Novatel MiFi 2352 Access Bypass

In spanish: http://www.securitybydefault.com/2010/01/vulnerabilidad-en-modemrouter-3g.html Producto: Novatel MiFi 2352 Version: access point firmware 11.47.17 router firmware: 012 modem firmware: 5.15.00.0-00 2009-06-26 10:24:29 Vulnerability: You can access to xml configuration file with clear...

ZyXel GS1510 Cross Site Scripting

Advisory Information Title: Multiple vulnerabilities in ZyXel GS1510 web front end Date published: 2012-03-14 12:57:15 AM upSploit Ref: UPS-2011-0042 Advisory Summary IT Security Geeks have discovered multiple vulnerabilities in the ZyXel 1510 24-port Ethernet switch, these include Admin password...

CVE-2011-1162

The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command...

Mambo CMS 4.6.5 Denial Of Service / Disclosure

Larry W. Cashdollar 1/2/2012 http://vapid.dhs.org About Mambo: "Mambo is a full-featured content management system that can be used for everything from simple websites to complex corporate applications." http://mambo-code.org 1. Clear text password/crypt: Mambo stores mysql database password in...

MODBUS Client 'Clear Counters and Diagnostic Registers' Request (SCADA) (deprecated)

Binary data 6259.prm...

Anonymous Hacks Security Think Tank STRATFOR

Hackers with Anonymous have struck a well-known security and intelligence think tank based in Texas and made off with some 200 GB of credit card data and other information. Members of the loosely-affiliated collective announced the attack on STRATFOR on Twitter. Among the items reportedly pilfere...

China Software Developer Network (CSDN) 6 Million user data Leaked

China Software Developer Network CSDN 6 Million user data Leaked The "Chinese Software Developer Network" CSDN, operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name,...

DSA-2365-1 dtc - several

Bulletin has no description...

kernel: tpm: infoleak

The tpmread function in the Linux kernel 2.6 does not properly clear memory, which might allow local users to read the results of the previous TPM command...

UBUNTU-CVE-2011-3881

WebKit, as used in Google Chrome before 15.0.874.102 and Android before 4.4, allows remote attackers to bypass the Same Origin Policy and conduct Universal XSS UXSS attacks via vectors related to 1 the DOMWindow::clear function and use of a selection object, 2 the...

CVE-2011-3881

CVE-2011-3881 affects WebKit as used in Google Chrome <15.0.874.102 and Android

DHS Thinks Some SCADA Problems Are Too Big To Call "Bug"

The Stuxnet worm may be the most famous piece of malicious software ever written. When it was first detected, a little over a year ago, the worm sounded a warning to nations around the world that critical infrastructure systems were potential targets of attack for foreign governments and cyber...

Lost Door J-Revolution Denial of Service Vulnerability

This host is running Lost Door J-Revolution and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: gblostdoordosvuln.nasl 7052 2017-09-04 11:50:51Z teissa $ Lost Door J-Revolution Denial of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2011 Greenbone...

Trojan Last Door v6 (Latest version) Denial of service

Exploit for windows platform in category dos / poc / LostDoor v6 Remote Denial Of Service Author: Kevin R.V Date: 2011 License: Totally free 8- Some information: The protocol used by LastDoor v6 is a simply clear text protocol with a delimitter, thats a normal packet to connect v1ct1m\AS/My...

Synergy Protocol Information Disclosure Vulnerability (Windows)

This host is installed with Synergy and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbsynergyprotocolinfodiscvulnwin.nasl 8189 2017-12-20 09:10:19Z cfischer $ Synergy Protocol Information Disclosure Vulnerability Windows Authors: Sooraj KS Copyright: Copyrigh...

Kitchen Confidential: Mass. Case Lays Bare Unsanitary Data Security Practices

I worked in my share of kitchens when I was younger. I washed dishes, made salads, sous cheffed and worked the grill as a short order cook. And let me say this: one rule you learn when you work in the kitchen is – to borrow a phrase from the folks in ‘Vegas – ‘what happens in the kitchen stays in...

IF-CMS 2.07 - Local File Inclusion (1)

IF-CMS 2.07 - Local File Inclusion 1 !/usr/bin/python INFORMATION Exploit Title: If-CMS 2.07 Pre-Auth Local File Inclusion 0day Exploit Author: TecR0c Date: 13/3/2011 Software link: http://bit.ly/hh9ZB4 Tested on: Linux bt Version: 2.07 PHP.ini Settings: gpcmagicquotes = Off import...

kernel security and bug fix update

2.6.18-238.5.1.0.1.el5 - scsi fix scsi hotplug and rescan race orabug 10260172 - fix filpclose race Joe Jin orabug 10335998 - fix missing aiocomplete in endio Joel Becker orabug 10365195 - make xenkbd.abspointer=1 by default orabug 67188919 - xen check to see if hypervisor supports memory...

HTC Peep information leak

Application send twitter credentials in clear text...

CVE-2011-0685

CVE-2011-0685 affects Opera before 11.01 where the Delete Private Data feature’s Clear all email account passwords option was not properly implemented, potentially allowing a physically proximate attacker to access an email account on an unattended workstation. Connected advisories (SUSE/OpenSUSE...