ‎ Packet Storm Security Tools

WiRouter KeyRec is a powerful and platform independent piece of software that recovers the default WPA passphrases of the supported router's models (Telecom Italia Alice AGPF, Fastweb Pirelli, Fastweb Tesley).
Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

16:22
WiRouter KeyRec 1.1.1
» ‎ Packet Storm Security Misc. Files

WiRouter KeyRec is a powerful and platform independent piece of software that recovers the default WPA passphrases of the supported router's models (Telecom Italia Alice AGPF, Fastweb Pirelli, Fastweb Tesley).
Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

16:19
Conntrack Tools 1.0.1
» ‎ Packet Storm Security Recent Files

conntrack-tools is a set of userspace tools for Linux that allow system administrators to interact with the Connection Tracking System, the module which provides stateful packet inspection for iptables. It includes the userspace daemon conntrackd and the commandline interface conntrack.
Tags: userspace conntrack system commandline-interface packet-inspection iptables

16:19
Conntrack Tools 1.0.1
» ‎ Packet Storm Security Tools

conntrack-tools is a set of userspace tools for Linux that allow system administrators to interact with the Connection Tracking System, the module which provides stateful packet inspection for iptables. It includes the userspace daemon conntrackd and the commandline interface conntrack.
Tags: userspace conntrack system commandline-interface packet-inspection iptables

16:19
Conntrack Tools 1.0.1
» ‎ Packet Storm Security Misc. Files

conntrack-tools is a set of userspace tools for Linux that allow system administrators to interact with the Connection Tracking System, the module which provides stateful packet inspection for iptables. It includes the userspace daemon conntrackd and the commandline interface conntrack.
Tags: userspace conntrack system commandline-interface packet-inspection iptables

16:15
Stev.Org Sniffer
» ‎ Packet Storm Security Recent Files

This sniffer has an ncurses user interface, network statics for many different protocols, a view into active TCP connections, UDP packets, ICMP packets, and more.
Tags: stev sniffer org tcp-connections statics user-interface

16:15
Stev.Org Sniffer
» ‎ Packet Storm Security Tools

This sniffer has an ncurses user interface, network statics for many different protocols, a view into active TCP connections, UDP packets, ICMP packets, and more.
Tags: stev sniffer org tcp-connections statics user-interface

16:15
Stev.Org Sniffer
» ‎ Packet Storm Security Misc. Files

This sniffer has an ncurses user interface, network statics for many different protocols, a view into active TCP connections, UDP packets, ICMP packets, and more.
Tags: stev sniffer org tcp-connections statics user-interface

16:13
Gentoo Linux Security Advisory 201201-02
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201201-2 - Multiple vulnerabilities were found in MySQL, some of which may allow execution of arbitrary code. Versions less than 5.1.56 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

16:13
Gentoo Linux Security Advisory 201201-02
» ‎ Packet Storm Security Recent Files

Gentoo Linux Security Advisory 201201-2 - Multiple vulnerabilities were found in MySQL, some of which may allow execution of arbitrary code. Versions less than 5.1.56 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

16:13
Gentoo Linux Security Advisory 201201-02
» ‎ Packet Storm Security Misc. Files

Gentoo Linux Security Advisory 201201-2 - Multiple vulnerabilities were found in MySQL, some of which may allow execution of arbitrary code. Versions less than 5.1.56 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Ubuntu Security Notice USN-1320-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1320-1 - Steve Manzuik discovered that FFmpeg incorrectly handled certain malformed Matroska files. If a user were tricked into opening a crafted Matroska file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Phillip Langlois discovered that FFmpeg incorrectly handled certain malformed QDM2 streams. If a user were tricked into opening a crafted QDM2 stream file, an attacker could cause a denial of service via application crash, or possibly execute arbitrary code with the privileges of the user invoking the program. Various other issues were also addressed.
Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

16:12
Zero Day Initiative Advisory 12-006
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-06 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP port 2049. When decoding the xdr encoded filename from an NFS_RENAME procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:12
Zero Day Initiative Advisory 12-006
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-06 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP port 2049. When decoding the xdr encoded filename from an NFS_RENAME procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:12
Zero Day Initiative Advisory 12-006
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-06 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell Netware. Authentication is not required to exploit this vulnerability. The flaw exists within the xnfs.nlm component which is used when handling NFS RPC requests. This process listens on UDP port 2049. When decoding the xdr encoded filename from an NFS_RENAME procedure request the process uses the user supplied length as the bounds for its copy to a stack buffer. A remote attacker can exploit this vulnerability to execute arbitrary code under the context of the system.
Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

16:11
SQLiteManager 1.2.4 Cross Site Scripting
» ‎ Packet Storm Security Exploits

SQLiteManager version 1.2.4 suffers from multiple cross site scripting vulnerabilities.
Tags: sqlitemanager cross site

16:11
SQLiteManager 1.2.4 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

SQLiteManager version 1.2.4 suffers from multiple cross site scripting vulnerabilities.
Tags: sqlitemanager cross site

16:11
SQLiteManager 1.2.4 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

SQLiteManager version 1.2.4 suffers from multiple cross site scripting vulnerabilities.
Tags: sqlitemanager cross site

16:09
Ubuntu Security Notice USN-1319-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1319-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

16:09
Ubuntu Security Notice USN-1319-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1319-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

16:09
Ubuntu Security Notice USN-1319-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1319-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. Han-Wen Nienhuys reported a flaw in the FUSE kernel module. A local user who can mount a FUSE file system could cause a denial of service. Various other issues were also addressed.
Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

