ia

Memorial Web Site Script Password Reset / Insecure Cookie

Memorial Web Site Script suffers from password reset and insecure cookie handling vulnerabilities.





ia

Debian Security Advisory 4584-1

Debian Linux Security Advisory 4584-1 - Two vulnerabilities were discovered in spamassassin, a Perl-based spam filter using text analysis.






ia

Enhanced Multimedia Router 3.0.4.27 Cross Site Request Forgery

Enhanced Multimedia Router version 3.0.4.27 suffers from a cross site request forgery vulnerability.




ia

Maian Support Helpdesk 4.3 Cross Site Request Forgery

Maian Support Helpdesk version 4.3 suffers from a cross site request forgery vulnerability.




ia

Integria IMS 5.0.86 Arbitrary File Upload

Integria IMS version 5.0.86 suffers from an arbitrary file upload vulnerability that allows for remote command execution.









ia

Russian Loses Wife In Poker Game






ia

MINIX 3.3.0 Local Denial Of Service

MINIX version 3.3.0 suffers from multiple local denial of service vulnerabilities.




ia

MINIX 3.3.0 Denial Of Service

MINIX versions 3.3.0 and below remote TCP/IP stack denial of service exploit that leverages a malformed TCP option.







ia

Intel Patches High-Severity Flaws In Media SDK, Mini PC




ia

RIAA Wants Infamous File-Sharer To Campaign Against Piracy






ia

vReliable Datagram Sockets (RDS) rds_page_copy_user Privilege Escalation

This Metasploit module exploits a vulnerability in the rds_page_copy_user function in net/rds/page.c (RDS) in Linux kernel versions 2.6.30 to 2.6.36-rc8 to execute code as root (CVE-2010-3904). This module has been tested successfully on Fedora 13 (i686) kernel version 2.6.33.3-85.fc13.i686.PAE and Ubuntu 10.04 (x86_64) with kernel version 2.6.32-21-generic.











ia

Cartoon Network Hacked Worldwide To Show Brazilian Stripper Videos






ia

Brazilian Firm Exposes Personal Details Of Thousands Of Soccer Fans




ia

.NET Instrumentation Via MSIL Bytecode Injection

Whitepaper from Phrack called .NET Instrumentation via MSIL bytecode injection.




ia

Debian Security Advisory 4577-1

Debian Linux Security Advisory 4577-1 - Tim Dusterhus discovered that haproxy, a TCP/HTTP reverse proxy, did not properly sanitize HTTP headers when converting from HTTP/2 to HTTP/1. This would allow a remote user to perform CRLF injections.






ia

Reminder: We're Still Bad At Securing Industrial Controllers




ia

Half Of Industrial Control System Networks Have Faced Cyber Attacks, Say Security Researchers




ia

Denial Of Service Event Impacted U.S. Power Utility Last Month