IPS officer's Facebook profile hacked !

RAJKOT: A day after Facebook CEO Mark Zuckerberd's Facebook profile was hacked, someone hacked the Facebook profile of an IPS officer in Saurashtra. The unknown hacker uploaded embarrassing photos. The officer's profile picture was replaced with an obscene morphed photo. The miscreant has also...

Cops hunt for the hacker who tapped Y P Singh's phone in 60 seconds !

News Taken From mumbaimirror.com, The news is as follows... Thane Crime Branch has set up an inquiry into the matter and a team to track down Sachin Loke after reading the Mumbai Mirror exposé A day after Mumbai Mirror exposed how small-time detectives and software professionals offer phone-tappi...

Microsoft IIS FTP server memory corruption vulnerability

Overview Microsoft IIS FTP server 7.5 is affected by a pre-authentication memory corruption vulnerability. Description A specifically crafted request sent to the IIS FTP service can result in memory corruption causing the service to crash. A denial-of-service exploit has been released to the...

Metasploit 3.5.1 adds Cisco device exploitation !

Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...

MS-RPC over CIFS Fragmentation (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

DCE-RPC Invalid NDR Value Evasion Technique (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

DCE-RPC Fragmented Requests (CVE-2010-0102)

DCE/RPC stands for Distributed Computing Environment / Remote Procedure Calls. It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having t...

Microsoft SMB Invalid Write Mode Evasion Technique

The SMB Protocol is a network file sharing protocol that is implemented in Microsoft Windows. There are many known vulnerabilities in applications based on the SMB protocol. Though IDS and IPS devices have signatures to detect attacks exploiting these vulnerabilities, these devices can be evaded...

DCE-RPC Big Endian Evasion Technique

DCE/RPC stands for "Distributed Computing Environment / Remote Procedure Calls". It is a Remote Procedure Call system that allows software to work across multiple computers, as if it were all working on the same computer. This system allows programmers to write distributed software without having...

ZDI-10-233: Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerability

ZDI-10-233: Cisco ICM Setup Manager Agent.exe AgentUpgrade Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-233 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco Unified...

ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability

ZDI-10-234: Cisco ICM Setup Manager Agent.exe HandleQueryNodeInfoReq Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-234 November 7, 2010 -- CVE ID: CVE-2010-3040 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Cisco -- Affected Products: Cisco...

Microsoft Office PowerPoint Legacy Files (CVE-2010-2572)

Microsoft PowerPoint is a popular graphics software for preparing slides and presentations. A remote attacker could exploit this issue via a malformed PowerPoint file. Successful exploitation of this vulnerability may allow execution of arbitrary code on a target system. The vulnerability is due ...

[FG-VD-10-020]Adobe Flash Player Remote Memory corruption Vulnerability

FG-VD-10-020Adobe Flash Player Remote Memory corruption Vulnerability Fortinet Discovers Adobe Flash Player Vulnerability 2010.Nov.04 Summary: Fortinet's FortiGuard Labs has discovered a Memory corruption vulnerability in Adobe Flash PlayerFlash10h.ocx, which may lead to arbitrary code execution ...

ZDI-10-182: IBM TSM FastBack Server FXCLI_OraBR_Exec_Command Remote Code Execution Vulnerabilities

ZDI-10-182: IBM TSM FastBack Server FXCLIOraBRExecCommand Remote Code Execution Vulnerabilities http://www.zerodayinitiative.com/advisories/ZDI-10-182 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ZDI-10-180: IBM TSM FastBack Server _SendToLog Remote Code Execution Vulnerability

ZDI-10-180: IBM TSM FastBack Server SendToLog Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-180 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack -- TippingPointTM...

ZDI-10-190: Novell iManager getMultiPartParameters Arbitrary File Upload Remote Code Execution Vulnerability

ZDI-10-190: Novell iManager getMultiPartParameters Arbitrary File Upload Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-190 October 1, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell iManager --...

[STANKOINFORMZASCHITA-10-01] Netbiter® webSCADA multiple vulnerabilities

STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...

ZDI-10-183: IBM TSM FastBack Server FXCLI_checkIndexDBLocation Remote Code Execution Vulnerability

ZDI-10-183: IBM TSM FastBack Server FXCLIcheckIndexDBLocation Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-183 September 29, 2010 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: IBM -- Affected Products: IBM Tivoli Storage Manager FastBack --...

ITS SCADA SQL Injection

STANKOINFORMZASCHITA-10-02 ITS SCADA – Authorization bypass Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: ITS SCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of exploit: Yes Product...

Netbiter webSCADA Disclosure

STANKOINFORMZASCHITA-10-01 Netbiter® webSCADA – multiple vulnerabilities Authors: Eugene Salov [email protected], Andrej Komarov [email protected] Product: Netbiter® webSCADA CVSS v2 Base Score: 9.0 AV:N/AC:L/Au:R/C:C/I:C/A:C Impact Subscore: 10.0 Exploitability Subscore: 8.0 Availability of...