freeuser.org

Description As Apache Security Team, this problem occurs because of JAVA side. If your context.xml or server.xml allows 'allowLinking'and 'URIencoding' as 'UTF-8', an attacker can obtain your important system files.(e.g. /etc/passwd) Exploit If your webroot directory has three depth(e.g /usr/local/wwwroot), An attacker can access arbitrary files as below. (Proof-of-concept) http://www.target.com/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/foo/bar Apache Tomcat <= 6.0.18 UTF8 Directory Traversal Vulnerability . Anche se questo mi sembra un tantinello più pericoloso IMHO!

Gli sviluppatori del noto CMS Joomla hanno fatto sapere che è già in circolazione un pericoloso exploit che sfrutta una vulnerabilità presente nelle versioni del software dalla 1.5.x alla 1.5.5. Il bug riguarda la funzionalità di password reset e potenzialmente può consentire ad un utente di ottenere l’accesso amministrativo al CMS. Massimo Rabbi » Pericolosa falla per Joomla già in circolazione . Ci stavo giusto giocherellando l'altro giorno :) Joomla 1.5.x (Token) Remote Admin Change Password Vulnerability milw0rm - exploits : vulnerabilities : videos : papers : shellcode .

This time it's Italy. They suffer from a really bad background as one of the IFPIs was formed in Italy during the fascist years and now they have a fascist leader in the country, Silvio Berlusconi. Berlusconi is also the most powerful person in Italian media owning a lot of companies that compete with The Pirate Bay and he would like to stay that way - so one of his lackeys, Giancarlo Mancusi, ordered a shutdown of our domain name and IP in Italy to make it hard to not support Berlusconis empire. We have had fights previously in Italy, recently with our successful art installation where we had to storm Fortezza in order to get our art done. And as usual, we won. We will also win this time. We have already changed IP for the website - that makes it work for half the ISPs again. And we want you all to inform your italian friends to switch their DNS to OpenDNS so they can bypass their ISPs filters. This will also let them bypass the other filters installed by the Italian government, a...

Conversazione su MSN: A: Che fai? B: tento di fari comunicare una VPN openswan con un terminatore XY ma sembra che nella phase2 il quick mode non funzioni a causa della configurazione del PFS A: O_O non ho capito nulla B: Eh...! L'unica cosa che c'è tra me e l'esaurimento nervoso è questa guida spero che possa essere utile a qualcuno di voi ... stacco tcpdump e me ne vado che sono alla frutta!! Buona serata

Google Lively Quando la parola chatroom viene usata nel suo significato letterale! :)

I am not rgod. I’m a friend of his named Daniel.rgod died two days ago at that hospital in Catania. It was a surprise and a shock…to all of us who knew him. rgod was suffering of a rare bony marrow disease, leading to paralysis during his last days.It just took me a while to figure out how to have access to rgod’s website, searching the key on his laptop (with permission from those close to him) to post this…I don’t know what the future of this site will involve but I’d sure like to see these posts, and some of the others about rgod posted across the Internet, preserved on the web indefinitely. Just so that when folks google the name of rgod in years to come, they’ll be able to read it all. rgod web pages Ieri rileggevo un mio vecchio post e tra i commenti ho scorto la firma di rgod. Da tempo non andavo sul suo "sito" e come sempre mi sono detto "andiamo a vedere cosa quel diavolaccio ha combinato negli ultimi tempi". Una volta lì, ho appreso della sua scomparsa ......

Reblogged Questo lo provo ... Qui il riferimento originale