CVE-2014-5738

The Garfield's Defense (com.webprancer.google.garfieldDefense) Android app, version 1.5.4, is described as not verifying X.509 certificates from SSL servers. This vulnerability allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate. Reported...

cmseasy csrf导致sql注入绕过union getshell

简要描述： 上一次做了一个csrf+sql注入getshell的 这一次我继续发一个，由于此属于一个get类型的，所以很简单的，管理员根本就不用去点击，就能触发sql并且getshell 详细说明： 首先我们分析一下sql语句： admin/live/header.php:line:16-21 include'../../include/config.inc.php'; includeCEROOT.'/include/admin/check.inc.php'; includeCEROOT.'/include/celive.class.php'; $adminheader = new...

Facebook Awards $50,000 Under Its New 'Internet Defense Prize' Program

Along with a dream to make Internet access available to everyone across the world, Facebook founder Mark Zuckerberg is working to make the Internet a more secure place as well. Till now, a number of large technology companies have bug bounty programs to reward researchers and cyber enthusiast who...

New Facebook Internet Defense Prize Pays Out $50,000 Award

Large technology companies may already have bug bounty programs in place that reward researchers who attack and find holes in software or web platforms. Slowly, some are also starting to institute programs that pay for defensive measures. Facebook is the latest to do so with the implementation of...

Anonymous Group Takes Down Mossad's Website Over Gaza Conflict

The hacktivist group Anonymous has reportedly taken down the official website of the Israeli intelligence agency Mossad against Israel’s military incursion in Gaza, which has resulted in hundreds of civilian casualties. The government of Israel has yet to comment on the Mossad hack attack. The...

General Availability for Enhanced Mitigation Experience Toolkit (EMET) 5.0

Today, we are excited to announce the general availability of Enhanced Mitigation Experience Toolkit EMET 5.0. EMET is a free tool, designed to help customers with their defense in depth strategies against cyberattacks, by helping block and terminate the most common techniques adversaries might u...

Announcing EMET 5.0

Today, we are excited to announce the general availability of the Enhanced Mitigation Experience Toolkit EMET 5.0. As many of you already know, EMET is a free tool, designed to help customers with their defense in depth strategies against cyberattacks, by helping detect and block exploitation...

Chinese Hackers Stole Blueprints of Israel's Iron Dome Missile Defense System

Chinese hackers infiltrated the databases of three Israeli defense contractors and stole plans for Israel's Iron Dome missile defense system, according to an investigation by a Maryland-based cyber security firm ‘Cyber Engineering Services Inc. CyberESI’. Not just this, the hackers were also able...

Israeli Defense Firms Hacked For 10-Month Span

Detailed schematics for a particular type of anti-ballistic missile, information about rockets, and pages upon pages of other mechanical documents were allegedly stolen from a trio of Israeli defense contractors between 2011 and 2012, it was revealed today. A Maryland-based threat intelligence fi...

RHEL 5 : MRG (RHSA-2012:1278)

Updated Grid component packages that fix several security issues, add various enhancements and fix multiple bugs are now available for Red Hat Enterprise MRG 2 for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. Common...

phpyun绕过360艰难的SQL注射

简要描述： 想在PHP云里进行一次SQL注射，真的是好难。 详细说明： 我首先发现了一个SQL注射，这个过程也不轻松。 在phpyun/model/class/action.class.php中 function getadminusershell if$SESSION'auid' && $SESSION'ashell' $row=$this-admingetusershell$SESSION'auid',$SESSION'ashell'; if!$row$this-logout;echo "无权操作！";die; if$GET'm'=="" || $GET'm'=="index" ||...

CylantSecure 1.0 Kernel Module Syscall Rerouting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2958/info CylantSecure is a commercial Linux hardening tool and security infrastructure available from Cylant Technology. A problem in the CylantSecure infrastructure could allow users to escape monitoring. A user with ro...

CA Total Defense Suite reGenerateReports Stored Procedure SQL Injection

No description provided by source. $Id: catotaldefenseregeneratereports.rb 13810 2011-10-02 17:03:23Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

[SECURITY] Fedora 20 Update: lynis-1.5.6-1.fc20

Lynis is an auditing and hardening tool for Unix/Linux and you might even c all it a compliance tool. It scans the system and installed software. Then it performs many individual security control checks. It determines the hardeni ng state of the machine, detects security issues and provides...

PHPYUN最新版SQL注入二处（绕过防御）

简要描述： PHPYUN最新版（phpyunv3.1.0604gbk）SQL注入二处，无视GPC（绕过防御） 详细说明： PHPYUN最新版（phpyunv3.1.0604gbk）SQL注入二处 第一处SQL注入： 文件/member/model/com.class.php function job if$GET'puid' $data'puid'=int$GET'puid'; $data'inputtime'=mktime; $data'cuid'=$this-uid; $data'usertype'=$COOKIE'usertype';...

DARPA Cyber Grand Challenge Finale Set For DEF CON 2016

DARPA’s announcement last October that it would sponsor a $2 million contest, challenging academics and security industry stalwarts to come up with an automated network defense system, has already attracted 35 entrants and a high-profile venue to stage the tournament finale. The final stage of th...

Destoon B2B 2014-05-21最新版绕过全局防御暴力注入（官方Demo可重现）

简要描述： destoon某加密函数缺陷可破解导致注入 由于字符串加密，所以自带的全局stripsql gpc等直接无视了 使用不安全的“随机数”的实例 搬个小凳子吧，这个一时半会儿说不完。。。 详细说明： 出问题的是用于cookie加解密的encrypt和decrypt函数 首先看一下函数内容include/global.func.php 122行 function encrypt$txt, $key = '' $key or $key = DTKEY; //DTKEY是在安装时生成的一个15位随机字符串 $rnd = md5microtime;//缺陷 下面说 $len =...

Upload the file of trap-vulnerability warning-the black bar safety net

0x00 background Now many sites allow users to upload files, but they didn't realize that allow the user or attacker to upload files or even the legitimate files of the trap. What is a legitimate file? Generally, to determine whether the file is legitimate through two parameters: the file suffix,...

Iranian Ajax Security Team targets US Defense Industry

The Iranian hacking group, which calls itself the “Ajax Security Team”, was quite famous from last few years for websites defacement attacks, and then suddenly they went into dark since past few months. But that doesn't mean that the group was inactive, rather defacing the websites, the group was...

Iranian Hackers Target US Defense Contractors

An Iranian hacking group has moved from politically motivated website defacements to a new specialty – cyberespionage. The group known as the Ajax Security Team has been outed as the perpetrators of a number of espionage operations against U.S.-based defense contractors in addition to targeting...