Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×
Desktop Security
security advisory vulnerability
security advisory vulnerability GNOME is officially shortening its standard vulnerability disclosure window from 90 days to 30 days, a change that impacts upstream maintainers, downstream Linux distributions, and system administrators in how they handle software vulnerabilities. The policy shift, announced by long-time security coordinator Michael Catanzaro , addresses modern software patching realities and a growing influx of automated submissions. . Because GNOME is the default desktop environment on several major Linux...
Jul 21, 2026
Security Vulnerabilities security advisory moderate
security advisory moderate For organizations that run a self-hosted Git platform, it’s no longer just about hosting static code repositories. Today, Git servers are responsible for deployment pipelines, API tokens, SSH keys, package repositories, and the automation scripts that push code directly. Confirm that the upgrade addresses known vulnerabilities but also provides production environments. . That makes them trusted systems within the development environment and attractive targets for attackers looking to move...
Jul 20, 2026
Server Securitydata privacy automation
data privacy automation Every system admin has lived through the same Monday morning ritual. A queue of forty tickets, half of them password resets, permission errors, or disk space warnings that any experienced technician could resolve in under two minutes. The other half require actual judgment. For years, automation promised that software would eventually sort the two apart on its own. That promise is now being tested in production Linux environments. . Early results are reshaping how IT teams think about tier-1...
Jul 17, 2026
Privacydata collection automation
data collection automation You're running a web scraping project to collect pricing data from e-commerce sites. You set up a pool of datacenter proxies, launch your scripts, and within minutes — banned . CAPTCHAs everywhere. Your data pipeline stops before it really begins. . It's a frustrating scenario that plays out daily in ad verification, market research, and multi-account management. The website doesn't know you're doing legitimate research or monitoring. It just sees traffic coming from IP ranges it recognizes as...
Jul 17, 2026
Security Trends security advisory social engineering
security advisory social engineering Business Email Compromise used to be a numbers game — mass-blasted emails, broken English, an obvious "URGENT WIRE TRANSFER" subject line. That era is over. Generative AI has turned BEC into a tailored, low-noise operation that mimics writing style, voice, and even video presence. This piece looks at what's actually changed under the hood, what defenders are testing in response, and why so many organizations are still structurally unprepared for it. . The Infrastructure Problem Nobody Wants to...
Jul 17, 2026
Refine news
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Loading...
Explore Latest Linux Security news
We found 1 articles for you...
83
security testingweb attacksexploit toolAdvanced Perl CGI Techniques for Comprehensive Security Testing
This works on the perl pipe bug. It'll take an arg that's the address of a website and it's cgi script with some args to the script then figure out if it can exploit it and how. It's worked on everything I've tried it on, though I have limited test boxes. It's pretty dirty but it works. . . This utility cleverly takes advantage of the Python subprocess vulnerability in web scripts by focusing on designated endpoints.. Perl Exploitation, CGI Bugs, Security Testing Tools, Web App Attacks. . LinuxSecurity.com Team
Jun 21, 2010
•
Hacks/Cracks
78
software updatememory corruptionpenetration testingImmunity Canvas 6.47: Cloudburst Attack Unleashes VM Host Threat
'Cloudburst' memory-corruption exploit released with Immunity's new version of Canvas penetration testing software. Researchers for some time have demonstrated the possibility of one of virtualization's worst nightmares -- a guest virtual machine (VM) infiltrating and hacking its host system. Now another commercial tool is offering an exploit that does exactly that.. The newest version of Immunity's Canvas commercial penetration testing tool, v6.47, includes the so-called Cloudburst attack module, which was developed by Immunity researcher Kostya Kortchinsky to exploit a VMWare vulnerability (CVE-2009-1244) in VMware Workstation that lets a user or attacker in a "guest" VM break into the actual host operating environment. VMware issued a patch for the bug in April. "Companies and administrators tend to trust that breaking out of a VM is not possible," says Nick Selby, director of the enterprise security practice at The 451 Group. "A lot of people consider this to be just another proof-of-concept. They don't understand that is a commercially available exploit." The link for this article located at Dark Reading is no longer available. . Defense's Palette v5.83 unveils Thunderstorm, enabling GZ to infiltrate server networks through buffer overflow vulnerability.. Immunity Canvas, Cloudburst Attack, Exploit Tool, Virtual Machine Exploit, Penetration Testing. . LinuxSecurity.com Team