16:08
VertrigoServ 2.25 Cross Site Scripting
» ‎ Packet Storm Security Exploits

VertrigoServ version 2.25 suffers from a cross site scripting vulnerability.
Tags: cross vertrigoserv site vulnerability

16:08
VertrigoServ 2.25 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

VertrigoServ version 2.25 suffers from a cross site scripting vulnerability.
Tags: cross vertrigoserv site vulnerability

16:08
VertrigoServ 2.25 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

VertrigoServ version 2.25 suffers from a cross site scripting vulnerability.
Tags: cross vertrigoserv site vulnerability

16:08
Zero Day Initiative Advisory 12-005
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-05 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application decodes video samples encoded with the RLE codec. When decompressing the sample, the application will fail to accommodate for the canvas the sample is rendered into. This can cause a buffer overflow and thus can be taken advantage of in order to gain code execution under the context of the application.
Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

16:08
Zero Day Initiative Advisory 12-005
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-05 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application decodes video samples encoded with the RLE codec. When decompressing the sample, the application will fail to accommodate for the canvas the sample is rendered into. This can cause a buffer overflow and thus can be taken advantage of in order to gain code execution under the context of the application.
Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

16:08
Zero Day Initiative Advisory 12-005
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-05 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within how the application decodes video samples encoded with the RLE codec. When decompressing the sample, the application will fail to accommodate for the canvas the sample is rendered into. This can cause a buffer overflow and thus can be taken advantage of in order to gain code execution under the context of the application.
Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

16:07
Ggb Guestbook 0.3.1 Cross Site Scripting
» ‎ Packet Storm Security Exploits

Ggb Guestbook suffers from a cross site scripting vulnerability.
Tags: cross guestbook ggb vulnerability

16:07
Ggb Guestbook 0.3.1 Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Ggb Guestbook suffers from a cross site scripting vulnerability.
Tags: cross guestbook ggb vulnerability

16:07
Ggb Guestbook 0.3.1 Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Ggb Guestbook suffers from a cross site scripting vulnerability.
Tags: cross guestbook ggb vulnerability

16:06
Ubuntu Security Notice USN-1318-1
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 1318-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. Various other issues were also addressed.
Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

16:06
Ubuntu Security Notice USN-1318-1
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 1318-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. Various other issues were also addressed.
Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

16:06
Ubuntu Security Notice USN-1318-1
» ‎ Packet Storm Security Misc. Files

Ubuntu Security Notice 1318-1 - Peter Huewe discovered an information leak in the handling of reading security-related TPM data. A local, unprivileged user could read the results of a previous TPM command. Clement Lecigne discovered a bug in the HFS filesystem. A local attacker could exploit this to cause a kernel oops. A flaw was found in how the Linux kernel handles user-defined key types. An unprivileged local user could exploit this to crash the system. Various other issues were also addressed.
Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

16:06
Zero Day Initiative Advisory 12-004
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the JP2Deco component which is used when handling an mjp2 sample. This sample format (JPEG2000) has a required COD marker segment (0xff52) followed by a COD length value. When extracting the contents of this section the application subtracts from this length before passing it into a call to memcpy. A remote attacker can exploit this error to execute arbitrary code under the context of the user.
Tags: day zero initiative apple-quicktime zero-day jpeg2000

16:06
Zero Day Initiative Advisory 12-004
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the JP2Deco component which is used when handling an mjp2 sample. This sample format (JPEG2000) has a required COD marker segment (0xff52) followed by a COD length value. When extracting the contents of this section the application subtracts from this length before passing it into a call to memcpy. A remote attacker can exploit this error to execute arbitrary code under the context of the user.
Tags: day zero initiative apple-quicktime zero-day jpeg2000

16:06
Zero Day Initiative Advisory 12-004
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-04 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the JP2Deco component which is used when handling an mjp2 sample. This sample format (JPEG2000) has a required COD marker segment (0xff52) followed by a COD length value. When extracting the contents of this section the application subtracts from this length before passing it into a call to memcpy. A remote attacker can exploit this error to execute arbitrary code under the context of the user.
Tags: day zero initiative apple-quicktime zero-day jpeg2000

16:06
Zero Day Initiative Advisory 12-003
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within webappmon.exe CGI program. When processing crafted parameters, there exists an insufficient boundary check before supplying a format string with the values, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:06
Zero Day Initiative Advisory 12-003
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within webappmon.exe CGI program. When processing crafted parameters, there exists an insufficient boundary check before supplying a format string with the values, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:06
Zero Day Initiative Advisory 12-003
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-03 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within webappmon.exe CGI program. When processing crafted parameters, there exists an insufficient boundary check before supplying a format string with the values, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:05
Zero Day Initiative Advisory 12-002
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within ov.dll. When processing a user supplied file name for the textFile option, there exists an insufficient boundary check before supplying the value to a format string within _OVBuildPath, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:05
Zero Day Initiative Advisory 12-002
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within ov.dll. When processing a user supplied file name for the textFile option, there exists an insufficient boundary check before supplying the value to a format string within _OVBuildPath, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:05
Zero Day Initiative Advisory 12-002
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-02 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of OpenView Network Node Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within ov.dll. When processing a user supplied file name for the textFile option, there exists an insufficient boundary check before supplying the value to a format string within _OVBuildPath, causing a stack overflow. This can lead to memory corruption which can be leveraged to execute arbitrary code under the context of the target service.
Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service

16:02
Apache Struts2 File Overwrite / Command Execution
» ‎ Packet Storm Security Exploits

