Latest Security Threads

Beyond Security will help you expose your security holes and will show you what the bad guys already know about your hosts and network. Use our Automated Scanning service to perform a full security audit of your site, and find the latest security news and tools on Beyond Security's SecuriTeam web site.

+ Alcatel-Lucent OmniSwitch Stack Buffer Overflow

A stack overflow vulnerability in Alcatel-Lucent's web interface allows remote attackers to cause...... + more

+ 8e6 Technologies R3000 Internet Filter Bypass with Host Decoy

The 8e6 Professional Edition offers "high-performance, enterprise-level filtering with the R3000 ...... + more

+ Wireshark RMI Packet Dissector Information Disclosure

A vulnerability in the way Wireshark handles RMI packets allows attackers to cause the Wireshark ...... + more

+ America's Army Server Termination

"America's Army (also known as AA or Army Game Project) is a tactical multiplayer first-person sh...... + more

+ Sun xVM VirtualBox Privilege Escalation Vulnerability

Virtualization technologies allow users to run different operating systems simultaneously on top ...... + more

+ PorkBind - Nameserver Security Scanner

+ SurfJack - Hijack HTTP Connections to Steal Cookies

+ Powerfuzzer - Automated Web Fuzzer

+ PuttyHijack - Putty Hijacking Tool

+ ArpON - ARP Management System

+ OpenLDAP BER Decoding Remote DoS Vulnerability

A vulnerability allows remote attackers to deny services on vulnerable installations of OpenLDAP....... + more

+ Vim Netrw FTP User Name and Password Disclosure

"Netrw supports "transparent" editing of files on other machines using [...] vim ftp://hostname/p...... + more

+ Solaris snoop SMB Multiple Vulnerabilities

The snoop "command line utility is installed by default on Solaris. It is used to capture and dis...... + more

+ Libxslt Heap-Based Buffer Overflow

A vulnerability in libxslt allows attackers that can supply an arbitrary XSLT file to cause the l...... + more

+ Apache Tomcat XSS Vulnerability

The message argument of Apache Tomact's HttpServletResponse.sendError() call is not only displaye...... + more

+ Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass (MS08-043)

Internet Explorer introduces the concept of URL Security Zones, which basically define a set of p...... + more

+ Microsoft Windows Messenger Illegal Access Vulnerability (MS08-050)

A remote illegal access vulnerability exists in Microsoft Windows Live Messenger. An attacker can...... + more

+ MicroWorld MailScan - Multiple Vulnerabilities within Admin-Webinterface

MailScan 5.6 is "the world's most advanced Real-Time AntiVirus and AntiSpam solution for Mail Ser...... + more

+ Symantec Veritas Storage Foundation Scheduler Service NULL Session Authentication Bypass Vulnerability

A vulnerability allows an attacker to execute arbitrary code on vulnerable installations of Syman...... + more

+ Vulnerability in Cisco WebEx Meeting Manager ActiveX Control

A buffer overflow vulnerability exists in an ActiveX control used by the WebEx Meeting Manager. E...... + more

+ VMware Workstation (hcmon.sys) Local DoS Vulnerability

The VMware workstation system driver hcmon.sys has a vulnerability that can be used by local atta...... + more

+ Multiple Cisco IOS Shellcodes

Several Cisco IOS shellcodes have been released, these shellcodes allow an attacker to gain eleva...... + more

+ Apache Tomcat Directory Traversal Vulnerability (Exploit #2)

A vulnerability in Apache's Tomcat allows attackers to utilize a directory traversal vulnerabilit...... + more

+ Apache Tomcat Directory Traversal Vulnerability

A vulnerability in Apache's Tomcat allows attackers to utilize a directory traversal vulnerabilit...... + more

+ Cisco WebEx Meeting Manager (atucfobj.dll) ActiveX (Exploit)

A vulnerability in Cisco's WebEx ActiveX allows remote attackers to cause it to overflow an inter...... + more

+ Lateral SQL Injection: a New Class of Vulnerability in Oracle

A new class of vulnerabilities have been discovered in Oracle, these vulnerabilities can be explo...... + more

+ Microsoft Windows DNS Stub Resolver Cache Poisoning (MS08-020)

The Windows DNS stub resolver is a Windows service used by Windows desktop software to resolve DN...... + more

+ Cold Boot Attacks on Disk Encryption

The below linked paper shows that disk encryption, the standard approach to protecting sensitive ...... + more

+ OpenBSD DNS Cache Poisoning and Multiple O/S Predictable IP ID Vulnerability

A serious weakness has been discovered in OpenBSD's PRNG, which allows an attacker to predict the...... + more

+ Exploiting WDM Audio Drivers

For those researchers who are interested in the driver security and also for driver writers, the ...... + more