Jun 08, 2009
•
Vendors/Products
83
remote accesssql injectionpenetration testingSqlninja 0.2.3 Enhances Automated SQL Injection for MS SQL Server
Sqlninja is a tool written in PERL to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote access on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered. Being able to upload 'netcat.exe' as 100% plain ASCII GET/POST requests and no FTP? Evasion techniques, code obfuscation, and DNS-tunneld pseudo shells? Sounds like an SQL Injection tool to check out!. . Sqlninja is a tool written in PERL to exploit SQL Injection vulnerabilities on a web application tha. sqlninja, written, exploit, injection, vulnerabilities, application. . LinuxSecurity.com Team
May 30, 2008
•
Hacks/Cracks
79
sql injectiondatabase securitypenetration testingSqlninja 0.2.2: Advanced Tool for SQL Injection Exploits
Sqlninja is a tool to exploit SQL Injection vulnerabilities on a web application that uses Microsoft SQL Server as its back-end. Its main goal is to provide a remote shell on the vulnerable DB server, even in a very hostile environment. It should be used by penetration testers to help and automate the process of taking over a DB Server when a SQL Injection vulnerability has been discovered. With features such as evasion techniques, a more sophisticated upload module, and automatic URL-encoding, why not take a look at Sqlninja and see if your DB is secure today?. The link for this article located at Darknet.org is no longer available. . The link for this article located at Darknet.org is no longer available.. sqlninja, exploit, injection, vulnerabilities, application, microsoft. . LinuxSecurity.com Team
Apr 15, 2008
•
Security Projects
83
malwareweb securityvulnerability managementMpack Exploit Toolkit Focuses on Addressing Web Security Vulnerabilities
Exploit frameworks have become more focused and specialized, sniper scoping specific vulnerabilities in popular applications such as Apple's Quicktime Movie viewer and even Mozilla's Firefox web browser. This is a constant reminder to me of how diligent one must be to run a secure environment - not only your primary OS, but ALL third party applications! Read on as the Washington Post fills us in on a tool called 'Mpack', a script kiddie's dream with Web interface and point / click / root abilities that have been spotted on over 10,000 web sites thus far. . Researchers have been charting the rise in threats created by a new software exploit tool known as "Mpack," a virtual attack kit designed to be embedded in hacked or malicious Web sites. It targets security holes in multiple software products, including Apple's QuickTime media player, and outdated Windows plug-ins for Mozilla's Firefox and Opera Web browsers. . The Mpack exploit framework is a powerful toolkit designed to exploit vulnerabilities in popular web applications, enabling unauthorized access and malicious activities. Exploit Tool, Web Security Threats, Application Vulnerabilities, Mpack Tool. . LinuxSecurity.com Team
Jun 19, 2007
•
Hacks/Cracks
83
security advisorybuffer overflowremote accessIIS: Secret Exploit Tool Creates High Risk For Administrators
Security professionals are concerned that a program used by hackers to exploit a flaw in Microsoft IIS webserver has not been made public. They fear that the hackers are keeping the tool secret in a bid to launch further damaging IIS . . . . Security professionals are concerned that a program used by hackers to exploit a flaw in Microsoft IIS webserver has not been made public. They fear that the hackers are keeping the tool secret in a bid to launch further damaging IIS attacks. The latest in a long line of vulnerabilities in IIS was discovered last week, when it was revealed that a remote buffer overflow in all versions of IIS Internet Services API could be exploited to give an attacker complete control of a system. But the security community is worried that hackers may be hanging on to the tool used for exploiting this hole, rather than releasing it for analysis so that a patch can be developed. Typically, when a hole is discovered, a tool capable of exploiting the glitch appears within 48 hours, encouraging administrators to patch their systems quickly. But so far, no such tool has appeared to push administrators into gear, although rumour has it that hackers are in possession of such a program, potentially leaving the six million users of IIS at risk. Security firm @stake warned that administrators are less likely to react to an advisory if there is no exploit tool available. Hackers thrive on a lack of awareness in security and, by keeping the exploit tool underground, network administrators could be lulled into a false sense of security. [ All of article content ] The link for this article located at vnunet is no longer available. . Security professionals are concerned that a program used by hackers to exploit a flaw in Microsoft I. security, professionals, concerned, program, hackers, exploit, microsoft. . LinuxSecurity.com Team
Jun 25, 2001
•
Hacks/Cracks
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
Should Linux servers automatically install security updates?
Trending News
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!