Apache Struts2 versions 2.2.1.1 and below suffer from an ExceptionDelegator remote command execution vulnerability. Versions 2.3.1 and below suffer from remote command execution vulnerabilities related to CookieInterceptor and DebuggingInterceptor. Versions 2.3.1 and below suffer from a file overwrite vulnerability in ParametersInterceptor.
Tags: apache execution command command-execution vulnerability

16:02
Apache Struts2 File Overwrite / Command Execution
» ‎ Packet Storm Security Recent Files

Apache Struts2 versions 2.2.1.1 and below suffer from an ExceptionDelegator remote command execution vulnerability. Versions 2.3.1 and below suffer from remote command execution vulnerabilities related to CookieInterceptor and DebuggingInterceptor. Versions 2.3.1 and below suffer from a file overwrite vulnerability in ParametersInterceptor.
Tags: apache execution command command-execution vulnerability

16:02
Apache Struts2 File Overwrite / Command Execution
» ‎ Packet Storm Security Misc. Files

Apache Struts2 versions 2.2.1.1 and below suffer from an ExceptionDelegator remote command execution vulnerability. Versions 2.3.1 and below suffer from remote command execution vulnerabilities related to CookieInterceptor and DebuggingInterceptor. Versions 2.3.1 and below suffer from a file overwrite vulnerability in ParametersInterceptor.
Tags: apache execution command command-execution vulnerability

15:59
Oracle GlassFish Server Administration Bypass
» ‎ Packet Storm Security Exploits

Oracle GlassFish Server versions 2.1 and 3 suffer from an administration console authentication bypass vulnerability.
Tags: server glassfish oracle server-versions server-administration

15:59
Oracle GlassFish Server Administration Bypass
» ‎ Packet Storm Security Recent Files

Oracle GlassFish Server versions 2.1 and 3 suffer from an administration console authentication bypass vulnerability.
Tags: server glassfish oracle server-versions server-administration

15:59
Oracle GlassFish Server Administration Bypass
» ‎ Packet Storm Security Misc. Files

Oracle GlassFish Server versions 2.1 and 3 suffer from an administration console authentication bypass vulnerability.
Tags: server glassfish oracle server-versions server-administration

15:58
ImpressPages CMS 1.0.12 Code Execution
» ‎ Packet Storm Security Exploits

ImpressPages CMS version 1.0.12 suffers from a remote code execution vulnerability.
Tags: code impresspages cms code-execution vulnerability

15:58
ImpressPages CMS 1.0.12 Code Execution
» ‎ Packet Storm Security Recent Files

ImpressPages CMS version 1.0.12 suffers from a remote code execution vulnerability.
Tags: code impresspages cms code-execution vulnerability

15:58
ImpressPages CMS 1.0.12 Code Execution
» ‎ Packet Storm Security Misc. Files

ImpressPages CMS version 1.0.12 suffers from a remote code execution vulnerability.
Tags: code impresspages cms code-execution vulnerability

15:56
Torrific.com Cross Site Scripting
» ‎ Packet Storm Security Exploits

Toriffic.com suffers from a cross site scripting vulnerability.
Tags: cross site com cross-site-scripting vulnerability

15:56
Torrific.com Cross Site Scripting
» ‎ Packet Storm Security Recent Files

Toriffic.com suffers from a cross site scripting vulnerability.
Tags: cross site com cross-site-scripting vulnerability

15:56
Torrific.com Cross Site Scripting
» ‎ Packet Storm Security Misc. Files

Toriffic.com suffers from a cross site scripting vulnerability.
Tags: cross site com cross-site-scripting vulnerability

15:53
Zero Day Initiative Advisory 12-001
» ‎ Packet Storm Security Advisories

Zero Day Initiative Advisory 12-01 - This vulnerability allows remote attackers to remotely manipulate the application database and delete arbitrary files on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability.
Tags: day zero initiative zero-day application-database arbitrary-files

15:53
Zero Day Initiative Advisory 12-001
» ‎ Packet Storm Security Recent Files

Zero Day Initiative Advisory 12-01 - This vulnerability allows remote attackers to remotely manipulate the application database and delete arbitrary files on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability.
Tags: day zero initiative zero-day application-database arbitrary-files

15:53
Zero Day Initiative Advisory 12-001
» ‎ Packet Storm Security Misc. Files

Zero Day Initiative Advisory 12-01 - This vulnerability allows remote attackers to remotely manipulate the application database and delete arbitrary files on vulnerable installations of HP Managed Printing Administration. Authentication is not required to exploit this vulnerability.
Tags: day zero initiative zero-day application-database arbitrary-files

15:53
Posse Softball Director CMS SQL Injection
» ‎ Packet Storm Security Exploits

Posse Softball Director CMS suffers from a remote blind SQL injection vulnerability.
Tags: softball posse sql director-cms sql-injection vulnerability cms

15:53
Posse Softball Director CMS SQL Injection
» ‎ Packet Storm Security Recent Files

Posse Softball Director CMS suffers from a remote blind SQL injection vulnerability.
Tags: softball posse sql director-cms sql-injection vulnerability cms

15:53
Posse Softball Director CMS SQL Injection
» ‎ Packet Storm Security Misc. Files

Posse Softball Director CMS suffers from a remote blind SQL injection vulnerability.
Tags: softball posse sql director-cms sql-injection vulnerability cms

15:36
HServer Webserver 0.1.1 Directory Traversal
» ‎ Packet Storm Security Exploits

