SecuriTeam

Checkpoint VPN-1 PAT Information Disclosure

Tue, 18 Nov 2008 19:37 GMT

By sending crafted packets to ports on the Checkpoint Firewall which are mapped by port address translation (PAT) to ports on internal devices, information about the internal network may be disclos...

Make your website safer. Use external penetration testing service. First report ready in one hour!

VMware Emulation Flaw x64 Guest Privilege Escalation (IRET)

Tue, 11 Nov 2008 14:01 GMT

By exploiting either of the VMware flaws described in this document, user-mode code executing in a virtual machine may gain kernel privileges within the virtual machine, dependent upon the guest op...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Openfire Jabber-Server Multiple Vulnerabilities

Tue, 11 Nov 2008 12:44 GMT

The jabber server Openfire contains several serious vulnerabilities. Depending on the particular runtime environment these issues can potentially even be used by an attacker to execute code on oper...

Make your website safer. Use external penetration testing service. First report ready in one hour!

ClamAV get_unicode_name() Off-By-One Buffer Overflow

Tue, 11 Nov 2008 08:52 GMT

"Clam AntiVirus is an open source (GPL) anti-virus toolkit for UNIX, designed especially for e-mail scanning on mail gateways. It provides a number of utilities including a flexible and scalable mu...

Make your website safer. Use external penetration testing service. First report ready in one hour!

2WIRE DSL Router (xslt) Denial of Service Vulnerability

Sun, 09 Nov 2008 11:29 GMT

The DSL connection of some 2wire routers is droped when a request to /xslt with the value %X where X is any non alfa numeric character.

Make your website safer. Use external penetration testing service. First report ready in one hour!

MP3 TAG Fuzzer

Tue, 18 Nov 2008 19:43 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

PDFuzzer - PDF File Standard Fuzzer

Sun, 09 Nov 2008 11:31 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

Miranda - UPNP Administration and Audit Tool

Sun, 09 Nov 2008 11:21 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

CVS Fuzzer

Sun, 02 Nov 2008 14:18 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

SSHFuZZ - Perl Based SSH Fuzzer

Wed, 29 Oct 2008 09:31 GMT

Make your website safer. Use external penetration testing service. First report ready in one hour!

VLC Media Player RealText Processing Stack Overflow Vulnerability

Sun, 09 Nov 2008 11:35 GMT

The VLC media player contains a stack overflow vulnerability while parsing malformed RealText (rt) subtitle files. The vulnerability can be trivially exploited by a (remote) attacker to execute arb...

Make your website safer. Use external penetration testing service. First report ready in one hour!

LibSPF2 DNS TXT Record Parsing Bug

Sun, 02 Nov 2008 15:01 GMT

A relatively common bug parsing TXT records delivered over DNS, dating at least back to 2002 in Sendmail 8.2.0 and almost certainly much earlier, has been found in LibSPF2, a library frequently use...

Make your website safer. Use external penetration testing service. First report ready in one hour!

GNU Enscript "setfilename" Special Escape Buffer Overflow

Sun, 02 Nov 2008 14:53 GMT

"GNU Enscript is a free replacement for the Adobe's enscript program. Enscript converts ASCII files to PostScript and spools generated PostScript output to the specified printer or leaves it to fil...

Make your website safer. Use external penetration testing service. First report ready in one hour!

File-Find-Object Format String Vulnerability

Mon, 27 Oct 2008 17:58 GMT

File::Find::Object is "an object-oriented and iterative replacement for File::Find. I.e: it is a module for traversing a directory tree, and finding all the files contained within it programaticall...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Veritas Storage Foundation Arbitrary File Read Vulnerability

Thu, 23 Oct 2008 17:02 GMT

Veritas Storage Foundation 5.0 from Symantec provides "a complete solution for heterogeneous online storage management. Based on the industry-leading Veritas Volume Manager and Veritas File System,...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Microsoft Windows Active Directory LDAP Server Information Disclosure Vulnerability

Tue, 18 Nov 2008 19:40 GMT

A vulnerability in Microsoft's Windows Active Directory's LDAP server allows remote attackers to discover which usernames are valid and which are not.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Vulnerabilities in Microsoft XML Core Services Allow Code Execution (MS08-069)

