Lessons Learned From the Gawker Hack

Everyone sounded the alarms at the Gawker Media attack, which included a security breach of websites such as Gizmodo, Lifehacker, Kotaku, io9, and others. The numbers were impressive: 1.3 million user accounts exposed, 405 megabytes of source code lost, and perhaps more important to some, the...

TWSL-2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities

Trustwave's SpiderLabs Security Advisory TWSL2010-008: Clear iSpot/Clearspot CSRF Vulnerabilities https://www.trustwave.com/spiderlabs/advisories/TWSL2010-008.txt Published: 2010-12-10 Version: 1.0 Vendor: Clear http://www.clear.com http://www.clear.com/ Products: iSpot / ClearSpot 4G...

Massive Hack At Gawker Yields Trove of Passwords

A massive hack of systems belonging to online publishing giant Gawker Media has put gigabytes of sensitive information related to Gawker founder Nick Denton and the company’s operations online. But a trove of millions of hashed account passwords could be an even bigger problem for untold numbers ...

Vigilant Hacker-Activist Allegedly Searched and Seized

It is being reported that the internet hacker-activist calling himself the Jester who claimed responsibility for the DDoS attacks on Wikileaks Sunday has been the subject of a search and seizure by local law enforcement officials. The raid reportedly took place Monday according to a blog posted...

Hacker Poses as Graduate, Hacks Student Emails, Faces Legal Consequences

A hacker who posed as a university graduate to access the emails of hundreds of students has been given a suspended prison sentence and ordered to pay more than £20,000 in costs and compensation. Daniel Woo, a 23-year-old Bulgarian national, was sentenced for offenses under the Misuse of Computer...

6) (Anti) social networking

Social networks like Facebook and Twitter are fabulous platforms for sharing information and news. Retailers of all stripes have tapped into this and are using them to get the word out – virally – about discounts, sales and in-store events. Unfortunately, mechanisms for vetting online reputation...

FBI Warns of Rising Smishing and Vishing Scams This Holiday Season

Social networking sites and search engines are expected to face increased cybercriminal activity this holiday season. However, the FBI is also warning consumers about two other significant threats: “smishing” and “vishing” scams. Both smishing and vishing are forms of phishing. Smishing involves...

WikiLeaks Confirms China's Responsibility for Aurora Attacks

It is being reported that WikiLeaks latest release of 250,000 diplomatic cables confirms the suspicion that China was responsible for the Aurora attacks on Google’s computer systems in January. Both Google and the State Department initially believed China was responsible for the attacks, but the...

Directory traversal

Multiple directory traversal vulnerabilities in the returnapplicationlanguage function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the langcrm parameter to phprint.php or 2 the currentlanguage...

CVE-2010-3910

Multiple directory traversal vulnerabilities in the returnapplicationlanguage function in include/utils/utils.php in vtiger CRM before 5.2.1 allow remote attackers to include and execute arbitrary local files via a .. dot dot in 1 the langcrm parameter to phprint.php or 2 the currentlanguage...

Camtron CMNC-200 camera multiple security vulnerabilities

Buffer overflow in installable ActiveX component, directory traversal, backdoor accounts m/merlin, unauthorized access, DoS...

Cisco Unified Videoconferencing multiple security vulnerabilities

Hardcoded user accounts, command execution, unauthorized access, password storing in reversible encryption, weak permissions, session hijacking, information leaks...

Facebook Glitch Locks Out Accounts

A bug in an account verification system used by Facebook resulted in a wave of account suspensions Tuesday that had users locked out of the world’s largest social network and scratching their heads over the reason. Facebook discovered a bug in a system designed to detect and disable fake accounts...

Fedora Update for gnucash FEDORA-2010-16622

Check for the Version of gnucash OpenVAS Vulnerability Test Fedora Update for gnucash FEDORA-2010-16622 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Camtron CMNC-200 IP Camera Undocumented Default Accounts

Exploit for hardware platform in category web applications ======================================================== Camtron CMNC-200 IP Camera Undocumented Default Accounts ======================================================== The CMNC-200 IP Camera has undocumented default accounts on its Lin...

Camtron CMNC-200 IP Camera - Undocumented Default Accounts

Camtron CMNC-200 IP Camera - Undocumented Default Accounts Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be...

Camtron CMNC-200 IP Camera - Undocumented Default Accounts

Finding 4: Undocumented Default Accounts CVE: CVE-2010-4233 The CMNC-200 IP Camera has undocumented default accounts on its Linux operating system. These accounts can be used to login via the cameras telnet interface, which cannot be normally disabled. The usernames and passwords are listed below...

Camtron CMNC-200 IP Camera Traversal / Overflow / Bypass / Denial Of Service

Trustwave's SpiderLabs Security Advisory TWSL2010-006: Multiple Vulnerabilities in Camtron CMNC-200 IP Camera https://www.trustwave.com/spiderlabs/advisories/TWSL2010-006.txt Published: 2010-11-12 Version: 1.0 Vendors: Camtron http://www.camtron.co.kr/ TecVoz http://www.tecvoz.com.br/ Products:...

[SECURITY] Fedora 13 Update: gnucash-2.3.15-2.fc13

GnuCash is a personal finance manager. A check-book like register GUI allows you to enter and track bank accounts, stocks, income and even currency trades. The interface is designed to be simple and easy to use, but is backed with double-entry accounting principles to ensure balanced books...

Home FTP Server 1.10.3 / 1.11.1 Directory Traversal

Exploit Title: Home FTP Server Directory Traversal Date: Oct 28, 2010 Author: chr1x Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Description: Home Ftp Server is an easy to use FTP server, that allows you to share files directly from your PC with lots of setup...