Great Reviews!Need help setting up your website, installing Apache, PHP, MySQL, or RavenNuke(tm)?Need help customizing or designing scripts?Please contact us via the Contact Us option for further details and pricing.
Posted by Raven on Thursday, December 18, 2008 @ 22:17:59 EST (1773 reads) ( | Score: 0)
Updated PHP Manual and MySQL Manual Module
Testy1 writes "Ive updated the PHP Manual Module for PHP-Nuke (Version Current as of 24th November 2008).I have updated it to suit RavenNuke™ 2.3 and now uses RavenNukes™ custom CSS on a per-module basis, no need to update the module to your website design.
The new module covers PHP5 and migrating from PHP4.Please read the README.txt file for details on usung this module.
Posted by Raven on Thursday, December 18, 2008 @ 02:08:58 EST (1626 reads) ( | Score: 0)
Malware
papamike writes "I don't believe there is a true definition that covers malware. The spectrum in a classic sense is too broad to define as one thing or another. Malware takes on many forms and affects ones computer in various ways. If you have a suspected malware infection, which tool do you use to clean your system and how do you tell that malware may be present on your computer.
Let me give a couple of examples. If your browser suddenly starts to act up by offering up 404 'Page Not Found' errors when you attempt to browse to certain sites. The sites may be grouped into a specific category such as sites which offer virus detection tools or online scans. Your internet connection (DSL) slows down, or your resident email starts to act up strangely and the list goes on but is generalized as something about your computer that has changed and you can't figure out why.
A deep rooted malware may not be discovered by the best anti-virus detection software out there. Even when you run your rootkit detection software it may not find anything out of the ordinary. Or when you suspect that your browser has been hijacked but detection software rules it out or can't find an infection, even when using powerful software such as Spybot Search & Destroy, or AdAware.
So how can it be best discovered and destroyed? I discovered a small tool which does it's work in DOS and is as complicated and potentially dangerous to use as it is useful in problem solving. "
Posted by Raven on Wednesday, December 17, 2008 @ 21:59:33 EST (1312 reads) (Read More... | 2358 bytes more | Score: 0)
Mozilla Thunderbird Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA33205
VERIFY ADVISORY: http://secunia.com/advisories/33205/
CRITICAL: Highly critical
IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access.
SOFTWARE: Mozilla Thunderbird 2.x - http://secunia.com/advisories/product/14070/
DESCRIPTION: Some vulnerabilities have been reported in Mozilla Thunderbird, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a user's system. For more information: SA33184. The vulnerabilities are reported in version 2.0.0.18 and prior.
Posted by Raven on Wednesday, December 17, 2008 @ 21:12:18 EST (946 reads) (Read More... | 1659 bytes more | Score: 0)
Mozilla Firefox 2 Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA33184
VERIFY ADVISORY: http://secunia.com/advisories/33184/
CRITICAL: Highly critical
IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information, System access
SOFTWARE: Mozilla Firefox 2.0.x - http://secunia.com/advisories/product/12434/
DESCRIPTION: Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a user's system. The vulnerabilities are reported in versions prior to 2.0.0.19.
Posted by Raven on Wednesday, December 17, 2008 @ 21:08:01 EST (955 reads) (Read More... | 4001 bytes more | Score: 0)
Mozilla Firefox 3 Multiple Vulnerabilities
SECUNIA ADVISORY ID: SA33203
VERIFY ADVISORY: http://secunia.com/advisories/33203/
CRITICAL: Highly critical
IMPACT: Security Bypass, Cross Site Scripting, Exposure of sensitive information
SOFTWARE: Mozilla Firefox 3.x - http://secunia.com/advisories/product/19089/
DESCRIPTION: Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to bypass certain security restrictions, disclose sensitive information, conduct cross-site scripting attacks, or potentially compromise a user's system. The vulnerabilities are reported in versions prior to 3.0.5.
Posted by Raven on Wednesday, December 17, 2008 @ 21:00:55 EST (1094 reads) (Read More... | 2355 bytes more | Score: 0)
SECUNIA ADVISORY ID: SA33165
VERIFY ADVISORY: http://secunia.com/advisories/33165/
CRITICAL: Moderately critical
IMPACT: Exposure of sensitive information
SOFTWARE: Nukedit 4.x - http://secunia.com/advisories/product/10231/
DESCRIPTION: Cyber.Zer0 has discovered a security issue in Nukedit, which can be exploited by malicious people to disclose sensitive information. This security issue is confirmed in version 4.9.8. Other versions may also be affected.
Posted by Raven on Wednesday, December 17, 2008 @ 15:17:36 EST (1158 reads) (Read More... | 1184 bytes more | Score: 0)
Call Of Duty - World At War Clan PHPNuke Theme
trunks writes "PHP-Clans are proud to announce the release of the Call Of Duty - World at war phpnuke theme, for our gaming communities and clans alike. As promised we've included all the extras that we usually give to you! As well as a scrolling footer information, so you can easily place all the content you need in there!
We also have a large collection of clan themes in our store, why not check them out here. And get discounted clan web hosting with it here. If you don't see the theme you like here, why not request a phpnuke clan theme in our forumshere.
"
Posted by Raven on Tuesday, December 16, 2008 @ 00:06:25 EST (3500 reads) ( | Score: 0)
DESCRIPTION: Some vulnerabilities have been reported in MediaWiki, which can be exploited by malicious users to conduct script insertion attacks and by malicious people to conduct cross-site scripting and request forgery attacks.
Posted by Raven on Monday, December 15, 2008 @ 21:21:18 EST (1009 reads) (Read More... | 2473 bytes more | Score: 0)
Microsoft Anti-Cross Site Scripting Library V3.0 Beta
NB1 writes "The Microsoft Anti-Cross Site Scripting Library V3.0 (Anti-XSS V3.0) is an encoding library designed to help developers protect their ASP.NET web-based applications from XSS attacks.
It differs from most encoding libraries in that it uses the white-listing technique -- sometimes referred to as the principle of inclusions -- to provide protection against XSS attacks. This approach works by first defining a valid or allowable set of characters, and encodes anything outside this set (invalid characters or potential attacks). The white-listing approach provides several advantages over other encoding schemes. New features in this version of the Microsoft Anti-Cross Site Scripting Library include: - An expanded white list that supports more languages - Performance improvements - Performance data sheets (in the online help) - Support for Shift_JIS encoding for mobile browsers - A sample application - Security Runtime Engine (SRE) HTTP module