Wed, 12 Nov 2008 18:03 GMT

This security update resolves several vulnerabilities in Microsoft XML Core Services. The most severe vulnerability could allow remote code execution if a user viewed a specially crafted Web page u...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Vulnerability in SMB Allows Code Execution (MS08-068)

Wed, 12 Nov 2008 17:51 GMT

This security update resolves a publicly disclosed vulnerability in Microsoft Server Message Block (SMB) Protocol. The vulnerability could allow remote code execution on affected systems. An attack...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Multiple Vendor NOS Microsystems getPlus Downloader Stack Buffer Overflow Vulnerability

Sun, 09 Nov 2008 12:28 GMT

The getPlus Download Manager is "a software management tool. It is used to download, install, and update other software through the browser. The getPlus Download Manager consists of an ActiveX cont...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Orb Media Server Directory Traversal

Sun, 09 Nov 2008 12:24 GMT

Orb Networks' Orb media server is vulnerable to directory traversal attacks. Users can leverage specially crafted GET requests to read arbitrary files.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Opera file:// Overflow

Tue, 18 Nov 2008 19:49 GMT

A vulnerability in Opera's browser allows attackers that can inject and open an HTML file to overflow an internal buffer used by the 'file://' URL interpreter and cause it to execute arbitrary code.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Stack-Based Buffer Overflow in the Network Manager of Castle Rock Computing (SNMPc)

Wed, 12 Nov 2008 20:51 GMT

Stack-based buffer overflow in the Network Manager in Castle Rock Computing SNMPc 7.1 and earlier allows remote attackers to cause a denial of service (crash) or execute arbitrary code via a long c...

Make your website safer. Use external penetration testing service. First report ready in one hour!

PacketTrap TFTPD DoS

Wed, 29 Oct 2008 09:24 GMT

A vulnerability in PacketTrap's TFTPD allows remote attackers to cause the TFTP server to fail by sending it a pipe (|) character as the filename that is being uploaded.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Vulnerability in Server Service Allows Code Execution (MS08-067, PoC)

Fri, 24 Oct 2008 19:15 GMT

The following exploit code will simulate the MS08-067 vulnerability and cause the Server service to fail on vulnerable Windows systems.

Make your website safer. Use external penetration testing service. First report ready in one hour!

Microsoft Windows AFD.sys Privilege Escalation (Kartoffel Plugin, Exploit, MS08-066)

Thu, 16 Oct 2008 17:29 GMT

Kartoffel is a extensible command-line tool developed with the aim of helping developers to test the security and the reliability of a driver. The following exploit code will use Kartoffel to explo...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Hacking SOHO Routers

Wed, 12 Nov 2008 17:54 GMT

The purpose of this paper is to outline the security measures being taken by vendors to prevent such attacks in their home routing products, what those security measures accomplish, and where they ...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Reflective Dll Injection

Sun, 02 Nov 2008 12:10 GMT

Reflective DLL injection is a library injection technique in which the concept of reflective programming is employed to perform the loading of a library from memory into a host process. As such the...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Achieving Persistent HTML Injection via SNMP on Embedded Devices

Thu, 23 Oct 2008 16:49 GMT

A new approach to introducing HTML and/or JavaScript vulnerabilities into devices has been found, this new approach utilizes SNMP write capabilities to inject the malicious content into the device,...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Lateral SQL Injection: a New Class of Vulnerability in Oracle

Sun, 27 Apr 2008 14:27 GMT

A new class of vulnerabilities have been discovered in Oracle, these vulnerabilities can be exploited through the use of Oracle's ability to allow users to manipluate the way certain internal funct...

Make your website safer. Use external penetration testing service. First report ready in one hour!

Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)

Wed, 09 Apr 2008 16:37 GMT

The Windows DNS stub resolver is a Windows service used by Windows desktop software to resolve DNS names into IP addresses. The DNS stub resolver forwards DNS queries to the DNS server configured f...

Make your website safer. Use external penetration testing service. First report ready in one hour!