SecuriTeam

Qemu and KVM VNC Server Remote DoS

Wed, 24 Dec 2008 16:03 GMT

The VNC server of Qemu and KVM virtualization solutions are vulnerable to a remote DoS, when specially crafted packets are received by the host VNC server causing an infinite loop.

Make your website safer. Use external penetration testing service. First report ready in one hour!

WiFi Router COMTREND Multiple Vulnerabilities

Wed, 24 Dec 2008 15:59 GMT

The COMTREND CT-536 is an 802.11g (54Mbps) wireless and wired Local Area Network (WLAN) ADSL router. Four 10/100 Base-T Ethernet and single USB ports provide wired LAN connectivity with an integrat...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Firefox Cross-Domain Text Theft

Sun, 21 Dec 2008 15:46 GMT

A vulnerability in the way Firefox parses Javascript code (through a src tag) without properly restricting it to the same domain allows attackers to access information that is outside their domain ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Fujitsu-Siemens WebTransactions Command Injection Vulnerability

Sun, 21 Dec 2008 15:41 GMT

With WebTransactions openSEAS provides "a product which allows approved host applications to be used in new business processes and modern application scenarios. WebTransactions provides all possibi...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Aruba Mobility Controller Malformed EAP Frame DoS Vulnerability

Sun, 14 Dec 2008 14:08 GMT

A Denial of Service (DoS) vulnerability was discovered during standard bug reporting procedures in the Aruba Mobility Controller. A malformed EAP frame causes a process crash on the Aruba Mobility ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

FSpy - Linux Filesystem Activity Monitoring

Wed, 31 Dec 2008 12:04 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

telnetrecon - Telnet Recon

Tue, 30 Dec 2008 16:42 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

Zerowine Sandbox

Tue, 30 Dec 2008 15:54 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

JPEG Fuzzer

Mon, 15 Dec 2008 11:22 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

VNC Server Fuzzer

Tue, 02 Dec 2008 21:04 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

PHP gd Library imageRotate() Function Information Leak Vulnerability

Wed, 31 Dec 2008 17:51 GMT

PHP is a popular web programming language which is normally used as a script engine in the server side. PHP 5 which is compiled with gd library, includes a function called imageRotate() for rotatin...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Roundcubemail PHP Arbitrary Code Injection

Wed, 24 Dec 2008 16:29 GMT

Roundcube Webmail is a browser-based IMAP client that uses "chuggnutt.com HTML to Plain Text Conversion" library to convert HTML text to plain text, this library uses the preg_replace PHP function ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

PHP mbstring Buffer Overflow Vulnerability

Sun, 21 Dec 2008 15:58 GMT

PHP is "a scripting language extensively used in web application development. The package contains a number of language extensions aside from the language core".

Make your website safer. Use external penetration testing service. First report ready in one hour!

Sun Solaris SIOCGTUNPARAM IOCTL Kernel NULL Pointer Dereference

Sun, 21 Dec 2008 15:49 GMT

The kernel of Solaris contains a vulnerability in the code that handles SIOCGTUNPARAM IOCTL requests. Exploitation of this vulnerability can result in:1) Local denial of service attacks (system cra...

Make your website safer. Use external penetration testing service. First report ready in one hour!

PHP APC Vulnerable to Local Attacks

Sun, 21 Dec 2008 15:36 GMT

PHP APC is an opcode cache for PHP, or, as the developers say: "APC is a free, open, and robust framework for caching and optimizing PHP intermediate code." A cross site scripting issue which comes...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability

Wed, 31 Dec 2008 17:46 GMT

"Trend Micro HouseCall is an application for checking whether your computer has been infected by viruses, spyware, or other malware. HouseCall performs additional security checks to identify and fi...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Citrix Broadcast Server login.asp SQL Injection

Wed, 31 Dec 2008 17:43 GMT

The Citrix Broadcast Server administrative login page is vulnerable to trivial SQL injections via the txtUID HTTP POST parameter. An attacker could leverage this flaw to obtain unauthorized access...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Trend Micro HouseCall ActiveX Control Arbitrary Code Execution

Wed, 24 Dec 2008 16:06 GMT

"Trend Micro's HouseCall is an application for checking whether your computer has been infected by viruses, spyware, or other malware. HouseCall performs additional security checks to identify and ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

PGP Desktop PGPwded.sys Denial of Service

Tue, 23 Dec 2008 16:44 GMT

PGP Desktop 's PGPweded.sys Driver does not sanitize user supplied input (IOCTL) and this lead to a Driver Collapse that propagates on the system with a BSOD.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Microsoft Hierarchical FlexGrid Control Integer Overflows (MS08-070)

Sun, 14 Dec 2008 10:31 GMT

Secunia Research has discovered some vulnerabilities in Microsoft Hierarchical FlexGrid Control bundled with various products, which can be exploited by malicious people to compromise a user's system.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Microsoft Internet Explorer XML Buffer Overflow (Exploit)

Sun, 28 Dec 2008 07:45 GMT

The following exploit utilizes the XML vulnerability in Internet Explorer to execute arbitrary code under Vista.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Opera file:// Overflow

Tue, 18 Nov 2008 19:49 GMT

A vulnerability in Opera's browser allows attackers that can inject and open an HTML file to overflow an internal buffer used by the 'file://' URL interpreter and cause it to execute arbitrary code.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Stack-Based Buffer Overflow in the Network Manager of Castle Rock Computing (SNMPc)

Wed, 12 Nov 2008 20:51 GMT

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long c...

Make your website safer. Use external penetration testing service. First report ready in one hour!

PacketTrap TFTPD DoS

Wed, 29 Oct 2008 09:24 GMT

A vulnerability in PacketTrap's TFTPD allows remote attackers to cause the TFTP server to fail by sending it a pipe (|) character as the filename that is being uploaded.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Vulnerability in Server Service Allows Code Execution (MS08-067, PoC)

Fri, 24 Oct 2008 19:15 GMT

The following exploit code will simulate the MS08-067 vulnerability and cause the Server service to fail on vulnerable Windows systems.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Frame Pointer Overwrite Demonstration (Linux)

Wed, 03 Dec 2008 16:24 GMT

This paper assumes you have read the proper background information and/or technical details about the above subject. If not, please do so, because this read does not include key concepts but instea...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Format String Exploitation Demonstration (Linux)

Tue, 02 Dec 2008 16:22 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

Hacking SOHO Routers

Wed, 12 Nov 2008 17:54 GMT

The purpose of this paper is to outline the security measures being taken by vendors to prevent such attacks in their home routing products, what those security measures accomplish, and where they ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Reflective Dll Injection

Sun, 02 Nov 2008 12:10 GMT

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Achieving Persistent HTML Injection via SNMP on Embedded Devices

Thu, 23 Oct 2008 16:49 GMT

A new approach to introducing HTML and/or JavaScript vulnerabilities into devices has been found, this new approach utilizes SNMP write capabilities to inject the malicious content into the device,...

Make your website safer. Use external penetration testing service. First report ready in one hour!