(Posted 30 Nov 2011 by Boris Derzhavets)
Security Revealed
(Posted 30 Nov 2011 by Boris Derzhavets)
(Posted 30 Nov 2011 by nixcraft)
Recently, there has been a flurry of blog posts claiming that Linux Mint is now more popular than Ubuntu. Is this really the case?
Here’s a project that looks to eliminate the PC necessary for pushing weather station data to the Internet. When you think about it, getting data from your own weather sensing hardware to a site like Weather Underground doesn’t require very much processing at all. The largest chunk of the puzzle is a window to the [...]![]()
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of the Adobe Shockwave Player.
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of EMC AutoStart.
The DuckDuckGo search engine is one of those new features thanks to a partnership between the projects whereby DuckDuckGo and Mint share the revenue generated by sponsored links within the search results seen by Linux Mint users.
For those of us who can’t be bothered to dig out or N64 whenever we want to play Ocarina of Time or our NES whenever we get the urge to play Battletoads, emulators are a godsend. There is a problem, though. A keyboard doesn’t provide the right experience as a the classic NES ‘brick’ or the [...]![]()
(Posted 30 Nov 2011 by falko)
CodeIgniter ‘CI_Security’ Class ‘xss_clean()’ Filter Security Bypass Vulnerability
Running Contao 2.10.2 On Nginx (LEMP) On Debian Squeeze/Ubuntu 11.10
This tutorial shows how you can install and run a Contao 2.10.2 web
site on a Debian Squeeze or Ubuntu 11.10 system that has nginx installed
instead of Apache (LEMP = Linux + nginx…
CanSecWest 2012 Mar 7-9; 2nd call for papers, closes next week, Monday.Dec 5 2011
Although officially a version 10 refresh and still under the “Statler” moniker, the latest Crunchbang release constitutes some notable changes. more>>
Social enterprise giant Jive has just set the terms of its IPO in a new filing. Jive, which aims to raise a little over $100 million in a public offering, has set the range between $8 and $10 per share. At the high end of the range, Jive could be worth as over $500 million.
Modeled to offer Facebook-like features to enterprises, Jive’s software combines computing with social collaboration to offer fully-featured social networks for businesses. Its suite of applications help businesses collaborate on a variety of tasks, including holding discussions, communication, sharing documents, blogging, running polls, and social networking features and more.
As recent as the last 2 years I’ve noticed that the formerly Microsoft dominated PC world seems to be taking Linux more serious. Since Dell took that first pioneer foray into shipping systems with Linux pre-installed in 2008, other manufacturers have…
Hastymail2 ‘ajax.php’ Cross Site Scripting Vulnerability
HP Network Node Manager i Multiple Cross Site Scripting Vulnerabilities
Voxsmart VoxRecord Control Centre version 2.7 suffers from a remote blind SQL injection vulnerability.
This Metasploit module exploits a vulnerability in the Rhino Script Engine that can be used by a Java Applet to run arbitrary Java code outside of the sandbox. The vulnerability affects version 7 and version 6 update 27 and earlier, and should work on …
This Metasploit module exploits an unauthenticated remote root vulnerability within CTEK SkyRouter versions 4200 and 4300.
WikkaWiki versions 1.3.2 and below suffers from remote SQL injection, unrestricted file upload, arbitrary file download, arbitrary file deletion, remote code execution and cross site request forgery vulnerabilities.
GOM Player version 2.1.33.5071 unicode stack buffer overflow exploit that creates a malicious .asx file.
Bugbear FlatOut 2005 buffer overflow exploit that creates a malicious .bed file.
MS11-080 privilege escalation exploit that leverages the fact that afd.sys does not properly validate user-mode input passed to kernel-mode.
| M | T | W | T | F | S | S |
|---|---|---|---|---|---|---|
| « Oct | Dec » | |||||
| 1 | 2 | 3 | 4 | 5 | 6 | |
| 7 | 8 | 9 | 10 | 11 | 12 | 13 |
| 14 | 15 | 16 | 17 | 18 | 19 | 20 |
| 21 | 22 | 23 | 24 | 25 | 26 | 27 |
| 28 | 29 | 30 | ||||
