John the Ripper is a fast password cracker, currently available for many flavors of Unix, Windows, DOS, BeOS, and OpenVMS. Its primary purpose is to detect weak Unix passwords. It supports several crypt(3) password hash types commonly found on Unix systems, as well as Windows LM hashes. On top of this, many other hash types are added with contributed patches, and some are added in John the Ripper Pro.
518c2fcfa8112128a6a405b56d92faa47831e17f596922af94a647aa949df64e
Web Fusion Nepal suffers from a remote SQL injection vulnerability in find.php.
459987990a76e36877bc7387ab9d1d29048e2e7d81e01e7103079f26774fa043
Mandriva Linux Security Advisory 2011-118 - This advisory updates wireshark to the latest version (1.2.18), fixing one security issue. The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18, 1.4.x through 1.4.7, and 1.6.0 allows remote attackers to cause a denial of service via malformed packets.
9ca64fa03f4aa622b44d58ab07201ad53991d0d658371d5558c3a05cc015163e
File Expert for Android version 3.1.2 suffers from a directory traversal vulnerability in the path parameter.
3829a9b9675237d1b1d12772914ecec2d7fcc8a91935ab80132df77ec4b5301a
File Expert for Android suffers from a vulnerability where users can delete files outside of the FTP root. Versions 3.0.4 and 3.0.5 are confirmed vulnerable.
19ed342c2f1a2503f578c4b78445d5a29de40f82cc0d68e20e71ea6a6630f88b
ShopEye suffers from a remote SQL injection vulnerability.
e46a245a9f5d89349fe0bed0900a2da448f36ec144d698ca6bd1d66e2941d31a
Universal OS X dyld ROP shellcode that spawns a shell on port 4444.
f90145d57b30a93c3b8950bb79484eec09621902be1ae67433d853c948efbc0c
Secunia Security Advisory - Ubuntu has issued an update for thunderbird. This fixes multiple vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions and compromise a user's system.
e497dde66394d3b20421f593c072a3ddcc7d34c5fde7f95824943052d02600d3
Secunia Security Advisory - A vulnerability has been reported in BlueSoft Real Estate Listing CMS, which can be exploited by malicious people to conduct SQL injection attacks.
a23aee9afdb265680a8fb0dd8fcb5ee0aa5def57b8642fc58e773d5744d0ed89
Secunia Security Advisory - A vulnerability has been reported in Social Networking CMS, which can be exploited by malicious people to conduct SQL injection attacks.
c6d63de7c0276bbc09441ce91f2dea29689641bc2862432b792d88a5557ed1b3
Secunia Security Advisory - Debian has issued an update for horde3. This fixes two vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting and cross-site request forgery attacks.
653c809df61470671a24c59899115d87810e9fcbb1464f169eaaccad413713a3
Secunia Security Advisory - Fedora has issued an update for drupal7. This fixes a vulnerability, which can be exploited by malicious people to bypass certain security restrictions.
cfb8660f0c7bbe07069803745d8f4b37c31153af2347409c57d66a7230f0a850
Secunia Security Advisory - A vulnerability has been reported in Check Point Multi-Domain Management / Provider-1, which can be exploited by malicious, local users to manipulate certain data.
3844d2f7572e74ce21d4cc527c4e3f7c3245248af19b61027c5f4bb756cf7821
Secunia Security Advisory - Fedora has issued an update for phpMyAdmin. This fixes some vulnerabilities, which can be exploited by malicious users to disclose sensitive information and by malicious users and malicious people to compromise a vulnerable system.
5b411e0968b6c3edd629854a67251dde3cecd9706640043f74c7cdb6d7b36f4c
Secunia Security Advisory - IBM has acknowledged a vulnerability and a weakness in AIX, which can be exploited by malicious people to manipulate certain data and cause a DoS (Denial of Service).
3fb4d0dece06010b5e774c6ee0698ca6e7c6d1d5e08776d97795ec739a7a9ab1
Secunia Security Advisory - A vulnerability has been reported in ArcSight Connectors, which can be exploited by malicious users to conduct script insertion attacks.
196ada7d787e3d861385e6920af27b1460682e41bb076dc06f3a2e0f0be2c664
Secunia Security Advisory - SUSE has issued an update for nagios. This fixes a vulnerability, which can be exploited by malicious people to conduct cross-site scripting attacks.
c86867854f656d30c18b213280c6668a8d22e245a3e92b70ae25ddf12f227000
Secunia Security Advisory - Red Hat has issued an update for system-config-firewall. This fixes a security issue, which can be exploited by malicious, local users to gain escalated privileges.
7b2d8f09a28ce5b87f0324094018ab37700e7c1fc9e1af4b9c7709edd2e7703a
Secunia Security Advisory - Fedora has issued an update for mingw32-libpng. This fixes a vulnerability, which can be exploited by malicious people cause a DoS (Denial of Service).
708fcbbba7a84a153cb4904b24f4f393aeed90358fbbf15458cfae4f56ee6603
Secunia Security Advisory - Ubuntu has issued an update for linux. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to disclose certain system information, cause a DoS (Denial of Service), and potentially gain escalated privileges, by malicious people to cause a DoS, and by malicious people with physical access to potentially compromise a vulnerable system.
2c96487e5e5426e08bdd3d14f64fdb39a46b4505d5b9e5b172f2750528319293
Secunia Security Advisory - A vulnerability has been reported in BlueSoft Classifieds Site Script, which can be exploited by malicious people to conduct SQL injection attacks.
24637d432193bfca1e82533d86606fbe6b1019e98fc7f5604f3fa884b3162ff7
Secunia Security Advisory - Ubuntu has issued an update for linux. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to disclose certain system information, cause a DoS (Denial of Service), and potentially gain escalated privileges, by malicious, local users in a guest virtual machine to cause a DoS, and by malicious people to cause a DoS.
85e5be7c1fa97f95e3c9db5a4e78cb460c8b8bebe7460d32702ff526f52a1d14
Stunnel is a program that allows you to encrypt arbitrary TCP connections inside SSL (Secure Sockets Layer) available on both Unix and Windows. Stunnel can allow you to secure non-SSL aware daemons and protocols (like POP, IMAP, NNTP, LDAP, etc) by having Stunnel provide the encryption, requiring no changes to the daemon's code.
91f32c7654dde0e1cf37ed0d8517e0d0b5985cd30443a9d64cd33d232b5fe9ce
tinc is a Virtual Private Network (VPN) daemon that uses tunneling and encryption to create a secure private network between multiple hosts on the Internet. This tunneling allows VPN sites to share information with each other over the Internet without exposing any information.
f20863cb1155ba4e4dd4cf16c35a5d706cd326eb8fe62b8b0a31fd57241a5400
WebSolutions.ca suffers from a remote SQL injection vulnerability in news.php.
2e686a8cd5af9d52aa1ec9ebcab817dd51a659acc19329d9351d682b787555c1