Computer Security and Information Security

Computer Security Vulnerabilities


[EN] securityvulns.ru
no-pyccku


08.02.2010
Detailed
 Ipswitch IMail multiple security vulnerabilities
document Weak permissions for registry and installation folder. Passwords are stored in readable location with reversible encryption.
 Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
document PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc.
 libmikmod multiple buffer overflows
document Multiple overflows on Impulse Tracker and Ultratracker format parsing.
 Gnome Nautilus code execution
document HTML script is executed in local machine context on HTML prveiew.
  


06.02.2010
Detailed
7!Samba directory traversal
document It's possible to access any directories in the sysmte by symbolic links.
  


05.02.2010
Detailed
 chrony multiple security vulnerabilities
document Traffic amplification, resources exhaustion.
 Apple Safari DoS
document Memory corruption on Javascript processing.
  


04.02.2010
Detailed
8!Microsoft Internet Explorer information leak
document It's possible to retrieve any file from client computer via URLMON and Dynamic OBJECT tag.
6!squid proxy server DoS
document Crash on authentication, crash on DNS reply parsing.
6!maildrop privilege escalation
   
6!jBCrypt library cryptographic vulnerability
document non-ASCII characters are converted to '?' befor hash calculation.
  

Site news
3proxy tiny freeware proxy 0.6 released for Windows, Unix, Linux, MacOS X / iPhone New!
Article: Reverse Engineering with LD_PRELOAD
Archive by months:
*  2010/2*  2010/1
*  2009/12*  2009/11
*  2009/10*  2009/9
*  2009/8*  2009/7
*  2009/6*  2009/5
*  2009/4*  2009/3
*  2009/2*  2009/1
*  2008/12*  2008/11
*  2008/10*  2008/9
*  2008/8*  2008/7
*  2008/6*  2008/5
*  2008/4*  2008/3
*  2008/2*  2008/1
*  2007/12*  2007/11
*  2007/10*  2007/9
*  2007/8*  2007/7
*  2007/6*  2007/5
*  2007/4*  2007/3
*  2007/2*  2007/1
*  2006/12*  2006/11
*  2006/10*  2006/9
*  2006/8*  2006/7
*  2006/6*  2006/5
*  2006/4*  2006/3
*  2006/2*  2006/1
*  2005/12*  2005/11
*  2005/10*  2005/9
*  2005/8*  2005/7
*  2005/6*  2005/5
*  2005/4*  2005/3
*  2005/2*  2005/1
*  2004/12*  2004/11
*  2004/10*  2004/9
*  2004/8*  2004/7
*  2004/6*  2004/5
*  2004/4*  2004/3
*  2004/2*  2004/1

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod
Share your news!
You may send information about any vulnerabilities to vuln@security.nnov.ru

Subscribe
Security news RSS/XML feed
Subscribtion options and news export - have SecurityVulns information on your site (no site script support required)!

Main forum:
Indexing every IP on the Internet
helping people
help to decoding string
Vulnerabilities on Linux Games
what are these numbers

3proxy forum:
can connect only from localhost
Config reloading pause
cant connect to another proxy
multiple IPs proxy
Windows Authentication

Links
Remove spyware with Exterminate It!
Inj3ct0r exploit database
Inj3ct0r.com



Rating@Mail.ru