HServer Webserver version 0.1.1 suffers from a directory traversal vulnerability.
Tags: webserver hserver directory directory-traversal-vulnerability webserver-version

15:36
HServer Webserver 0.1.1 Directory Traversal
» ‎ Packet Storm Security Recent Files

HServer Webserver version 0.1.1 suffers from a directory traversal vulnerability.
Tags: webserver hserver directory directory-traversal-vulnerability webserver-version

15:36
HServer Webserver 0.1.1 Directory Traversal
» ‎ Packet Storm Security Misc. Files

HServer Webserver version 0.1.1 suffers from a directory traversal vulnerability.
Tags: webserver hserver directory directory-traversal-vulnerability webserver-version

15:33
Giving the Hexbug Spider freedom to explore on its own
» ‎ Hack a Day

[Eric Gregori] recently spent some time messing around with a Hexbug Spider, and wrote in to share some modifications he made to the toy. In its unaltered form the robot can be controlled remotely, and while it’s fun to play with, the excitement is short lived. Using a TI MSP430 along with a small motor [...]
Tags: ti-msp430 gregori excitement microcontrollers

15:21
Gentoo Linux Security Advisory 201201-01
» ‎ Packet Storm Security Advisories

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

15:21
Gentoo Linux Security Advisory 201201-01
» ‎ Packet Storm Security Recent Files

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

15:21
Gentoo Linux Security Advisory 201201-01
» ‎ Packet Storm Security Misc. Files

Gentoo Linux Security Advisory 201201-1 - Multiple vulnerabilities were found in phpMyAdmin, the most severe of which allows the execution of arbitrary PHP code. Versions less than 3.4.9 are affected.
Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

15:09
[ GLSA 201201-02 ] MySQL: Multiple vulnerabilities
» ‎ Full Disclosure

Posted by Tim Sammut on Jan 05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 201201-02
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: MySQL: Multiple vulnerabilities
Date: January 05, 2012...

Tags:

15:08
SourceForge Local File Inclusion
» ‎ Packet Storm Security Exploits

Lgames.sourceforge.net suffers from a local file inclusion vulnerability. Packet Storm contacted SourceForge about this issue and they told us that they are aware of the issue but that the files exposed do not pose a security threat. An additional request asking for clarification on whether or not they are going to fix this fell on deaf ears. Packet Storm suggests using an alternative such as Google Code to host your project.
Tags: inclusion file sourceforge packet-storm deaf-ears google

14:33
Self Balancing Robot with Wii parts
» ‎ Hack a Day

[Moser] is looking to build a quadrocopter sometime in the future, without plunking down a good chunk of change for a kit model. Looking for a good place to start he figured why not work on the control system. Thinking that the balance of the flying platform of doom would be similar to working out [...]
Tags: balancing self robot flying-platform kit-model wii hacks
13:33
Hackaday Links: January 5, 2012
» ‎ Hack a Day

Now make it life size Here’s a scale model of the classic Playstation game Wipeout. It uses quantum levitation, superconductors, liquid nitrogen, and incredibly detailed models of the cars in Wipeout. They’re able control the speed and direction of the cars electronically. Somebody get on making one of these I can drive. Never mind, it’s totally [...]
Tags: wipeout hackaday links game-wipeout liquid-nitrogen playstation-game hackaday

13:17
ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-007 : Novell Netware XNFS.NLM STAT Notify Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-007
January 5, 2012

-- CVE ID:

-- CVSS:
10, AV:N/AC:L/Au:N/C:C/I:C/A:C

-- Affected Vendors:

Novell

-- Affected Products:

Novell Netware

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection filter ID 11945.
For...

Tags:
13:16
ZDI-12-006 : Novell Netware XNFS.NLM NFS Rename Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-006 : Novell Netware XNFS.NLM NFS Rename Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-006
January 5, 2012

-- CVE ID:

-- CVSS:
10, AV:N/AC:L/Au:N/C:C/I:C/A:C

-- Affected Vendors:

Novell

-- Affected Products:

Novell Netware

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection filter ID 11936.
For...

Tags:
13:14
ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-005 : Apple Quicktime RLE BGRA Decoding Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-005
January 5, 2012

-- CVE ID:
CVE-2011-3248

-- CVSS:
7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P

-- Affected Vendors:

Apple

-- Affected Products:

Apple Quicktime

-- Vulnerability Details:
This vulnerability allows remote attackers to execute arbitrary code on
vulnerable installations of Apple QuickTime Player. User...

Tags:
13:13
ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-004 : Apple Quicktime JPEG2000 COD Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-004
January 5, 2012

-- CVE ID:
CVE-2011-3250

-- CVSS:
7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P

-- Affected Vendors:

Apple

-- Affected Products:

Apple Quicktime 7.3

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection filter ID...

Tags:
13:11
ZDI-12-003 : HP OpenView NNM webappmon.exe parameter Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-003 : HP OpenView NNM webappmon.exe parameter Remote Code
Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-003
January 5, 2012

-- CVE ID:
CVE-2011-3166

-- CVSS:
10, AV:N/AC:L/Au:N/C:C/I:C/A:C

-- Affected Vendors:

Hewlett-Packard

-- Affected Products:

Hewlett-Packard OpenView Network Node Manager

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this...

