- Vuln: Mahara Resume Blocktype Cross Site Scripting Vulnerability
- Vuln: Mahara Admin Password Reset Security Bypass Vulnerability
- Vuln: eCryptfs 'parse_tag_3_packet()' Packet Heap Based Buffer Overflow Vulnerability
- Vuln: Cisco VPN Client for Windows 'StartServiceCtrlDispatche' Local Denial of Service Vulnerability
- Vuln: HP OpenView Network Node Manager 'ovdbrun.exe' Denial of Service Vulnerability
- Vuln: PHP Versions Prior to 5.3.1 Multiple Vulnerabilities
- Vuln: KDE KDELibs 'dtoa()' Remote Code Execution Vulnerability
- Vuln: PEAR Sendmail 'From' Parameter Arbitrary Argument Injection Vulnerability
- Vuln: IBM Rational Products Multiple Cross Site Scripting Vulnerabilities
- Vuln: Microsoft Internet Explorer 'Style' Object Remote Code Execution Vulnerability
Search
Search Result
-
Symantec confirms Internet Explorer exploit
Category: Network Security & Hacking News/Latest Security News
Targets CSS vulnerability Targets CSS vulnerability Read Full ArticleSunday, 22 November 2009 -
The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Paperback) newly tagged "information security"
Category: Network Security & Hacking Products/Information Security
The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Paperback) By Chris Anley Buy new: $31.49 50 used and new from $19.89 Customer Rating: First ...Friday, 20 November 2009 -
The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Paperback) newly tagged "information security"
Category: Network Security & Hacking Products/Information Security
The Shellcoder's Handbook: Discovering and Exploiting Security Holes (Paperback) By Chris Anley Buy new: $31.49 49 used and new from $19.89 Customer Rating: First ...Friday, 20 November 2009 -
An Ounce of Prevention is Worth a Pound of Cure
Category: Network Security & Hacking News/Latest Security News
A conversation on Twitter this morning started out like this: @dinozaizovi: Finding vulnerabilities without exploiting them is like putting on a dress when you have nowhere to go. This clever analogy spurred ...Friday, 20 November 2009 -
Curiosity as a Malicious PDF
Category: Network Security & Hacking News/Global Security News
... open the document! The PDF is the latest in the ugly line of exploit- and malware-ridden embedded PDFs that damage What would you do if you saw in your inbox, an email with a PDF named, “U.S. ship ...Friday, 20 November 2009 -
PHP “multipart/form-data” denial of service
Category: Network Security & Hacking News/Global Security News
... Because of the Suhosin PHP extension. OpenBSD has this extension enabled by default. LFI2RCE ——– In some cases, this attack can be used to convert a local file inclusion exploit to ...Thursday, 19 November 2009 -
PC World: Top 5 Social Engineering Exploit Techniques "Learn to pwn humans for fun and profit -- or simply learn these techniques so you can avoid being scammed"
Category: Network Security & Hacking News/Latest Security News
PC World: Top 5 Social Engineering Exploit Techniques Learn to pwn humans for fun and profit -- or simply learn these techniques so you can avoid being scammed PC World: Top 5 Social Engineering Exploit ...Thursday, 19 November 2009 -
Malicious Java Applet Poses as Carrie Prejean Video
Category: Network Security & Hacking News/Global Security News
McAfee Labs has observed various spam runs exploiting the recent sensational Carrie Prejean news. The Prejean video is rapidly becoming one of the most searched-for topics ever on the net since the existence ...Thursday, 19 November 2009 -
Beware of ‘Free’ InfoSec
Category: Network Security & Hacking News/Latest Security News
... helps you find and manage your risk. We help you focus on the specific technical vulnerabilities in networks, systems, applications and operations that attackers could exploit to cause you damage. To do ...Wednesday, 18 November 2009 -
Security Briefing – November 18th
Category: Network Security & Hacking News/Latest Security News
... to Liquidmatrix Security Digest!. And now, the news Metasploit Framework 3.3 released! Metasploit Offensive Security Exploit Archive Goes Morning all! Sorry to be so spotty lately on posts, I’ve ...Tuesday, 17 November 2009 -
Interesting Information Security Bits for 11/17/2009
Category: Network Security & Hacking News/Latest Security News
