Mod Security is an intrusion detection and prevention engine for Web applications which operates as an Apache module or Java Servlet filter. Its purpose is to increase Web application security, protecting Web applications from known and unknown attacks. It is flexible and easy to configure, monitors HTTP traffic (including POST payload), enhances logging, performs automatic built-in checks, and simultaneously allows administrators to create custom rules for their individual needs.

continue reading.....

The PWDumpX tool allows a user with administrative privileges to retrieve the encrypted password hashes and LSA secrets from a Windows system. This tool can be used on the local system or on one or more remote systems.

continue reading.....

Tiny utility for supplying user defined environmental variables at a defined sized. Used in the Aid of auditing binaries that rely on environmental variables.

continue reading.....

Wisi Portal suffers from SQL injection vulnerabilities in multiple asp files.

continue reading.....

Siap CMS suffers from a SQL injection vulnerability in login.asp.

continue reading.....

PHP-Nuke Mermaid module version 1.2 remote file inclusion exploit that makes use of formdisp.php.

continue reading.....

The Mambo jambook component suffers from a HTML injection vulnerability via the Entry field.

continue reading.....

A vulnerability has been identified in TFTP server AT-TFTP server version 1.9, which could be exploited by remote or local attackers to execute arbitrary commands or cause a denial of service.

continue reading.....

iDefense Security Advisory 11.26.06 – Remote exploitation of a denial of service vulnerability in Qbik IP Management Limited’s WinGate allows attackers to cause the application to consume 100% of available CPU cycles. iDefense has confirmed that Qbik Wingate 6.1 is vulnerable. Earlier versions are suspected vulnerable.

continue reading.....

iDefense Security Advisory 11.26.06 – Remote exploitation of a format string vulnerability in GNU Radius could allow an attacker to execute code in the context of the running daemon. iDefense has confirmed that this vulnerability is present in version 1.3 and 1.2 of GNU Radius. It is likely that all prior versions are vulnerable.

continue reading.....

Mayhemic Labs Public Advisory MHL-2006-004 – MBoard does not check the Post ID for malicious data when replying, allowing an attacker to create blank files on the system wherever the web server has write access. Versions 1.22 and below are affected.

continue reading.....

Debian Security Advisory 1219-1 – The GNU texinfo package has been found susceptible to insecure file handling and buffer overflow flaws.

continue reading.....

Symantec Vulnerability Research SYMSA-2006-011 – JBoss web server version 1.0.0.GA suffers from a directory traversal flaw.

continue reading.....

(Posted 30 Nov 2006 by janewalker6847)

continue reading.....

(Posted 30 Nov 2006 by falko)

continue reading.....

(Posted 30 Nov 2006 by Ray)

continue reading.....

continue reading.....

continue reading.....

continue reading.....

continue reading.....

Patriotic and misguided fervor saddles police dogs with unnecessary and pricey protection.

continue reading.....

As Iraq spirals into chaos and support for withdrawl balloons, the Pentagon considers committing 20,000 more U.S. troops to a mission with an unclear end.

continue reading.....

The President’s relief plan ignores the gender dimensions of the AIDS epidemic, and women are paying for it with their lives.

continue reading.....

With a military badly in need of reform and a war based on lies, desertion is an act of bravery.

continue reading.....

Fed up with Congress after watching the minimum wage stagnate at poverty level for nearly a decade, a growing number of states are introducing their own pay raises and bolstering buying power.

continue reading.....

As Iraq spirals into chaos and support for withdrawl balloons, the Pentagon considers committing 20,000 more U.S. troops to a mission with an unclear end.

continue reading.....

Methamphetamine abuse is not as prevalent as the government would have you believe.

continue reading.....

Virtual hosting with multiple user IDs is possible to increase Apache security with mod_proxy.
In this article, Nick Maynard outlines a method for you to improve the security of a LAMP setup by using Apache’s mod_proxy module. This article is specific to Linux; however, you can also apply some of the principles to other operating systems.
One [...]

continue reading.....

Just open firefox and type about:mozilla followed by [enter] key…
You will see message:
And so at last the beast fell and the unbelievers rejoiced.But all was not lost, for from the ash rose a great bird. The bird gazed down upon the unbelievers and cast fire and thunder upon them. For the beast had been reborn [...]

continue reading.....

continue reading.....