Western Digital TV (WD-TV) Live Remote Code Execution

Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of its user interface and limited remote...

Samsung D6000 TV - Multiple Vulnerabilities

Samsung D6000 TV - Multiple Vulnerabilities Luigi Auriemma Application: Samsung devices with support for remote controllers http://www.samsung.com Versions: current Platforms: the vulnerable protocol is used on both TV and blue-ray devices so both of them should be vulnerable my tests were...

Windows Phone 7.5 Denial of Service Attack Vulnerability (Video Demonstration)

Denial of Service Attack Vulnerability in Windows Phone 7.5 Microsoft's range of Windows Phones suffer from a denial-of-service attack bug that allows attackers to reboot the device and disable the messaging functionality on a device. A malicious SMS sent to a Windows Phone 7.5 device will force ...

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella

WD TV Live Hub Compromised - Multiple Vulnerabilities Found By Dr. Alberto Fontanella Dr. Alberto Fontanella found on Western Digital WD TV Live Hub appliance with the last firmware installed 2.06.10 and 3 exploits to get admin password, deface appliance and get root shell: Author: Dr. Alberto...

Four Face Jail Time for Ghost Market Crime Forum

Two U.K. teens and twenty-somethings received a collective prison sentence of fifteen years after administering the Ghost Market criminal forum, a meeting place and a classroom where nefarious individuals found anything from banking malware to methamphetamine recipes. Gary Paul Kelly, an unemploy...

CentOS 4 : kernel (CESA-2011:0162)

Updated kernel packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Joomla Grants SQL Injection

========================================================= Joomla Component Joomla! 1.6 b13 grants SQL Injection ========================================================= +Title : Joomla Component Joomla! 1.6 b13 grants SQL Injection +Software : Joomla! 1.6 b13 +Vendor :...

Joomla Wisroyq Local File Inclusion

========================================================= Joomla Component comwisroyq Persistent LFI Vulnerability ========================================================= +Title : Joomla Component comwisroyq Persistent LFI Vulnerability +Software : comwisroyq Persistent +Vendor :...

Joomla AutoArticles 3000 Blind SQL Injection

========================================================= Joomla Component AutoArticles 3000 Blind SQL Injection ========================================================= +Title : Joomla Component AutoArticles 3000 Blind SQL Injection +Software : AutoArticles 3000 +Vendor :...

Mambo SMF 1.0.5 Remote File Inclusion

========================================================= Mambo Component comsmf 1.0.5 RFI Vulnerability ========================================================= +Title : Mambo Component comsmf 1.0.5 RFI Vulnerability +Software : SMF 1.0.5 +Vendor : http://mamboserver.com/ +Download :...

Joomla User 1.5 Local File Inclusion

========================================================= Joomla Component comuser Joomla 1.5 LFI Vulnerability ========================================================= +Title : Joomla Component comuser Joomla 1.5 LFI Vulnerability +Software : comuser Joomla 1.5 +Vendor : http://www.exadomain.co...

Joomla Xplorer 1.6.2 Remote File Inclusion

========================================================= Joomla Component joomlaXplorer RFI Vulnerability ========================================================= +Title : Joomla Component comjoomlaxplorer RFI Vulnerability +Software : joomlaXplorer 1.6.2 +Vendor : http://joomlacode.org/...

Joomla RSSReader Local File Inclusion

========================================================= Joomla Component comrssreader LFI Vulnerability ========================================================= +Title : Joomla Component comrssreader LFI Vulnerability +Software : comrssreader version 1.0 +Vendor : http://www.joomlashop.dk/...

On HTC G2 Code Modification, Botnet Stats and Exploit Hub

Dennis Fisher and Paul Roberts discuss the controversy over the HTC G2 code modification, America’s supremacy in the rankings of bot-infested countries and the viability of the new Exploit Hub as a business. Subscribe to the News Wrap podcast on Podcast audio courtesy of The New Radio Tough Road...

Exploit Hub Aims to be iTunes for Exploits

It’s been tried before, but NSS Labs founder Rick Moy says his company’s new Exploit Hub – a store front for exploit code – can work. In an interview with Threatpost.com, he explains why the current market for exploits doesn’t work for the good guys, and why zero day exploits don’t help anyone...

Accomplease Leasing Software SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Accomplease Leasing Software SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...

[SECURITY] Fedora 12 Update: opendchub-0.8.2-2.fc12

Opendchub is the hub software for Direct Connect P2P network...

Stack overflow

Stack-based buffer overflow in Open Direct Connect Hub aka Open DC Hub or OpenDCHub 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message...

CVE-2010-1147

Stack-based buffer overflow in Open Direct Connect Hub aka Open DC Hub or OpenDCHub 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message...

CVE-2010-1147

Stack-based buffer overflow in Open Direct Connect Hub aka Open DC Hub or OpenDCHub 0.8.1 allows remote authenticated users to execute arbitrary code via a long MyINFO message...