Tags:
13:10
ZDI-12-002 : HP OpenView NNM ov.dll _OVBuildPath Remote Code Execution Vulnerability
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-002 : HP OpenView NNM ov.dll _OVBuildPath Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-002
January 5, 2012

-- CVE ID:
CVE-2011-3167

-- CVSS:
10, AV:N/AC:L/Au:N/C:C/I:C/A:C

-- Affected Vendors:

Hewlett-Packard

-- Affected Products:

Hewlett-Packard OpenView Network Node Manager

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this...

Tags:
13:09
ZDI-12-001 : HP Managed Printing Administration img_id Multiple Vulnerabilities
» ‎ Full Disclosure

Posted by ZDI Disclosures on Jan 05
ZDI-12-001 : HP Managed Printing Administration img_id Multiple
Vulnerabilities
http://www.zerodayinitiative.com/advisories/ZDI-12-001
January 5, 2012

-- CVE ID:
CVE-2011-4169

-- CVSS:
9, AV:N/AC:L/Au:N/C:P/I:P/A:C

-- Affected Vendors:

Hewlett-Packard

-- Affected Products:

Hewlett-Packard Managed Printing Administration

-- TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability...

Tags:

12:01
LED cube is a little bit of kit, a lot of point-to-point soldering
» ‎ Hack a Day

[Craig Lindley] recently finished building his own RGB LED cube project. It’s made up of four layers of 4×4 LED grids, but you may notice that the framework that supports the structure is not the usual ratsnet of wires we’ve come to expect. They’re actually long, thin circuit boards. [Craig] grabbed the Rainbow Cube kit sold [...]
Tags: kit led cube craig craig-lindley cube-project grids rgb arduino hacks
11:01
osPID: the Open Source PID Controller
» ‎ Hack a Day

Need PID control in your next project? Perhaps this little beauty can help. It’s an Open Source PID controller that also follows the Open Hardware guidelines. [Brett Beauregard] based the project on the newly minted Arduino PID library which he wrote. In the video after the break [Brett] takes apart the device, walking through some of [...]
Tags: pid open source beauregard hardware-guidelines open-hardware little-beauty arduino hacks

11:00
Bugtraq: VertrigoServ 2.25 Cross-Site-Scripting vulnerability
» ‎ SecurityFocus Vulnerabilities

VertrigoServ 2.25 Cross-Site-Scripting vulnerability
Tags: vulnerability scripting vertrigoserv bugtraq
11:00
Bugtraq: SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities
» ‎ SecurityFocus Vulnerabilities

SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities
Tags: sqlitemanager multiple scripting bugtraq vulnerabilities

10:52
SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities
» ‎ Bugtraq

Posted by security on Jan 05
Advisory: SQLiteManager 1.2.4 Multiple Cross-Site-Scripting vulnerabilities
Advisory ID: INFOSERVE-ADV2011-12
Author: Stefan Schurtz
Contact: security () infoserve de
Affected Software: Successfully tested on SQLiteManager 1.2.4
Vendor URL: http://www.sqlitemanager.org/
Vendor Status: informed

==========================
Vulnerability Description...

Tags:
10:44
VertrigoServ 2.25 Cross-Site-Scripting vulnerability
» ‎ Bugtraq

Posted by security on Jan 05
Advisory: VertrigoServ 2.25 Cross-Site-Scripting vulnerability
Advisory ID: INFOSERVE-ADV2011-11
Author: Stefan Schurtz
Contact: security () infoserve de
Affected Software: Successfully tested on VertrigoServ 2.25
Vendor URL: http://vertrigo.sourceforge.net/
Vendor Status: informed

==========================
Vulnerability Description
==========================...

Tags:

10:01
Custom screensaver on the non-touch Kindle 4
» ‎ Hack a Day

[Kubbur87] put together a guide to replacing the Non-touch Kindle 4 screensavers with your own images. We’ve already seen a way to remove the Special Offers banners from the newest version of Kindle Hardware, this hack lets you use your own 600×800 Portable Network Graphics (.png) file instead of the images pushed to the device by [...]
Tags: custom screensaver kindle portable-network-graphics png-file custom-screensaver security hacks
9:01
Bang-banging your way to a perfect cake
» ‎ Hack a Day

[Rob Spanton’s] house is equipped with a rather cheap oven, which was discovered while his roommate tried using it to bake part of a wedding cake. If someone took a shower during the baking process, a large portion of unit’s gas pressure was diverted to the boiler, causing the oven to shut off completely. This [...]
Tags: bang-banging oven cake rob-spanton large-portion wedding-cake boiler cooking hacks

9:01
Bugtraq: SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
» ‎ SecurityFocus Vulnerabilities

SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
Tags: bugtraq vulnerabilities apache
9:00
Bugtraq: Ggb Guestbook - XSS Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Ggb Guestbook - XSS Vulnerabilities
Tags: xss guestbook ggb vulnerabilities

8:38
Ramnit Worm Stealing Facebook Account Passwords, E-mail Address & Bank Details
» ‎ Darknet

Oh look, another Facebook worm – this one seems pretty nasty and as usual it’s going for Facebook access details and then diving into banking credentials if it can find them. It’s mostly targeted at the UK though, worms of these type usually are geographically limited as they are targeting bank information – it’s...

Read the full post at darknet.org.uk

Tags: facebook worm bank read e-mail-address account-passwords bank-information malware

8:33
VLC media player v1.1.11 (.amr) Local Crash PoC
» ‎ Bugtraq

Posted by hapsec on Jan 05
#!/usr/bin/perl
##
# Exploit Title: VLC media player v1.1.11 (.amr) Local Crash PoC
# Date: 04.01.2012
# Author: Fabi () habsec (hapsec () gmail com)
# Software Link: http://sourceforge.net/projects/vlc/files/1.1.11/win32/vlc-1.1.11-win32.exe
# Version: 1.1.11
# Tested on: Windows 7 x86 English
#
# Description: Unhandled Access Violation Exception loading generated .amr file
# - 1.1.10 not affected!
#
##
#
#
#
system("title VLC...

