OpenSSL Privilege Separation, with support for Linux seccom
CodeNetworkPull Requests 0Issues 0GraphsCOpenSSL Privilege Separation — Read moreClone in Windows ZIPHTTPSSHGit Read-OnlyRead-Only accessTags branch: master Files Commits Branches 1 2 commitssslps /...
View ArticleMicrosoft Security Bulletin Summary for April 2013
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256********************************************************************Microsoft Security Bulletin Summary for April 2013Issued: April 9,...
View Article[RHSA-2013:0728-01] Moderate: rubygem packages security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Moderate: rubygem...
View Article[RHSA-2013:0726-01] Important: JBoss Enterprise SOA Platform 5.3.1 update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Important: JBoss...
View Article[RHSA-2013:0727-01] Important: kvm security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Important: kvm security...
View Article[RHSA-2013:0729-01] Moderate: haproxy security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Moderate: haproxy...
View ArticleSecuring Internal Applications
A common infrastructure problem is managing access to internal applications. Some patterns for solving that problem include: fronting internal apps with HTTP Basic or HTTP Digest authentication through...
View ArticleBACKDOORED PHP WEB SHELLS - THIS IS WHY YOU DON'T JUST USE ANY HACKING TOOL
So, after Fex13 posted a backdoored php web shell here yesterday (https://forum.intern0t.org/general-h...s-serious.html), I wanted to check how many other web shells I could find on packet storm...
View ArticleImplicit type conversion in MySQL A new approach to bypassing WAFs
In some languages, using arithmetic operators on elements that aren’t numeric, give some weird results. In JavaScript for example, [ ] + { } is an Object, while { } + [ ] appears to be NaN.If these...
View ArticleMetasploit 4.6.0 Released!
We just released Metasploit 4.6.0, so applying this week's update will get you the brand new version. While Chris has a delightful blog post of what all is new in Metasploit Pro, let's take a look at...
View ArticleUS-CERT Current Activity - Security Update Available for Adobe Shockwave Player
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1National Cyber Awareness SystemSecurity Update Available for Adobe Shockwave PlayerOriginal release date: April 10, 2013Adobe has released a security update...
View Article[RHSA-2013:0733-01] Moderate: JBoss Enterprise Portal Platform 5.2.2 security...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1===================================================================== Red Hat Security AdvisorySynopsis: Moderate: JBoss...
View ArticleUS-CERT Current Activity - Adobe Releases Security Update for ColdFusion
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1National Cyber Awareness SystemAdobe Releases Security Update for ColdFusionOriginal release date: April 10, 2013Adobe has released a security hotfix for...
View ArticleCisco Security Advisory: Multiple Vulnerabilities in Cisco ASA Software
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256Cisco Security Advisory: Multiple Vulnerabilities in Cisco ASA SoftwareAdvisory ID: cisco-sa-20130410-asaRevision 1.0For Public Release 2013 April 10 16:00...
View ArticleCisco Security Advisory: Multiple Vulnerabilities in Cisco Firewall Services...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256Cisco Security Advisory: Multiple Vulnerabilities in Cisco FirewallServices Module SoftwareAdvisory ID: cisco-sa-20130410-fwsmRevision 1.0For Public...
View ArticleCisco Security Advisory: Multiple Vulnerabilities in Cisco Unified...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256Cisco Security Advisory: Multiple Vulnerabilities in Cisco UnifiedMeetingPlace SolutionAdvisory ID: cisco-sa-20130410-mpRevision 1.0For Public Release 2013...
View ArticleCisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XE Software...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256Cisco Security Advisory: Multiple Vulnerabilities in Cisco IOS XESoftware for 1000 Series Aggregation Services RoutersAdvisory ID:...
View ArticleCisco Security Advisory: Cisco Prime Network Control Systems Database Default...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA256Cisco Security Advisory: Cisco Prime Network Control Systems DatabaseDefault Credentials VulnerabilityAdvisory ID: cisco-sa-20130410-ncsRevision 1.0For...
View ArticleUS-CERT Current Activity - Adobe Releases Security Updates for Adobe Flash...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1National Cyber Awareness SystemAdobe Releases Security Updates for Adobe Flash PlayerOriginal release date: April 10, 2013Adobe has released security updates...
View ArticleUS-CERT Current Activity - Adobe Releases Security Updates for Adobe Flash...
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1National Cyber Awareness SystemAdobe Releases Security Updates for Adobe Flash PlayerOriginal release date: April 10, 2013Adobe has released security updates...
View Article