New Approach to automatically detecting bugs and vulnerabilities in Linux

New Approach to automatically detecting bugs and vulnerabilities in Linux Australian researcher Silvio Cesare, PhD student at Deakin University has released a tool capable of automatically detecting bugs and vulnerabilities in embedded Linux libraries. Developers may "embed" or "clone" code from...

Wireshark 1.4.4 - DECT Dissector Remote Buffer Overflow

!/usr/bin/env python -- coding: iso-8859-15 -- a = """ \n\t-- CVE: 2011-1591 : Wireshark = 2.5 For any comments, remarks, news, please mail me : ipv at team . net \n""" import sys, struct if sys.versioninfo = 2, 5: from scapy.all import else: from scapy import align def xv: return struct.pack"I",...

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool

PHP Vulnerability Hunter v.1.1.4.6 - Automated fuzz testing tool This is the application that detected almost all of the web application vulnerabilities listed on the advisories page. PHP Vulnerability Hunter is an advanced automated whitebox fuzz testing tool capable of triggering a wide range o...

Facebook And Twitter Erode Your Company's Security From Within. Here's How To Stop It.

The “up side” of social networks like Facebook, Twitter and G+ are well known. But the down side of these networks for both users and for organizations that employ them are only now becoming clear. Worms, malware and spam are just the beginning of the security problems engendered by the social ne...

poMMo Aardvark PR16.1 Cross Site Scripting

Hello list! I want to warn you about multiple security vulnerabilities in poMMo. These are Cross-Site Scripting, Brute Force and Insufficient Anti-automation vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are all versions of poMMo poMMo Aardvark...

Stuxnet's Son "Duqu" Removal Tool released by Bitdefender

Stuxnet's Son "Duqu " Removal Tool released by Bitdefender Rootkit.Duqu is a new e-threat that combines the technology of the military-grade Stuxnet with an advanced keylogger and backdoor application. Due to its rootkit technology, the piece of malware can stay hidden from the user, the operatin...

Automated Skype calls spreading fake anti-virus warning

Automated Skype calls spreading fake anti-virus warning Automated Skype calls spreading fake anti-virus warning, where an automated message what I like to call a "Digital Dorothy" warns you in a semi-robotic voice that your computer's security is not up-to-date. "Attention: this is an automated...

Automated Skype calls spreading fake anti-virus warning

Automated Skype calls spreading fake anti-virus warning Automated Skype calls spreading fake anti-virus warning, where an automated message what I like to call a "Digital Dorothy" warns you in a semi-robotic voice that your computer's security is not up-to-date. "Attention: this is an automated...

OWASP Zed Attack Proxy (ZAP) v.1.3.2 Released

OWASP Zed Attack Proxy ZAP v.1.3.2 Released The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.It is designed to be used by people with a wide range of security experience and as such is ideal for developers and...

OWASP Zed Attack Proxy (ZAP) v.1.3.2 Released

OWASP Zed Attack Proxy ZAP v.1.3.2 Released The OWASP Zed Attack Proxy ZAP is an easy to use integrated penetration testing tool for finding vulnerabilities in web applications.It is designed to be used by people with a wide range of security experience and as such is ideal for developers and...

GFI SandBox - Powerful automated malware analysis

GFI SandBox - Powerful automated malware analysis GFI SandBox™ formerly CWSandbox is an industry leading dynamic malware analysis tool. It gives you the power to analyze virtually any Windows application or file including infected: Office documents, PDFs, malicious URLs, Flash ads and custom...

Facebook Mobile User Enumeration

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Facebook doesn't ensures the user information may not be collected by any bot or any automated process. Even though you can protect from this kind of attacks using captchas or tokens security into the forms. Step by step: - - Go to http://m.facebook.c...

Web Application Testing: Vega

Vega is an open source platform to test the security of web applications. Vega can help you find and validate SQL Injections, Cross-Site Scripting XSS, inadvertently disclosed sensitive information, and other vulnerabilities. It is written in Java, GUI based, and runs on Linux, OS X, and Windows...

Use of Exploit Kits on the Rise

Online attacks are increasingly being carried out by multi-function exploit kits, according to research by Web security firm zSclare. In a blog post, ZScaler’s Pradeep Kulkarni claims to have observed an increase in the prevalence and usage of exploit kits in recent months, a development he...

Make captcha harder, or allow configuration of captcha difficulty, in order to prevent sophisticated spam attacks

panel:bgColor=e7f4fa NOTE: This suggestion is for Confluence Cloud. Using Confluence Server? See the corresponding suggestion|http://jira.atlassian.com/browse/CONFSERVER-22700. panel Every day we get a load of automated anonymous comment spam on our confluence pages. It seems that the captcha is...

Trojan Last Door v6 (Latest version) Denial of service

Exploit for windows platform in category dos / poc / LostDoor v6 Remote Denial Of Service Author: Kevin R.V Date: 2011 License: Totally free 8- Some information: The protocol used by LastDoor v6 is a simply clear text protocol with a delimitter, thats a normal packet to connect v1ct1m\AS/My...

Automated Solutions Modbus/TCP OPC Server Detection

Binary data scadaappautomatedasmbtcpopcdetect.nbin...

Universal Fuzzer by Codenomicon !

Codenomicon is a Finland based Information Security company. Recently it has released a universal fuzzer, a fuzz testing solution that combines heuristics and multiple fuzzers with a graphical user interface, automated test executions and reporting features. Fuzzing has been popular between hacke...

WiFite The WEP/WPA Cracker version r68 released !

WiFite The WEP/WPA Cracker version r68 released ! Designed for Backtrack4 RC1 distribution of Ubuntu. Linux only; no windows or osx support. Purpose : to attack multiple WEP and WPA encrypted networks at the same time. this tool is customizable to be automated with only a few arguments. wifite ca...