Tags:
8:23
Ggb Guestbook - XSS Vulnerabilities
» ‎ Bugtraq

Posted by demonalex on Jan 05
Title: Ggb Guestbook - XSS Vulnerabilities

Software : Ggb Guestbook

Software Version : 0.3.1

Vendor: http://gelin.ru/soft/project/ggb/
http://code.google.com/p/ggbook/

Vulnerability Published : 2012-01-05

Vulnerability Update Time :

Status :

Impact : Medium

Bug Description :
Ggb Guestbook(version update : 0.3.1) is vulnerable to XSS.

Proof Of Concept :
1)url in action/add-submit.php , PoC:
POST...

Tags:
8:14
SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
» ‎ Bugtraq

Posted by SEC Consult Vulnerability Lab on Jan 05
SEC Consult Vulnerability Lab Security Advisory < 20120104-0 >
=======================================================================
title: Multiple critical vulnerabilities in Apache Struts2
product: Apache Struts2
* OpenSymphony XWork
* OpenSymphony OGNL
vulnerable version: 2.3.1 and below
fixed version: 2.3.1.1
impact: critical
homepage:...

Tags:

8:09
Sites Knocked Offline By OpenDNS Freeze On Google
» ‎ Packet Storm Security Headlines

Sites Knocked Offline By OpenDNS Freeze On Google
Tags: opendns offline knocked google
8:09
Man Convicted Of Murder Gets Retrial After Virus Eats Transcripts
» ‎ Packet Storm Security Headlines

Man Convicted Of Murder Gets Retrial After Virus Eats Transcripts
Tags: retrial gets convicted transcripts virus
8:09
Amazon Kindle Fire Browser Hacked For Your Android Pleasure
» ‎ Packet Storm Security Headlines

Amazon Kindle Fire Browser Hacked For Your Android Pleasure
Tags: amazon kindle fire amazon-kindle pleasure

8:04
NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
» ‎ Bugtraq

Posted by Research () NGSSecure on Jan 05
=======
Summary
=======
Name: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass
Vulnerability
Release Date: 5 January 2012
Reference: NGS00106
Discoverer: David Spencer <david.spencer () ngssecure com>
Vendor: Oracle
Vendor Reference:
Systems Affected: Oracle GlassFish Server 2.1 and 3
Risk: High
Status: Published

========
TimeLine
========
Discovered: 26 August 2011
Released: 26...

Tags:

8:01
Reading NAND flash with an Arduino
» ‎ Hack a Day

[HC] took a gander around the Googles and saw a number of people trying to read NAND flash chips with an Arduino. It’s an interesting problem; at 16 Megahertz, [HC] is looking at about 60 nanoseconds per instruction cycle, and flash chips normally operate around 20 ns. He got the build working, and was able [...]
Tags: arduino gander nand nand-flash-chips googles nanoseconds hacks

8:00
Bugtraq: Revised IETF I-D: Advice on IPv6 RA-Guard Implementation
» ‎ SecurityFocus Vulnerabilities

Revised IETF I-D: Advice on IPv6 RA-Guard Implementation
Tags: IPv6 implementation
8:00
Bugtraq: HServer webserver - Directory Traversal Vulnerability
» ‎ SecurityFocus Vulnerabilities

HServer webserver - Directory Traversal Vulnerability
Tags: directory hserver webserver directory-traversal-vulnerability
8:00
Bugtraq: NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
» ‎ SecurityFocus Vulnerabilities

NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
Tags: advisory technical ngs code-execution cms
8:00
Bugtraq: NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

NGS00106 Technical Advisory: Increased exploitation of Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
Tags: advisory technical ngs glassfish server-administration vulnerability

7:53
NGS00109 Technical Advisory: Remote Code Execution in ImpressPages CMS
» ‎ Bugtraq

Posted by Research () NGSSecure on Jan 05
=======
Summary
=======
Name: Remote code execution in ImpressPages CMS
Release Date: 5 January 2012
Reference: NGS00109
Discoverer: David Middlehurst <david.middlehurst () ngssecure com>
Vendor: ImpressPages
Vendor Reference:
Systems Affected: ImpressPages CMS 1.0.12
Risk: High
Status: Published

========
TimeLine
========
Discovered: 28 August 2011
Released: 28 August 2011
Approved: 28 August 2011
Reported: 5 September 2011
Fixed: 21...

Tags:
7:43
HServer webserver - Directory Traversal Vulnerability
» ‎ Bugtraq

Posted by demonalex on Jan 05
Title: HServer webserver - Directory Traversal Vulnerability

Software : HServer webserver

Software Version : 0.1.1

Vendor: http://www.luizpicanco.com/index.php?s=hserver
http://code.google.com/p/hserver/

Vulnerability Published : 2012-01-05

Vulnerability Update Time :

Status :

Impact : High

Bug Description :
HServer webserver(version update : 0.1.1) is a tiny Web server written in Java, it is vulnerable with Directory
Traversal...

