DerbyCon Security Conference 2011

We are happy to announce that Offensive Security will be sponsoring DerbyCon. DerbyCon is a new hacker conference located in Louisville Kentucky. Our goal is to bring back an old style, community driven hacker con chocked full of amazing talks, live events and all around fun. The idea for DerbyCo...

MumbaiITPro User Group Hacked by TriCk [TeaMp0isoN]

MumbaiITPro User Group Hacked by TriCk TeaMp0isoN MumbaiITPro User Group is an online technical community initiative for the IT Professionals. They are supported by Global IT Community Association GITCA and Microsoft Corporation. Hacked site : Mirror :...

FreeBSD : quagga -- two DoS vulnerabilities (b2a40507-5c88-11e0-9e85-00215af774f0)

Quagga developers report : Quagga 0.99.18 has been released. This release fixes 2 denial of services in bgpd, which can be remotely triggered by malformed AS-Pathlimit or Extended-Community attributes. These issues have been assigned CVE-2010-1674 and CVE-2010-1675. Support for AS-Pathlimit has...

Security Stories We Wish Had Been April Fool's Jokes

There’s a grand tradition in the security community of clever, cerebral and sometimes downright inane April Fool’s pranks. They often take the form of fake news stories about viruses, world-ending attacks or something involving Bruce Schneier and Chuck Norris. But the security world is bizarre...

CVE-2010-1674

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed Extended Communities attribute...

CVE-2010-1674

Removed by vendor...

The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

PT-2011-2735

Name of the Vulnerable Software and Affected Versions HP Discovery & Dependency Mapping Inventory DDMI versions 7.50 through 7.70, 9.30 Description The issue allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read communit...

CVE-2011-0890: Exposure of Sensitive Information to an Unauthorized Actor

HP Discovery & Dependency Mapping Inventory DDMI 7.50, 7.51, 7.60, 7.61, 7.70, and 9.30 launches the Windows SNMP service with its default configuration, which allows remote attackers to obtain potentially sensitive information or have unspecified other impact by leveraging the public read...

HP Discovery & Dependency Mapping Inventory information leak

public community has SNMP read access by default...

CMS Loko Media - Local File Download

CMS Loko Media - Local File Download !===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net Date : 16 Mei,...

CMS Loko Media - Local File Download

!===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net Date : 16 Mei, 2010...

SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)

This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...

Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

Dennis Fisher talks with Microsoft’s Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges–and fun–of being a woman in security. Podcast audio courtesy of sykboy6...

Attackers Targeting MHTML Bug in Windows

There is a wave of ongoing attacks against a bug in MHTML that affects all of the current versions of Windows, and there seems to be little recourse for sites trying to protect their users from the attacks. The current spate of attacks is targeting users of Internet Explorer, and experts are...

Why Pwn2Own Is What's Right With Security

VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...

How to join Anonymous Hacker - Identity less Cyber Heroes ?

How to join Anonymous Hacker - Identity less Cyber Heroes ? We have a long fight ahead of us. lets work toward a better world together. together we can do what our elected officials refuse to do. make the world a better place. We Are Legion. Expect Us. Protect your identity : Click Here HOW TO...

Shia Community Forums hacked by ALM3R3FH

Shia Community Forums hacked by ALM3R3FH Hacked site : www.shiaforums.com Mirror: News Source : ALM3R3FH...

DHS Needs to Change Rules to Recruit Hackers into U.S. Security Agencies !

Members of the hacker community are leery of working with the government and sharing their skills, if it means navigating through outdated regulations and being viewed as potential security risks. Hackers and other computer experts willing to collaborate with the Department of Homeland Security t...

U.S. Military's Cyber Chief Warns Of Eroding Technical Prowess

SAN FRANCISCO — The U.S. Military’s top officer in charge of cyber security said that the country must invest more in so-called “STEM” programs – science, technology, engineering and math – to avoid being outflanked in a world where cyber offensive- and defensive operations are the keys to milita...