... some Javascript shellcode. Good stuff! Paul Melson’s Blog: Reversing JavaScript Shellcode: A Step By Step How-To Tags: ( reverse-engineering javascript shellcode ) The Offensive Security Exploit ...Tuesday, 17 November 2009 -
More on the SSL renegotiation attack
Category: Network Security & Hacking News/Latest Security News
A researcher has published an exploit that uses the SSL renegotiation attack to compromise Twitter logins. That appears to run counter to earlier assessments that this exploit wasn't aimed at the accounts ...Tuesday, 17 November 2009 -
Metasploit Framework 3.3 released
Category: Network Security & Hacking News/Latest Security News
The Metasploit Framework is a development platform for creating security tools and exploits. The framework is used by network security professionals to perform penetration tests, system administr... The ...Tuesday, 17 November 2009 -
Microsoft warns of Windows 7 security hole
Category: Network Security & Hacking News/Latest Security News
... for exploiting the flaw are now available online. At issue is a so-called "denial-of-service" vulnerability in the component of Windows that handles the sharing of files and folders. Microsoft said attackers ...Tuesday, 17 November 2009 -
Vulnerability in Wikipedia Toolbar for Firefox
Category: Network Security & Hacking News/Latest Security News
Security service provider Secunia has discovered a critical vulnerability in the Wikipedia Toolbar extension for Firefox that can be exploited by an attacker to compromise a victim's system Security ...Monday, 16 November 2009 -
Offensive Security: Exploits
Category: Network Security & Hacking News/Latest Security News
Offensive Security: Exploits Offensive Security: Exploits Read Full Article ...Monday, 16 November 2009 -
Interesting Information Security Bits for 11/16/2009
Category: Network Security & Hacking News/Latest Security News
... a Car Multimedia System? Tags: ( fuzzing ) Want to some help on learning how to write windows stack-based exploits? Here you go. A whole mess of tutorials. The Professional Security Testers Warehouse ...Monday, 16 November 2009 -
Microsoft confirms 'detailed' Windows 7 exploit
Category: Network Security & Hacking News/Latest Security News
Exploit code for the vulnerability was released by researcher Laurent Gaffié after failed attempts to get Microsoft's security response center to acknowledge that this was an issue that needs to be patched. ...Monday, 16 November 2009 -
Secret Security Operation Accidentally Exposed
Category: Network Security & Hacking News/Latest Security News
Hackers are always trying to find flaws that they can exploit to get to your personal information. Therefore, the experts need to always be a step ahead when it comes to finding and identifying any weaknesses. ...Monday, 16 November 2009 -
Microsoft investigates vulnerability in Windows 7 and Server 2008 R2
Category: Network Security & Hacking News/Latest Security News
Microsoft is investigating a DoS vulnerability that can be exploited to cripple systems running Windows 7 or Windows Server 2008 R2. According to the vendor, however, no active attacks have been registered ...Sunday, 15 November 2009 -
Refocusing my professional career
Category: Network Security & Hacking News/Latest Security News
... It doesn't mean that I don't like to tinker around in my own lab to try out new tools, or that I don't assess new vulnerabilities and exploits, but the pressing need to be current to the minute is something ...Friday, 13 November 2009 -
Blowfish in Fiction
Category: Network Security & Hacking News/Latest Security News
... designed to overcome Blowfish. The point seemed to be to create a zero day exploit, which he didn't have a chance of managing.... The algorithm is mentioned in Von Neumann's War, by John Ringo and Travis ...Friday, 13 November 2009 -
Microsoft IIS FTP Server NLST Buffer Overflow Clarifications
Category: Network Security & Hacking News/Global Security News
Working exploit code was recently published for a stack-based buffer overflow vulnerability in the FTP server component of Microsoft IIS when handling "NLST" commands. The reason for me writing this blog ...Friday, 13 November 2009 -
Patch Tuesday - November 2009
