Latest Security Threads

Welcome to the SecuriTeam RSS Feed - sponsored by Beyond Security. Know Your Vulnerabilities! Visit BeyondSecurity.com for your web site, network and code security audit and scanning needs.

+ Mozilla Firefox Plugin Parameter EnsureCachedAttrParamArrays Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox.... + more

+ VMWare VMnc Codec HexTile Encoding Buffer Overflow Vulnerability

A vulnerability was discovered in multiple VMWare products, which can be exploited by malicious people to compromise a vulnerable... + more

+ VMware Products Movie Decoder Heap Overflow Vulnerability

A Heap Overflow vulnerability was discovered in VMware products.... + more

+ TANDBERG Video Communication Server Static SSH Host Keys Vulnerability

An SSH service authentication weakness vulnerability was discovered in the TANDBERG's Video Communication Server.... + more

+ TANDBERG Video Communication Server Authentication Bypass Vulnerability

This vulnerability allows for the complete bypass of authentication in the administrative web console.... + more

+ Netifera - Modular Open Source Platform for Security Tools

+ WarVOX - Tools for Exploring, Classifying, and Auditing Telephone Systems

+ Webshag - Web Server Audit Tool

+ Browser Fuzzer

+ FSpy - Linux Filesystem Activity Monitoring

+ Krb5 kadmind Denial Of Service vulnerability

The Kerberos administration daemon (kadmind) can crash by referencing freed memory.... + more

+ HP Insight Control for Linux Multiple Vulnerabilities

Execution of Arbitrary Code, Denial of Service and Unauthorized Access vulnerabilities were identified on HP Insight Control for... + more

+ Skype Client for Mac Chat Unicode Denial of Service vulnerability

A Denial of Service vulnerability was discovered in Skype for Mac.... + more

+ Multiple Sourcefire Products Static Web SSL Keys Vulnerability

This vulnerability allows remote attackers to decrypt secure socket layer (SSL) communications directed to multiple Sourcefire... + more

+ Samba 3.3.12 Memory Corruption Vulnerability

Remote exploitation of a buffer overflow vulnerability within Samba Project's Samba could allow an attacker to execute arbitrary... + more

+ Ipswitch Imail Server Queuemgr Format String Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of IPSwitch IMail.... + more

+ Ipswitch Imail Server List Mailer Reply-To Address Code Execution Vulnerability

... + more

+ HP OpenView Network Node Manager Execution of Arbitrary Code Vulnerability

A vulnerability was identified on HP OpenView Network Node Manager which could lead to the execution of arbitrary code.... + more

+ HP OpenView NNM webappmon.exe execvp_nc Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard OpenView Network... + more

+ HP Virtual Connect Enterprise Manager for Windows XSS vulnerability

A Cross site scripting vulnerability was identified on HP Virtual Connect Enterprise Manager.... + more

+ Trango Broadband Wireless Rogue SU Authentication Bug

Currently there is a flaw in the authentication mechanism of these radios which, if an attacker knows some details, can allow... + more

+ Exposing HMS HICP Protocol and Intellicom NetBiterConfig.exe Remote Buffer Overflow

SCADA weaknesses created by HICP Protocol and NetBiter WebSCADA.... + more

+ Family Connections Multiple Remote Vulnerabilities

Many fields are not properly sanitised and some checks can be bypassed.... + more

+ VideoCache vccleaner Root Vulnerability

VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites.... + more

+ QuickHeal Antivirus 2010 Local Privilege Escalation

All files under the install folder have Full control for BUILTIN\users and can be replace with malicious files.... + more

+ Why Silent Updates Boost Security

Thomas Duebendorfer Google Switzerland GmbH and Stefan Frei Communication Systems Group, ETH Zurich, Switzerland looked into the... + more

+ PDF Silent HTTP Form Repurposing Attacks

This paper sheds light on a modified approach to triggering web attacks through JavaScript protocol handler in the context of... + more

+ Frame Pointer Overwrite Demonstration (Linux)

This paper assumes you have read the proper background information and/or technical details about the above subject. If not, please... + more

+ Format String Exploitation Demonstration (Linux)

This paper assumes you have read the proper background information and/or technical details about the above subject. If not, please... + more

+ Hacking SOHO Routers

The purpose of this paper is to outline the security measures being taken by vendors to prevent such attacks in their home routing... + more