LilHTTP Source Code Disclosure/Download
This Metasploit module exploits a source code disclosure/download vulnerability in versions 2.2c and prior of LilHTTP.
Source: LilHTTP Source Code Disclosure/Download
Re: Computer name should match with your real identity?
Posted by Guy on Apr 29System admins typically aren't responsible for policy creation
depending on the size of the organization. Was the request made due...
BackBox Linux 2.01 released
BackBox Linux 2.01 released
The BackBox team is proud to announce the release 2.01 of BackBox Linux.The new release include features such as Ubuntu 11.04,...
AST-2011-005: File Descriptor Resource Exhaustion
Posted by Asterisk Security Team on Apr 21 Asterisk Project...
www.si-wifi.org XSS
shellc0de has discovered a vulnerability in www.si-wifi.org, which could be exploited by malicious people to conduct XSS attacks.
Source: www.si-wifi.org XSS
anz.groups.adobe.com XSS
Sony has discovered a vulnerability in anz.groups.adobe.com, which could be exploited by malicious people to conduct XSS attacks.
Source: anz.groups.adobe.com XSS
FYI: Apache httpd NoFollowSymLink follows symlinks feature
Posted by halfdog on Jun 24For those, who did not already know:
Due to specification, apache follows symlinks even when -FollowSymLinks
is set, when the data...
Advanced Malware Analysis Training Session 10 – (Part 1) Reversing & Decrypting Communications of...
Here is the quick update on this month’s Local Security meet (SX/Null/G4H/owasp) and our advanced malware training session on (Part 1) Reversing &...
Windows Profile System
Windows Profile System is a fake security application from from the same family as: Windows Precautions Center, Windows Safeguard Utility, Windows Repairing System, Windows...
xtcModified 1.05 FCKeditor Shell Upload
xtcModified version 1.05 (FCKeditor) arbitrary shell upload exploit.
Source: xtcModified 1.05 FCKeditor Shell Upload