VERA v0.3 - Visualizing Executables for Reversing and Analysis tool !

"VERA is a Visualizing Executables for Reversing and Analysis tool. It is a tool for reverse engineering Windows executables. It is used in conjunction with the Ether framework to generate visualizations to help with the RE process." This is the official change log: Added processing of trace file...

ICONICS GENESIS32 and BizViz ActiveX Stack Overflow

Overview Security researchers Scott Bell and Blair Strang of Security-Assessment.com have released a report detailing a stack overflow vulnerability affecting ICONICS GENESIS32 and BizViz products. The vulnerable ActiveX control, GenVersion.dll, is a component of WebHMI, which is incorporated in...

HBGary Federal hacked and exposed by Anonymous !

As the coin was tossed to kick off Superbowl XLV, Anonymous unleashed their anger at a security firm who had been investigating their membership. HBGary Federal had been working on unmasking their identities in cooperation with an FBI investigation into the attacks against companies who were...

UK foreign secretary : "We are under Cyber attack" !

Yesterday, the UK adopted secretary, William Hague, explained to a aegis appointment in Munich how cyber abyss were aggravating to access the UK government and aegis contractors. According to a BBC report, Mr. Hague explained that attackers had adulterated government computers with the Zeus troja...

Drupal Panels 5.x-1.2 XSS Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL. The Drupal Panels module http://drupal.org/project/panels "allows a site administrator to create...

Drupal Custom Pagers Module Cross Site Scripting

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Description of Vulnerability: - ----------------------------- Drupal http://drupal.org is a robust content management system CMS written in PHP and MySQL. The Drupal Custom Pagers module http://drupal.org/project/custompagers "allows administrators to...

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories

The wrong executable may be used to display a downloaded file in its folder – Opera Security Advisories OPCOM Team | January 28, 2011 Severity Low Affected versions This issue affects Opera for Microsoft Windows. Description Opera’s downloads manager allows users to select a file, and open the...

The wrong executable may be used to display a downloaded file in its folder

Opera's downloads manager allows users to select a file, and open the folder containing that file. This file will be opened using the operating system's file system viewer. In some cases, Opera will use the wrong executable when trying to show the folder view, and that executable may execute code...

Fake AV Scareware Passively Served

A piece of fake anti-virus scareware, Antivirus 8, has been infecting computers via ICQ in recent days according to Roel Schouwenberg at Securelist. What makes this fake antivirus popup intriguing is that it appears infecting users who are not actively using their computer. While most fake...

Signed Applet Social Engineering - Code Execution (Metasploit)

$Id: javasignedapplet.rb 11516 2011-01-08 01:13:26Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Wonderware InBatch Client ActiveX Buffer Overflow

OVERVIEW ICS-CERT has received a report from independent security researcher Jeremy Brown regarding a buffer overflow vulnerability in a Wonderware InBatch Client ActiveX control. According to the researcher’s report, the client ActiveX control is vulnerable to a buffer overflow that could cause...

Cyber criminals to be more aggressive in 2011 !

New Delhi: With the growing diversity of operating systems among companies, and the increasing use of mobile devices, cyber criminals will put a new spin on social engineering by 'malware campaign' under which they will bombard recipients with email that drop virus downloaders. According to an...

The Blackbuntu Community Edition Download !

The Blackbuntu Community Edition is a Linux Live-CD based on Ubuntu 10.10 which was specially designed for security training students and practitioners of information security. Another tool for penetration testers collection that could be considered as a competition for Pentoo. It supports the...

Exploit Kits Employing Obfuscation to Prevent Analysis

The creators of the Phoenix exploit kit have begun using obfuscation and other techniques to prevent security researchers and others from reverse-engineering the installation process for the kit, adopting a tactic that has become increasingly popular among attackers recently. The Phoenix exploit...

HttpBlitz Web Server - Denial of Service

HttpBlitz Web Server - Denial of Service !/usr/bin/python Title: HttpBlitz DOS Date: 12/24/2010 Author: otoy Software Link: http://sourceforge.net/projects/httpblitz/files/HttpBlitz.msi/download Tested on: Windows XP SP3 ====================================================================== / / /...

PandaLabs Predicts Major Cybersecurity Trends for 2011

PandaLabs, the antimalware laboratory of Panda Security, has predicted several major cybersecurity threats for 2011. These include hacktivism, cyber warfare, profit-driven malware, social engineering, and adaptive malicious codes. Additionally, there will be increased threats to Mac users, new...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

Michael Calce Warns of Online Dangers at HDS Canada's Forum

The guest keynote speakers at technology conferences can vary in quality, but Hitachi Data Systems HDS Canada NYSE: HIT made a smart choice by inviting Michael Calce, also known as Mafiaboy, to speak at their recent Information Forum event in Toronto. Calce gained notoriety as a teenage hacker fr...

Adobe PDF - Escape EXE Social Engineering (No JavaScript) (Metasploit)

$Id: adobepdfembeddedexenojs.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Adobe PDF - Embedded EXE Social Engineering (Metasploit)

$Id: adobepdfembeddedexe.rb 11353 2010-12-16 20:11:01Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...