Tags:
7:35
Revised IETF I-D: Advice on IPv6 RA-Guard Implementation
» ‎ Bugtraq

Posted by Fernando Gont on Jan 05
Folks,

We've published the IETF I-D "Implementation Advice for IPv6 Router
Advertisement Guard (RA-Guard)". It is available at:
<http://www.ietf.org/id/draft-gont-v6ops-ra-guard-implementation-00.txt>

This I-D is based on our original I-D
draft-gont-v6ops-ra-guard-evasion-01, but now focuses on providing
advice to RA-Guard implementations, rather than on the evasion
techniques that have been found effective against most...

Tags:
7:25
[ GLSA 201201-01 ] phpMyAdmin: Multiple vulnerabilities
» ‎ Bugtraq

Posted by Tim Sammut on Jan 05
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Gentoo Linux Security Advisory GLSA 201201-01
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
http://security.gentoo.org/
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

Severity: High
Title: phpMyAdmin: Multiple vulnerabilities
Date: January 04,...

Tags:

6:20
Milling ice molds for craft cocktails
» ‎ Hack a Day

Want some fancy ice for your next cocktail party? You can try to find spherical ice-cube trays but you won’t get the kind of results seen here. It turns out the trick to this isn’t how you freeze the water, it’s how you melt the ice. [Brendan O'Connor] started this project after seeing an ice [...]
Tags: ice craft milling brendan-oconnor cocktail-party o-connor molds cnc hacks

3:37
SEC Consult SA-20120104-0 :: Multiple critical vulnerabilities in Apache Struts2
» ‎ Full Disclosure

Posted by SEC Consult Vulnerability Lab on Jan 05
SEC Consult Vulnerability Lab Security Advisory < 20120104-0 >
=======================================================================
title: Multiple critical vulnerabilities in Apache Struts2
product: Apache Struts2
* OpenSymphony XWork
* OpenSymphony OGNL
vulnerable version: 2.3.1 and below
fixed version: 2.3.1.1
impact: critical
homepage:...

Tags:

1:49
Secunia Security Advisory 47379
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Apache has acknowledged some weaknesses and vulnerabilities in Apache Geronimo, which can be exploited by malicious, local users to disclose sensitive information and bypass certain security restrictions or cause a DoS (Denial of Service) and by malicious people to disclose potentially sensitive information, bypass certain security restrictions, conduct cross-site scripting attacks, and cause a DoS (Denial of Service).
Tags: advisory secunia security geronimo apache-geronimo denial-of-service security-restrictions
1:49
Secunia Security Advisory 47419
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Multiple vulnerabilities have been discovered in tinyguestbook, which can be exploited by malicious people to conduct script insertion and SQL injection attacks.
Tags: advisory secunia security sql-injection security-advisory
1:49
Secunia Security Advisory 47421
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - sec4it has discovered multiple vulnerabilities in BIGACE Web CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security web-cms security-advisory
1:48
Secunia Security Advisory 47380
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Debian has issued an update for ffmpeg. This fixes multiple vulnerabilities, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise an application using the library.
Tags: advisory secunia security denial-of-service security-advisory
1:48
Secunia Security Advisory 47371
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - Aditya Modha and Samir Shah discovered a vulnerability in WordPress, which can be exploited by malicious people to conduct cross-site scripting attacks.
Tags: advisory secunia security samir-shah aditya
1:48
Secunia Security Advisory 47370
» ‎ Packet Storm Security Advisories

Secunia Security Advisory - A vulnerability has been discovered in the Simple File Upload module for Joomla!, which can be exploited by malicious people to compromise a vulnerable system.
Tags: advisory secunia security security-advisory file-upload

1:44
Sophos Small Business Edition with Control Center v 4 - automatic update to Sophos Anti-Virus v 9.7 in April 2012
» ‎ Sophos product advisories

If you are using Sophos Small Business Edition with Control Center v 4, you will receive an automatic update to Sophos Anti-Virus v 9.7 in April 2012.
Tags: small sophos business business-edition anti-virus small-business

0:00
Vuln: OpenSSL Multiple Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

OpenSSL Multiple Vulnerabilities
Tags: multiple vulnerabilities
0:00
Vuln: FreeType Font Document Multiple Memory Corruption Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

FreeType Font Document Multiple Memory Corruption Vulnerabilities
Tags: multiple corruption memory memory-corruption
0:00
Vuln: Apple iOS FreeType CVE-2011-3439 Multiple Memory Corruption Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

Apple iOS FreeType CVE-2011-3439 Multiple Memory Corruption Vulnerabilities
Tags: multiple memory freetype apple-ios memory-corruption ios
0:00
Vuln: Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

Oracle GlassFish Server Administration Console Remote Authentication Bypass Vulnerability
Tags: server glassfish oracle server-administration vulnerability
0:00
Vuln: FreeBSD 'telnetd' Daemon Remote Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

FreeBSD 'telnetd' Daemon Remote Buffer Overflow Vulnerability
Tags: telnetd daemon freebsd buffer-overflow-vulnerability remote-buffer-overflow-vulnerability remote-buffer-overflow
0:00
Vuln: Mozilla Firefox/Thunderbird/SeaMonkey SVG Animation Elements Information Disclosure Vulnerability
» ‎ SecurityFocus Vulnerabilities

Mozilla Firefox/Thunderbird/SeaMonkey SVG Animation Elements Information Disclosure Vulnerability
Tags: mozilla firefox thunderbird information-disclosure-vulnerability svg-animation mozilla-firefox
0:00
Vuln: FFmpeg Multiple Unspecified Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

