Mudge on the CFT

Peiter Zatko, also known as Mudge, has run the DARPA Cyber Fast Track program for the last three years, but he said that the researcher program is ending on April 1. The CFT program funded a wide range of security research projects in its time, including Charlie Miller’s NFC work and Moxie...

Groundbreaking Cyber Fast Track Research Program Ending

VANCOUVER–When Peiter Zatko, the security researcher and pioneering hacker known as Mudge, joined the federal government several years ago to help run a DARPA research program, some in the security industry wondered what effect someone with his background could have in an organization as famously...

Chinese search engine Baidu launches free Antivirus Suite

Chinese search engine Baidu has just launched a security product called Baidu Antivirus 2013. Described as a ultra light weight, easy to use, extremely fast anti-virus program that promises to protect your system from malware, viruses, spyware, adware and other malicious programs. Most interestin...

[Hashkill 0.3.1] Password Cracker Tool Released

Hashkill is an opensource hash cracker for Linux that uses OpenSSL. Currently it supports 4 attack methods dictionary, bruteforce, hybrid. Hashkill has 35 plugins for different types of passwords ranging from simple hashes like MD5 and SHA1 to passworded ZIP files and private SSL key passphrases...

Microsoft Exchange / FAST Search Server code execution

Code execution on Outlook Web Access document viewing / Advanced Filter Pack because of Oracle Outside In technology vulnerability...

Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities (2784242)

This host is missing an important security update according to Microsoft Bulletin MS13-013. OpenVAS Vulnerability Test $Id: secpodms13-013.nasl 6532 2017-07-05 07:42:05Z cfischer $ Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities 2784242 Authors: Antu Sanadi Copyright: Copyright c...

Microsoft FAST Search Server 2010 SharePoint RCE Vulnerabilities (2784242)

This host is missing an important security update according to Microsoft Bulletin MS13-013. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS13-013: Vulnerabilities in FAST Search Server 2010 for SharePoint parsing could allow remote code execution: February 12, 2013

Resolves vulnerabilities in Microsoft FAST Search Server 2010 for SharePoint when the Advanced Filter Pack is enabled that could allow remote code execution in the security context of a user account that uses a restricted token.IntroductionMicrosoft has released security bulletin MS13-013. To vie...

MS13-013: Vulnerabilities in FAST Search Server 2010 for SharePoint Parsing Could Allow Remote Code Execution (2784242)

The remote host is using a vulnerable version of FAST Search Server 2010 for SharePoint. When the Advanced Filter Pack is enabled, vulnerable versions of the Oracle Outside In libraries are used to parse files. An attacker could exploit this by uploading a malicious file to a site using FAST Sear...

New Version of Kelihos Botnet Appears

Researchers are tracking a new version of the Kelihos botnet, one that comes complete with better resistance to sinkholing techniques and a feature that enables it to remain dormant on infected machines for long periods to help avoid detection. The botnet also is using an advanced fast-flux...

Linksys WRT160N - Multiple Vulnerabilities

Linksys WRT160N - Multiple Vulnerabilities Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fas...

Linksys WRT160N XSS / CSRF / Command Injection

Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do...

How to Relocate Veeam Backup & Replication Backup Files

Other Data Relocation-Related Articles KB2236 --Moving backup files to/from a Scale-Out Backup Repository. KB2321 -- Changing the backup location of Veeam Agent jobs operating in Standalone mode not directly controlled by Veeam Backup & Replication but targeting a Veeam Backup & Replication...

Researchers Discovery Data-Stealing Malware That Likes to Nap

Researchers at FireEye’s Malware Intelligence Lab say they’ve found malware that attempts to evade detection with extended sleep calls and uses “the fast flux technique” to hide the attacker’s identity. They are calling the malicious downloader “Trojan Nap” and notes it uses a technique akin to t...

New Malware Can't Be Caught Napping

The aptly named Trojan Nap, a stealthy type of malware recently discovered by researchers at FireEye is able to evade detection methods by tricking scanners into thinking it’s asleep. This is according to researchers Abhishek Singh and Ali Islam with the California-based security firm who wrote o...

PT-2013-1192 · Moonchild Productions +4 · Pale Moon +4

Name of the Vulnerable Software and Affected Versions: Pale Moon versions prior to 15.4 libpixman version 0.26.2 Description: The issue is related to a stack-based buffer overflow in libpixman, which may have unspecified impact and context-dependent attack vectors. It might be resultant from an...

[SECURITY] Fedora 18 Update: bogofilter-1.2.3-1.fc18

Bogofilter is a Bayesian spam filter. In its normal mode of operation, it takes an email message or other text on standard input, does a statistical check against lists of "good" and "bad" words, and returns a status code indicating whether or not the message is spam. Bogofilter is designed with...

[SECURITY] Fedora 17 Update: php-symfony2-HttpKernel-2.1.6-1.fc17

HttpKernel provides the building blocks to create flexible and fast HTTP-based frameworks. It takes a Request as an input and should return a Response as an output. Using this interface makes your code compatible with all frameworks using the Symfony2 components. And this will give you many cool...

Mandriva Linux Security Advisory : perl-CGI (MDVSA-2012:180)

A vulnerability was discovered and corrected in perl-CGI : CGI.pm module before 3.63 for Perl does not properly escape newlines in 1 Set-Cookie or 2 P3P headers, which might allow remote attackers to inject arbitrary headers into responses from applications that use CGI.pm CVE-2012-5526. The...

[SECURITY] Fedora 16 Update: bogofilter-1.2.3-1.fc16

Bogofilter is a Bayesian spam filter. In its normal mode of operation, it takes an email message or other text on standard input, does a statistical check against lists of "good" and "bad" words, and returns a status code indicating whether or not the message is spam. Bogofilter is designed with...