Law Firms See Uptick As Cybercrime Targets

Cyber-criminals see law firms as particularly lucrative targets that can earn them hundreds of thousands of dollars per heist. Cyberspies also attack attorney firms to steal client data that can be sold or used to learn the details of future litigation. Read the full article. SF Chronicle...

Generic Botnet Client Detection

Binary data 4400.prm...

Design/Logic Flaw

Hitachi Cosminexus Agent 03-00 through 03-05, and Cosminexus Library Standard and Web Edition 04-00 and 04-01, might allow remote attackers to cause a denial of service agent process crash via invalid data from clients other than Cosminexus Manager...

WordPress Plugin SpamBam - Key Calculation Security Bypass

source: https://www.securityfocus.com/bid/27291/info SpamBam is prone to a security-bypass vulnerability because client-accessible data can be used to calculate verification keys. Attackers can exploit this issue to submit arbitrary form data via automated scripts and distribute spam...

CoolForum SQL and XSS Vulnerabilities

Binary data 2725.prm...

Targem Games Battle Mages 1.0 - Remote Denial of Service

Targem Games Battle Mages 1.0 - Remote Denial of Service source: https://www.securityfocus.com/bid/9849/info The Battle Mages game server has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when the server receives incomplete client...

Targem Games Battle Mages 1.0 - Remote Denial of Service

source: https://www.securityfocus.com/bid/9849/info The Battle Mages game server has been reported to be prone to a remote denial of service vulnerability. The issue is reported to present itself when the server receives incomplete client data. Specifically the affected server will attempt to rea...

ColdFusion cross-site scripting security vulnerability of an error page

The outline of vulnerability Macromedia's ColdFusion can display the various information about an error at the time of error occurred. There is information transmitted from a client machine like "Referer". ColdFusion displays the information as it is. An attacker can execute a script on victim's...

Roger Wilco 1.x - Client Data Buffer Overflow

Roger Wilco 1.x - Client Data Buffer Overflow / by Luigi Auriemma Use -DWIN to compile it on Windows UNIX & WIN VERSION / include include include ifdef WIN include include "winerr.h" define close closesocket else include include include include include endif define VER "0.2" define PORT 3782 defi...

Roger Wilco 1.x - Client Data Buffer Overflow

/ by Luigi Auriemma Use -DWIN to compile it on Windows UNIX & WIN VERSION / include include include ifdef WIN include include "winerr.h" define close closesocket else include include include include include endif define VER "0.2" define PORT 3782 define UDPORT 32230 define BUFFSZ 4096 define...

Icecast 1.x - AVLLib Buffer Overflow

// source: https://www.securityfocus.com/bid/4415/info Icecast is a freely available, open source streaming audio server. Icecast is available for the Unix, Linux, and Microsoft Windows platforms. Icecast does not properly check bounds on data sent from clients. Because of this, it is possible fo...