FFmpeg Multiple Unspecified Vulnerabilities
Tags: ffmpeg multiple unspecified vulnerabilities
0:00
Vuln: FFmpeg Prior to 0.7.8 and 0.8.7 Multiple Remote Code Execution Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

FFmpeg Prior to 0.7.8 and 0.8.7 Multiple Remote Code Execution Vulnerabilities
Tags: ffmpeg multiple remote code-execution
0:00
Vuln: FFmpeg libavcodec 'vmd decode()' Heap Based Buffer Overflow Vulnerability
» ‎ SecurityFocus Vulnerabilities

FFmpeg libavcodec 'vmd decode()' Heap Based Buffer Overflow Vulnerability
Tags: ffmpeg libavcodec vmd buffer-overflow-vulnerability based-buffer-overflow
0:00
Vuln: ImpressPages CMS 'actions.php' Remote Code Execution Vulnerability
» ‎ SecurityFocus Vulnerabilities

ImpressPages CMS 'actions.php' Remote Code Execution Vulnerability
Tags: php remote cms code-execution vulnerability
0:00
Vuln: phpMyAdmin Prior to 3.4.8 Multiple Cross Site Scripting Vulnerabilities
» ‎ SecurityFocus Vulnerabilities

phpMyAdmin Prior to 3.4.8 Multiple Cross Site Scripting Vulnerabilities
Tags: cross multiple phpmyadmin
0:00
Vuln: phpMyAdmin Bookmark Security Bypass Vulnerability
» ‎ SecurityFocus Vulnerabilities

phpMyAdmin Bookmark Security Bypass Vulnerability
Tags: vulnerability phpmyadmin
0:00
Vuln: phpMyAdmin Configuration File PHP Code Injection Vulnerability
» ‎ SecurityFocus Vulnerabilities

phpMyAdmin Configuration File PHP Code Injection Vulnerability
Tags: configuration phpmyadmin file file-php configuration-file vulnerability

← January 4 (167 items) January 6 (193 items) →

jetlib.sec » January 5, 2012

Feeds

Tags: advisory secunia security malicious-users security-advisory

Tags: advisory secunia security mavituna security-advisory

Tags: advisory secunia security malicious-users security-restrictions

Tags: advisory secunia security denial-of-service ffmpeg s-system

Tags: advisory secunia security s-system security-advisory

Tags: advisory secunia security denial-of-service malicious-users security-restrictions

Tags: advisory secunia security denial-of-service s-system

Tags: advisory secunia security security-advisory vulnerabilities

Tags: secunia security-advisory vulnerability

Tags: advisory secunia security stefan-schurtz security-advisory vulnerability

Tags: advisory secunia security vulnerability-research webmail-client malicious-users

Tags: advisory secunia security science-lab security-advisory

Tags: advisory secunia security security-advisory vulnerability

Tags: advisory secunia security security-advisory ubuntu

Tags: advisory secunia security denial-of-service security-advisory

Tags: advisory secunia security julio-potier potier security-advisory

Tags: denial-of-service malicious-users secunia

Tags: advisory secunia security malicious-users security-restrictions

Tags: advisory secunia security security-advisory vulnerability

Tags: advisory secunia security suse s-system security-advisory

Tags: advisory secunia security malicious-users security-advisory

Tags: advisory secunia security suse session-hijacking security-advisory

Tags: vulnerability retina audit gauntlet-firewall shell-scripts remote-shell

Tags: code reader adobe overflow-code integer-overflow code-execution

Tags: novell client groupwise novell-groupwise groupwise-client code-execution

Tags: novell code groupwise novell-groupwise code-execution safer-use

Tags: code reader adobe d-tiff-resource overflow-code code-execution buffer-overflow

Tags: steals facebook worm passwords

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

Tags: packet iptables linux network-address-translation iptables-firewall transparent-proxying

Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

Tags: keyrec wirouter fastweb alice-agpf telecom-italia-alice independent-piece

Tags: userspace conntrack system commandline-interface packet-inspection iptables

Tags: userspace conntrack system commandline-interface packet-inspection iptables

Tags: userspace conntrack system commandline-interface packet-inspection iptables

Tags: stev sniffer org tcp-connections statics user-interface

Tags: stev sniffer org tcp-connections statics user-interface

Tags: stev sniffer org tcp-connections statics user-interface

Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

Tags: gentoo security linux gentoo-linux-security code-versions security-advisory

Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

Tags: user ubuntu security phillip-langlois steve-manzuik application-crash denial-of-service arbitrary-code

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: day zero vulnerability netware-authentication novell-netware stack-buffer

Tags: sqlitemanager cross site

Tags: sqlitemanager cross site

Tags: sqlitemanager cross site

Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

Tags: ubuntu notice security wen-nienhuys clement-lecigne peter-huewe hfs-filesystem notice-1319 kernel-module

Tags: cross vertrigoserv site vulnerability

Tags: cross vertrigoserv site vulnerability

Tags: cross vertrigoserv site vulnerability

Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

Tags: day zero application apple-quicktime apple-quicktime-player code-execution buffer-overflow

Tags: cross guestbook ggb vulnerability

Tags: cross guestbook ggb vulnerability

Tags: cross guestbook ggb vulnerability

Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

Tags: ubuntu notice security clement-lecigne peter-huewe hfs-filesystem linux-kernel information-leak

Tags: day zero initiative apple-quicktime zero-day jpeg2000

Tags: day zero initiative apple-quicktime zero-day jpeg2000

Tags: day zero initiative apple-quicktime zero-day jpeg2000

Tags: day zero initiative manager.-authentication network-node-manager stack-overflow target-service