iptables is built on top of netfilter, the packet alteration framework for Linux 2.4.x and 2.6.x. It is a major rewrite of its predecessor ipchains, and is used to control packet filtering, Network Address Translation (masquerading, portforwarding, transparent proxying), and special effects such as packet mangling.

continue reading.....

MultiInjector is an automatic SQL injection utility. It uses a list of URI addresses to test parameter manipulation. Once a vulnerable parameter has been found, a signature-evasive SQL injection is performed in order to achieve arbitrary OS command execution and automatic defacement on database server. Written in Python.

continue reading.....

Whitepaper entitled Detecting and Exploiting Vulnerabilities in ActiveX Controls. Written in Farsi.

continue reading.....

The Sectionsnew module in PHP-Nuke suffers from a remote SQL injection vulnerability.

continue reading.....

IranMC suffers from a remote SQL injection vulnerability in detail.php.

continue reading.....

The BookCatalog module in PHP-Nuke suffers from a remote SQL injection vulnerability.

continue reading.....

phpWebSite suffers from a remote SQL injection vulnerability in links.php.

continue reading.....

iDefense Security Advisory 10.30.08 – Remote exploitation of a memory corruption vulnerability in Novell Inc.’s eDirectory could allow an attacker to execute arbitrary code with the privileges of the affected service. The vulnerability exists due to an area of heap memory being used after it has already been freed. By sending malformed data it is possible to cause an area of heap memory to be freed by one thread, and then reused after another thread allocates the same area of memory. This results in the original thread operating on the data changed by the second thread, which may lead to the execution of arbitrary code. iDefense has confirmed the existence of this vulnerability in eDirectory version 8.8 SP2 for Windows. The Linux version does not appear to be affected. Previous versions may also be affected.

continue reading.....

iDefense Security Advisory 10.30.08 – Remote exploitation of a stack buffer overflow vulnerability in Adobe Systems Inc.’s PageMaker could allow an attacker to execute arbitrary code with the privileges of the current user. A vulnerability exists within the handling of PMD files, the native file format for storing PageMaker documents. When parsing a malformed PMD file, data from the file is copied into a buffer without proper validation. This results in an exploitable stack based buffer overflow. iDefense has confirmed the existence of this vulnerability in Adobe PageMaker version 7.0.1 with the CVE-2007-5169 patch applied. Previous versions may also be affected. However, Adobe InDesign CS, the successor to PageMaker, is not affected.

continue reading.....

A vulnerability allows remote attackers to execute a script injection attack on arbitrary sites through vulnerable installations of SonicWALL. User interaction is required to exploit this vulnerability in that the target must visit a malicious web page or open a malicious web link. SonicWALL Pro 2040 is affected.

continue reading.....

Pro Traffic One suffers from a remote SQL injection vulnerability in poll_results.php.

continue reading.....

MyPHP Forum (Final) versions 3.0 and below suffer from multiple remote blind SQL injection vulnerabilities. One of these is an known issue from December of 2007.

continue reading.....

Visagesoft eXPert PDF ViewerX insecure method file overwrite exploit that leverages VSPDFViewerX.ocx.

continue reading.....

DjVu Active-X Control version 3.0 ImageURL property overflow exploit.

continue reading.....

DebugDiag suffers from a NULL pointer dereference in CrashHangExt.dll version 1.0.

continue reading.....

The Current_Issue module in PHP-Nuke suffers from a remote SQL injection vulnerability.

continue reading.....

Mandriva Linux Security Advisory – A vulnerability that was discovered in xine-lib that allowed remote RTSP servers to execute arbitrary code via a large streamid SDP parameter also affects MPlayer. Several integer overflows were discovered by Felipe Andres Manzano in MPlayer’s Real video stream demuxing code. These vulnerabilities could allow an attacker to cause a crash or possibly execute arbitrary code by supplying a malicious crafted video file. The updated packages have been patched to fix these issues. Note that CVE-2008-3827 was already corrected in the Mandriva Linux 2009 packages.

continue reading.....

Mandriva Linux Security Advisory – A vulnerability in rxvt allowed it to open a terminal on :0 if the environment variable was not set, which could be used by a local user to hijack X11 connections. The updated packages have been patched to correct this issue.

continue reading.....

Mandriva Linux Security Advisory – A vulnerability in Eterm allowed it to open a terminal on :0 if the environment variable was not set or the -display option was not specified, which could be used by a local user to hijack X11 connections. The updated packages have been patched to correct this issue.

continue reading.....

A vulnerability in the CTCP handling allows an attacker to trick Quassel IRC into sending arbitrary commands to the IRC server. Versions before 0.3.0.2 are affected.

continue reading.....

(Posted 26 Oct 2008 by Ray)

continue reading.....

(Posted 27 Oct 2008 by Boris Derzhavets)

continue reading.....

(Posted 27 Oct 2008 by gg234)

continue reading.....

(Posted 27 Oct 2008 by Susenator)

continue reading.....

(Posted 27 Oct 2008 by falko)

continue reading.....

(Posted 28 Oct 2008 by Boris Derzhavets)

continue reading.....

Wouter Coekaerts has reported a vulnerability in Quassel IRC, which can be exploited by malicious people to hijack IRC connections.

http://secunia.com/Advisories/32470/

NOTE: This RSS feed does not include information about updated Secunia advisories. You should note that Secunia on average issues more than 20 updated advisories per day, containing information about exploit and patch availability, new and in depth research, and all other details that are relevant. Learn more about receiving complete and customised Secunia advisory information:
http://secunia.com/advisories/business_solutions/

continue reading.....

Some vulnerabilities have been reported in Opera, which can be exploited by malicious people to conduct cross-site scripting attacks or potentially to compromise a user’s system.

http://secunia.com/Advisories/32452/

NOTE: This RSS feed does not include information about updated Secunia advisories. You should note that Secunia on average issues more than 20 updated advisories per day, containing information about exploit and patch availability, new and in depth research, and all other details that are relevant. Learn more about receiving complete and customised Secunia advisory information:
http://secunia.com/advisories/business_solutions/

continue reading.....

Beenu Arora has reported a vulnerability in Harlandscripts Pro Traffic One, which can be exploited by malicious people to conduct SQL injection attacks.

http://secunia.com/Advisories/32467/

NOTE: This RSS feed does not include information about updated Secunia advisories. You should note that Secunia on average issues more than 20 updated advisories per day, containing information about exploit and patch availability, new and in depth research, and all other details that are relevant. Learn more about receiving complete and customised Secunia advisory information:
http://secunia.com/advisories/business_solutions/

continue reading.....

Pouya_Server has reported a vulnerability in Dorsa CMS, which can be exploited by malicious people to conduct cross-site scripting attacks.

http://secunia.com/Advisories/32468/

NOTE: This RSS feed does not include information about updated Secunia advisories. You should note that Secunia on average issues more than 20 updated advisories per day, containing information about exploit and patch availability, new and in depth research, and all other details that are relevant. Learn more about receiving complete and customised Secunia advisory information:
http://secunia.com/advisories/business_solutions/

continue reading.....