Windows Error Reporting Used to Find Advanced Exploits

Windows Error Reporting, also known as Dr. Watson reports, are Windows crash reports sent by default unencrypted to Microsoft, which uses them to fix bugs. The reports are rich with system data that Microsoft also uses to enhance user interaction with its products. Since, however, they are sent i...

LinkedIn Intro Service to Shut Down March 7

LinkedIn announced on Friday it was shuttering its four-month-old Intro service which stirred up a privacy meltdown shortly after its release in October. Intro was an integrated service for iOS which sat as a proxy between the built-in iOS mail client and the user’s email provider. Intro would...

'LinkedIn Intro' iOS app can read your emails in iPhone

Your LinkedIn profile is your digital resume. Yesterday, LinkedIn launched a new app for for iOS devices called Intro 'LinkedIn Intro'. With this feature an email on your iPhone will display a picture of the sender, with useful profile info from LinkedIn. Basically, to use the service, a LinkedIn...

Apple Mac OS X 'IPSec Hybrid Auth' 服务器证书安全绕过漏洞(CVE-2013-1028)

BUGTRAQ ID: 62371 CVECAN ID: CVE-2013-1028 Apple Mac OS X是苹果电脑操作系统软件。 Mac OS X 10.8 - 10.8.4存在安全漏洞，攻击者可以截获IPSec Hybrid Auth所保护的数据。IPSec Hybrid Auth服务器的DNS名称没有匹配证书，可使具有任何服务器证书的攻击者利用此漏洞模拟其他服务器。 0 Apple Mac OS X 10.8 - 10.8.4 Apple Mac OS X 厂商补丁： Apple ----- Apple已经为此发布了一个安全公告（HT5880）以及相应补丁:...

Researchers Reverse Engineer Dropbox

Researchers have cracked open cloud storage service Dropbox, reverse engineering the encryption protecting the client in order to open it up to further security analysis. The engineers, Dhiru Kholia of Openwall and Przemyslaw Wegrzyn of CodePainters, also managed to demonstrate how to use...

STOP using Facebook and Google and if you fear US spying

Edward Snowden, a former NSA systems analyst, have revealed the NSA's sweeping data collection of U.S. phone records and some Internet traffic and the programs target foreigners and terrorist suspects mostly overseas.According to the Constitution of all countries, capturing and reading emails or...

Italian team discoveries flaw in Ruzzle protocol, serious menace to privacy

We are in digital era, everything is connected to the large networks and applications benefit of even more complex devices that deeply interact with owner, in this scenario security requirements assume a crucial importance and security of overall architecture also depend on security of single...

Deep Packet Inspection Firm Cyberoam Issues Fix Following Private Key Leak

Network security firm Cyberoam issued an over the air update for all of its Deep Packet Inspection DPI devices today after a decrypted version of the company’s universal private key was leaked online over the weekend. The New Jersey-based company pushed the hotfix after an anonymous commenter...

Yahoo Mail - Cross Site Scripting & Webfilter Bypass

Document Title: =============== Yahoo Mail - Cross Site Scripting & Webfilter Bypass Release Date: ============= 2011-06-29 Vulnerability Laboratory ID VL-ID: ==================================== 130 Product & Service Introduction: =============================== Enjoy tons of features and fun wa...

DSA-2169-1 telepathy-gabble - missing input validation

Bulletin has no description...

Threats Go Mobile

Smartphone adoption has exploded in recent years, and this has not been lost on the attackers who are looking for the best way to separate users from their money and confidential data. There were several examples of attackers sneaking malicious applications into mobile app stores, some disguised ...

Mobile Security Woes Go Beyond Malicious Apps

If, like most Americans, you’ve developed an attachment to your mobile phone that borders on the unnatural and have a hard time going 11 seconds without checking email or texts, you’d do well not to attend a talk by Zach Lanier and Mike Zusman anytime soon. The pair discussed a variety of...

Wireless penetration-from the external network to the internal network series of MITM man in the middle attacks-vulnerability warning-the black bar safety net

Author:Christopher Yang "ZerOne" , Welcome reproduced, reproduced please indicate the author and source） Preface: recently busy faint day secretly, but not many people can share, all the important things are to hands-on force, tired........ Finally have free when get previous articles sort, the...

WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability

Exploit for unknown platform in category web applications ======================================================== WebXell Editor 0.1.3 Arbitrary File Upload Vulnerability ======================================================== ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O...

Bole asp receiving program vulnerabilities and the use of the program-vulnerability warning-the black bar safety net

Horses receiving the programfor the previous old version. Later patched this vulnerability Primary database name using the first set is random generated..but because he is the Universal addressee of the program..can be intercepted Secret security.. mibao. asp file to the submitted parameters...

Invision Power Board (IP.Board) 2.1.7 - ACTIVE Cross-Site Scripting SQL Injection

Invision Power Board IP.Board 2.1.7 - ACTIVE Cross-Site Scripting SQL Injection ---- INVISION POWER BOARD 2.1.7 EXPLOIT ... ITDefence.ru Antichat.ru INVISION POWER BOARD 2.1.7 ACTIVE XSS/SQL INJECTION Eugene Minaev [email protected] / \ \ \ / .\ / /// // / \ / \ // / / / /// /\ / / / / // /...

SACERDOTE

Some FTP data transfer protocol problems, common implementation errors and suggestions for fixing them David Sacerdote, [email protected] April, 1996, The icons .... show the translator's comments. The symbol ? shows places where the translator disagrees with the author. Original text of the...

Cisco SSH multiple bugs

It's possible to insert command and intercept data from ssh session...

AIM Remote File Transfer/Direct Connection Vulnerability

AIM Remote File Transfer/Direct Connection Vulnerability I Discovered this vulnerability while I was port scanning my brotherApril 15th, 2002, he just happened to send me a file and the port scan connected and received the file instead of me... The next dayApril 16th, 2002 I made a program to...

Oracle9iAS Web Cache vulnerable to buffer overflow

Overview A remotely exploitable buffer overflow in the Oracle9iAS Web Cache allows intruders to execute arbitrary code or cause the web cache process to hang or exit. Description Defcom Labs has discovered a remotely exploitable buffer overflow vulnerability in the Oracle9iAS Web Cache on all...