Category: Network Security & Hacking News/Latest Security News
... Microsoft publishes these ratings as a guide to help customers evaluate the vulnerability risk. In many cases, they seem to be doing their customers a disservice. For example, a remotely exploitable vulnerability ...Friday, 13 November 2009 -
WordPress 2.8.6 prevents malicious code from being uploaded
Category: Network Security & Hacking News/Latest Security News
A hole in the upload routine for blog post attachments allows PHP files to be disguised, for example, as images. Attackers can exploit the hole to execute arbitrary code. However, not all server configurations ...Friday, 13 November 2009 -
The Heist
Category: Network Security & Hacking News/Latest Security News
A stealthy hack into a financial system; manipulation of data by exploiting hidden vulnerabilities; an international cash-out operation of gargantuan proportions reminiscent of Al-Qaeda multiple-attack ...Thursday, 12 November 2009 -
Serious Adobe Flash vulnerability
Category: Network Security & Hacking News/Latest Security News
Foreground Security discovered a critical vulnerability in Adobe Flash. This vulnerability allows the same-origin policy of Adobe Flash to be exploited to allow nearly any site that allows user gen... ...Thursday, 12 November 2009 -
WordPress 2.8.6 security release
Category: Network Security & Hacking News/Latest Security News
WordPress 2.8.6 fixes two security problems that can be exploited by registered, logged in users who have posting privileges. If you have untrusted authors on your blog, upgrading to 2.8.6 is recomme... ...Thursday, 12 November 2009 -
Microsoft bracing for malware attacks from embedded fonts
Category: Network Security & Hacking News/Latest Security News
It's only a matter of time before malicious hackers start exploiting a critical Windows vulnerability via booby-trapped Web pages or Office (Word or PowerPoint) documents. It's only a matter of time ...Thursday, 12 November 2009 -
Vulnerability in the GIMP image editing tool
Category: Network Security & Hacking News/Latest Security News
A vulnerability in the free image editing tool GIMP (GNU Image Manipulation Program) can reportedly be exploited to compromise a users system A vulnerability in the free image editing tool GIMP (GNU ...Thursday, 12 November 2009 -
Computer World: Microsoft plugs 15 holes, including critical drive-by bug "Expect exploits soon for Windows' embedded font flaw, says researcher"
Category: Network Security & Hacking News/Latest Security News
Computer World: Microsoft plugs 15 holes, including critical drive-by bug Expect exploits soon for Windows' embedded font flaw, says researcher Computer World: Microsoft plugs 15 holes, including critical ...Wednesday, 11 November 2009 -
Key Aspects of Insider Threat
Category: Network Security & Hacking News/Latest Security News
The key thing to remember when dealing with insiders is that they have access and in most cases will exploit the weakest link that gives them the greatest chance of access, while minimizing the chances ...Wednesday, 11 November 2009 -
Koobface Botnet's Scareware Business Model - Part Two
Category: Network Security & Hacking News/Latest Security News
... exploit serving domains at 195.88.190.247, participate in phishing campaigns, and register a money mule recruitment site for the non-existent Allied Insurance LLC. (Allied Group, Inc.). Now that's a ...Wednesday, 11 November 2009 -
November Patch Tuesday Addresses 15 Vulnerabilities
Category: Network Security & Hacking News/Latest Security News
... three as “important.” MS09-067 deals with 8 security holes plaguing Microsoft Excel that when successfully exploited could allow remote code execution when users open a specially crafted Post from: ...Wednesday, 11 November 2009 -
Event: Gartner Identity & Access Management Summit
Category: Network Security & Hacking News/Latest Security News
The Gartner Identity Access Management Summit will help you to exploit the full potential of new and future IAM investments, to fully realize their risk-management and governance benefits and their ... ...Tuesday, 10 November 2009 -
Get out of Jail, not so free
Category: Network Security & Hacking News/Global Security News
