RE: [Full-Disclosure] Comparison of Network Security Scanners

Hi! >LanGuard (3.3 is free for scanning unlimited IP's, it only >costs if you want software/patch deployment and custom reporting). Maxpatrol demo version (also free for scanning unlimited IP's!) is more functional, than Languard "Free Version". -Original Message- From: insecure [mail

[Full-Disclosure] MySQL 4.1/5.0 zero-length password auth. bypass - modified MySQL client

MySQL 4.1/5.0 zero-length password auth. bypass - modified MySQL client autor: RusH security team, http://rst.void.ru Usage: F:\>mysql -uroot -pr57 Welcome to the MySQL monitor. >>Little cool edit by RusH security team =) http://rst.void.ru Commands end with ; or \g. Your MySQL connection id is 2

[Full-Disclosure] Tool: Hardening TCP/IP stack in Windows

Hi all! Very interesting program from Russia: Anti-Cracker Shield Introduction: The program is designed for protection from "exploits" (attacks possible because of vulnerabilities either of the operational systems, or of application software components) of different kinds. Multilevel security sy

[Full-Disclosure] (MS04-022) Microsoft Windows XP Task Scheduler (.job) Universal Exploit

Hi all! Microsoft Windows XP Task Scheduler (.job) Universal Exploit * Tested on: *- Internet Explorer 6.0 (SP1) (iexplore.exe) *- Explorer (explorer.exe) *- Windows XP SP0, SP1 * * --- * Compile: *Win32/VC++

[Full-Disclosure] SecurityLab.ru report: The Most Critical Vulnerabilities in July 2004

SecurityLab.ru report: The Most Critical Vulnerabilities in July 2004 Web application . Easy Chat Server Multiple Denial Of Service Vulnerabilities , Bugtraq ID 10649 . New Atlanta ServletExec Unauthorized Access Vulnerability, Bugtraq ID 10639 . Two Vulnerabilities in Anton Raharja PlaySMS., Bu

[Full-Disclosure] Remote buffer overflow in MDaemon IMAP and SMTP server

Buffer overflow in MDaemon 6.5.1 in SAML, SOML, SEND, MAIl command in SMTP server and in LIST command in IMAP server. Exploit: http://www.securitylab.ru/_Exploits/2004/09/mdaemon_rcpt.c http://www.securitylab.ru/_Exploits/2004/09/mdaemon_imap.c More information (In Russian!): http://www.securit

[Full-Disclosure] HTTP Response Splitting and SQL injection in megabbs forum

URL: http://www.pd9soft.com Tested megabbs 2.1 1. HTTP Response Splitting http://www.pd9soft.com/megabbs/forums/thread-post.asp?action=writenew&fid=%0 d%0aContent-Length:%200%0d%0a%0d%0aHTTP/1.0%20200%20OK%0d%0aContent-Type:%20 text/html%0d%0aContent-Length:%2033%0d%0a%0d%0a%3chtml%3eScanned%20b

[Full-Disclosure] SQL injection in BroadBoard Instant ASP Message Board

BroadBoard Instant ASP Message Board URL: http://www.broadboard.com/ 1. software does not properly validate user-supplied input in the 'keywords' parameter in search.asp: http://broadboard/forum/search.asp?archives=1&action=1&keywords=['SQL code]&method=1&method=1&body=1&subject=1&board=1&resul

[Full-Disclosure] PTms04-030

PTms04-030 - tool for checking WebDAV XML DoS vulnerability. More information and download: http://www.securitylab.ru/tools/48998.html ___ Full-Disclosure - We believe in it. Charter: http://lists.netsys.com/full-disclosure-charter.html

[Full-Disclosure] New MaxPatrol Demo Available

Hi! New Demo version includes intelligent algorithms for detection of Cross-site scripting, SQL-injection, PHP including, HTTP Response Splitting and similar vulnerabilities in ANY (including custom) web-applications. (No details on found vulnerabilities are provided) Latest Discovered Vulnerabi

[Full-Disclosure] phpBB 2.0.10 execute command by pokleyzz

phpBB 2.0.10 execute command by pokleyzz   http://www.securitylab.ru/49574.html    

[Full-Disclosure] Cybercrime in cyberspace: virus writers pay $10000 to revenge Kaspersky Lab

Cybercrime in cyberspace: Russian virus writers pay $1 to revenge Kaspersky Lab More Information: (In Russian) http://www.securitylab.ru/49674.html Translate: http://www.online-translator.com/text.asp?lang=en ___ Full-Disclosure - We believe

[Full-Disclosure] XSS in the nested BB tag in many forum

XSS was found in the nested BB tag in many forum: Invision Power Board: [COLOR=[IMG]http://aaa.aa/=`aaa.jpg[/IMG]]` style=background:url(javascript:alert()) [/COLOR] vBulletin [EMAIL=[URL=s [EMAIL PROTECTED]:[EMAIL PROTECTED] sss[/URL][/EMAIL]` style=`background:url(javaSCrip t:alert(/Hi_fro

RE: [Full-Disclosure] [ Positive Technologies ] Defeating Microsoft Windows XP SP2 Heap protection

cool. Tested on AMD64 with DEP enabled. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, January 28, 2005 5:41 PM To: full-disclosure@lists.netsys.com Subject: [Full-Disclosure] [ Positive Technologies ] Defeating MicrosoftW