9 Top Patch Management Practices for Businesses Security

9 Top Patch Management Practices for Businesses Security I've spent most of the past decade in information security, with a pretty big focus on incident response. It never ceases to amaze me how many security incidents pronounced hacks customers suffer as a result of unpatched systems. Patch...

Feds to Focus R&D Efforts on Designing Security in to Applications

The federal government is planning to focus some of its research and development efforts on developing methods for building security into software and hardware systems used in federal agencies. This a major change for the government, which has historically focused its energies on defenses such as...

Sprint Disables Carrier IQ Software On Its Devices

Sprint has decided to stop using Carrier IQ’s diagnostic software in light of the ongoing controversy about user privacy, according to reports. A Sprint spokesperson told the Website MobileBurn that the carrier has “weighed customer concerns and…disabled use of the tool so that diagnostic...

Pre-Owned Hardware

Counterfeit and “certified pre-owned” hardware is nothing new, but we think 2012 will see this issue morph from a sideshow in the cyber security world to center stage, with new revelations about contamination of the global supply chain by hardware and software components of dubious origin and...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

Building Knight Rider Mode - Jalousien Remote Concert

Document Title: =============== Building Knight Rider Mode - Jalousien Remote Concert References: =========== Download: http://www.vulnerability-lab.com/resources/videos/359.wmv View: http://www.youtube.com/watch?v=bxjTgUaF40w Release Date: ============= 2011-12-15 Vulnerability Laboratory ID...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

Building Knight Rider Mode - Jalousien Remote Concert

Document Title: =============== Building Knight Rider Mode - Jalousien Remote Concert References: =========== Download: http://www.vulnerability-lab.com/resources/videos/359.wmv View: http://www.youtube.com/watch?v=bxjTgUaF40w Release Date: ============= 2011-12-15 Vulnerability Laboratory ID...

BETTELBOT v1.0 - We are the Robots

Document Title: =============== BETTELBOT v1.0 - We are the Robots References: =========== Download: http://www.vulnerability-lab.com/resources/videos/356.wmv View: http://www.youtube.com/watch?v=e0BKp9e8iec Release Date: ============= 2011-12-14 Vulnerability Laboratory ID VL-ID:...

BETTELBOT v1.0 - We are the Robots

Document Title: =============== BETTELBOT v1.0 - We are the Robots References: =========== Download: http://www.vulnerability-lab.com/resources/videos/356.wmv View: http://www.youtube.com/watch?v=e0BKp9e8iec Release Date: ============= 2011-12-14 Vulnerability Laboratory ID VL-ID:...

Drive Heads Compilation - Music Tracks on Box

Document Title: =============== Drive Heads Compilation - Music Tracks on Box References: =========== Download: http://www.vulnerability-lab.com/resources/videos/357.wmv View: http://www.youtube.com/watch?v=R-xLz59W0Ng Release Date: ============= 2011-12-13 Vulnerability Laboratory ID VL-ID:...

D-Link DNS-320 ShareCenter - Remote RebootShutdownReset (Denial of Service)

D-Link DNS-320 ShareCenter - Remote RebootShutdownReset Denial of Service !/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allow...

D-Link DNS-320 ShareCenter - Remote Reboot/Shutdown/Reset (Denial of Service)

!/usr/bin/perl Title: ShareCenter D-Link DNS-320 remote reboot/shutdown/reset DoS. Type: Hardware Remote: yes Author: rigan - imrigan sobachka gmail.com Tested on: Firmware : DNS320-v2.00b06 Security flaws: dskmgr.cgi allows execute reboot via POST request with parameter cmd=FMTrestart...

COMTREND CT-5624 Router - RootSupport Password DisclosureChange

COMTREND CT-5624 Router - RootSupport Password DisclosureChange !/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03...

COMTREND CT-5624 Router - Root/Support Password Disclosure/Change

!/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: todor.donev@@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03 Bootloader : 1.0.37-0.7-3 ADSL : A2pB022c3.d20e Board ID : CT-563...

Comtrend Router CT-5624 Remote Root/Support Password Disclosure

Exploit for hardware platform in category web applications !/usr/bin/perl + Comtrend Router CT-5624 Remote Root/Support Password Disclosure/Change Exploit Author: Todor Donev Email: email protected@gmail Type: Hardware Vuln Type: Remote Tested: Board ID : CT-5624 Software : A011-306TSR-C01R03...

DreamBox DM800 1.5rc1 - File Disclosure

!/usr/bin/perl DreamBox DM800 :0:0:root:/home/root:/bin/sh daemon::1:1:daemon:/usr/sbin:/bin/sh bin::2:2:bin:/bin:/bin/sh sys::3:3:sys:/dev:/bin/sh sync::4:65534:sync:/bin:/bin/sync games::5:60:games:/usr/games:/bin/sh man::6:12:man:/var/cache/man:/bin/sh lp::7:7:lp:/var/spool/lpd:/bin/sh...

Linux Foundation Says UEFI Doesn't Have to Prevent Other OS Installations

The Linux Foundation has released a document outlining ways in which the UEFI secure boot specification can be used to support the installation of Linux and other open operating systems on UEFI-enabled hardware. As long as hardware vendors set up their systems in the proper way, UEFI should be no...

SonicWALL ViewPoint Server Detection

SonicWALL ViewPoint Server reporting software was detected on the remote host. ViewPoint Server is a Windows-based software application that utilizes a built-in web server to provide reporting functionality for SonicWALL hardware and virtual appliances. C Tenable Network Security, Inc...

SOL13114 - Apache Range header vulnerability - CVE-2011-3192

The byte-range filter in the Apache HTTP Server 1.3.x, 2.0.x through 2.0.64, and 2.2.x through 2.2.19 allows remote attackers to cause a denial-of-service memory and CPU consumption using a Range header that expresses multiple overlapping ranges. When this vulnerability is exploited, the httpd...