... on his site. Then this very week also saw the release of a worm by an Australian malware author using the handle ‘ikee’. It exploits the same root password vulnerability as that used by the ...Tuesday, 10 November 2009 -
Microsoft plugs 15 holes in Windows, Office
Category: Network Security & Hacking News/Latest Security News
... XP or Windows Server 2003 systems, Lai said. Microsoft said it believes hackers will quickly figure out a way to exploit this flaw for criminal gain. Andrew Storms, director of security operations for ...Tuesday, 10 November 2009 -
The iPhone “Worm” Presents No Risk to Most Users
Category: Network Security & Hacking News/Latest Security News
... means no SSH, and hence no way to be remotely exploited. But owners who have jailbroken their iPhones have more to worry about. As one affected owner, (user jokiin) put it: “I think ...Tuesday, 10 November 2009 -
Major online ad site hacked, serving up exploit cocktail
Category: Network Security & Hacking News/Latest Security News
A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users. A high-profile online advertising Web site has been hacked and rigged to serve ...Tuesday, 10 November 2009 -
Source code for ikee iPhone worm in the wild
Category: Network Security & Hacking News/Latest Security News
A 21 years old Australian has launched the first iPhone worm to automatically exploit jailbroken devices. With the source code now in the wild, how long before copycats start modifying and improving it? ...Tuesday, 10 November 2009 -
Firefox most vulnerable browser, Safari close second
Category: Network Security & Hacking News/Latest Security News
Cenzic released its report revealing the most prominent types of Web application vulnerabilities for the first half of 2009. The report details the steady rise of attacks targeting these exploits ulti... ...Tuesday, 10 November 2009 -
Firefox Patch Tuesday
Category: Network Security & Hacking News/Latest Security News
... fix, or block a vulnerability from an exploit. The block imposed by Mozilla impacted every instance of Firefox automatically, without user interaction. What’s even more disturbing with this model ...Monday, 09 November 2009 -
Interesting Information Security Bits for 11/09/2009
Category: Network Security & Hacking News/Latest Security News
... and offer your thoughts. Building a security program from the ground up >> Andy ITGuy Tags: ( infosec-program ) Want to learn how to write exploits. You should really check out Dino’s exploitation ...Monday, 09 November 2009 -
Rogue Anti-Spyware Targets Sesame Street’s Big Bird
Category: Network Security & Hacking News/Global Security News
... video shows that the malware is literally pushed onto the system regardless of what the user does. In the past we have seen malware injected into a compromised site through exploits and iframes. Today, ...Monday, 09 November 2009 -
First iPhone worm targets modified handsets
Category: Network Security & Hacking News/Latest Security News
... through Apple's official App Store. Ikee spreads not through any vulnerability exactly, but by exploiting a feature that many users ... The first known computer worm written for Apple's iPhone currently ...Sunday, 08 November 2009 -
Notes from Talk by Michael Hayden
Category: Network Security & Hacking News/Latest Security News
... far exceeds the rate of change for policy. Operator activities defy our ability to characterize them. "Computer network defense (CND), exploitation (CNE), and attack (CNA) are operationally indistinguishable." ...Saturday, 07 November 2009 -
Best of Application Security (Friday, Nov. 6)
Category: Network Security & Hacking News/Latest Security News
... Security 2009 will be selected! Another fine method to exploit SQL Injection and bypass WAF Security and Facebook Platform When Is More Important Than Where in Web Application Security Apple - XSS Attack ...Friday, 06 November 2009 -
Exploitation of online banking credentials on the rise
Category: Network Security & Hacking News/Latest Security News
Within the last several months, the FBI has seen a significant increase in fraud involving the exploitation of valid online banking credentials belonging to small and medium sized businesses. In a ... ...Friday, 06 November 2009 -
Security Exploits and Security Patches
Category: Category
