Developers Raise Bounty of $17,600 for First to Root Samsung Galaxy S5

It has been months ago since the release of Samsung’s latest Smartphone, Galaxy S5 and we have seen a portion of International units receive root, but a couple of the carrier variants including the developer edition of Samsung Galaxy S5 for Verizon and At&T hasn’t been in the list, sadly. The...

[SECURITY] Fedora 19 Update: libinfinity-0.5.5-1.fc19

libinfinity is an implementation of the Infinote protocol written in GObjec t-based C...

JVN#55438786: Content Provider in CamiApp for Android fails to restrict access permissions

The Content Provider in CamiApp for Android provided by KOKUYO S&T Co.,Ltd. contains an issue where access permissions are not restricted. Impact If a user of the affected product uses another malicious Android application, information stored in the database may be obtained or altered. Solution...

ThinkSAAS最新版绕过过滤继续注入2处

简要描述： ThinkSAAS最新版绕过过滤继续注入2处 无视gpc，无需登录 详细说明： 之前这个漏洞有 ′ 雨。分析过： WooYun: Thinksaas某处绕过过滤的注射漏洞 现在官方有最新版，做了修改，加了过滤，但是过滤不严格，可以绕过继续注入。 第一处： 现在最新的代码/app/tag/action/addajax.php case "do": $objname = t$POST'objname'; $idname = tsFiltert$POST'idname'; $objid = t$POST'objid'; $tags = t$POST'tags';...

AT&T Cross Site Scripting

. / \ | |/ / / /\ | |\ \ / | \ |/ \ | // / / / Corporation 2014 c Published Report: 27/02/2014 Credits: Advanced Information Security Corporation, USA Severity: High/Critical OWASP TOP 10 Type: Web Application / Cross-Site Scripting . CVSS: 7.0 Author: Nicholas Lemonias. Information Security...

SA-CONTRIB-2014-009 - Tagadelic - Information Disclosure

This module provides an API and a few simple turnkey modules, which allows you to easily create tagclouds, weighted lists, search-clouds and such. The 6.x-1.x version does not account for node access modules, thus leading to information being disclosed. This vulnerability is mitigated by the fact...

T-Mobile HOME NET routers multiple security vulnerabilities

Privilege escalation, code execution, directory traversal CSRF...

SEC Consult SA-20140122-0 :: Critical vulnerabilities in T-Mobile HOME NET Router LTE (Huawei B593u-12)

SEC Consult Vulnerability Lab Security Advisory 20140122-0 ======================================================================= title: Multiple critical vulnerabilities product: T-Mobile HOME NET Router LTE / Huawei B593u-12 vulnerable version: V100R001C54SP063 T-Mobile Austria fixed version:...

Threat Outbreak Alert: Fake Picture Sharing Email Messages on January 30, 2014

Medium Alert ID: 32624 First Published: 2014 January 30 14:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that appear to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...

AT&T Refuses to Issue Transparency Report, Cites Privacy

Telecommunications giant AT&T has come under fire from privacy advocates after it acknowledged that it will not publicly disclose any of its dealings with the National Security Agency. The company claimed that protecting customer privacy is at the crux of its decision not to share government...

CVE-2013-6029

Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file...

Stack overflow

Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file...

CVE-2013-6029

AT&T Connect Participant Application for Windows (v9.5.35 and possibly earlier) contains a stack-based buffer overflow (CWE-121) triggered by opening a malformed .SVT file, allowing a remote attacker to execute arbitrary code in the user’s context. CERT/KB notes the affected product, with an upda...

CVE-2013-6029

Stack-based buffer overflow in the AT&T Connect Participant Application before 9.5.51 on Windows allows remote attackers to execute arbitrary code via a malformed .SVT file...

AT&T Connect Participant Application for Windows v9.5.35 contains a stack-based buffer overflow vulnerability

Overview AT&T Connect Participant Application for Windows v9.5.35 and possibly earlier versions contain a stack-based buffer overflow CWE-121 vulnerability. Description CWE-121: Stack-based Buffer Overflow AT&T Connect Participant Application for Windows v9.5.35 and possibly earlier versions...

DDoS attack from Browser-based Botnets that lasted for 150 hours

Browser-based botnets are the T-1000s of the DDoS world. Just like the iconic villain of the old Judgment Day movie, they too are designed for adaptive infiltration. This is what makes them so dangerous. Where other more primitive bots would try to brute-force your defenses, these bots can simply...

Simple Bug Exposed Verizon Wireless Users' SMS History

A security researcher discovered a simple vulnerability in Verizon Wireless’s Web-based customer portal that enabled anyone who knows a subscriber’s phone number to download that user’s SMS message history, including the numbers of the people he communicated with. The vulnerability, which has bee...

[Кодинг] Основы низкоуровневой оптимизации

Примеры, описанные в статье, носят исключительно академический характер. Всем привет. Хотелось бы рассказать об основах этого нелегкого, но интереснейшего занятия. В качестве рабочего инструмента я буду использовать язык программирования C++, а конкретнее — компилятор g++. Так как само название...

IBM WebSphere Service Registry and Repository Installed

IBM WebSphere Service Registry and Repository, a software life cycle management application, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70069; scriptversion"1.13"; scriptsetattributeattribute:"pluginmodificationdate",...

IBM DB2 Content Manager eClient < 8.4.1.1 Unspecified Security Vulnerability

According to its version number, the IBM DB2 Content Manager eClient install hosted on the remote web server is a version prior to 8.4.1.1, and is, therefore, potentially affected by an unspecified security vulnerability. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...