Element-IT PowUpload 1.3 - Arbitrary File Upload

Element-IT PowUpload 1.3 - Arbitrary File Upload Exploit Title: Element-IT PowUpload 1.3 File Arbitrary Upload Date: 21/03/2011 Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Software: Element-IT PowUpload 1.3 Software Link:...

Security Event : Hack In Paris (16-17 June, 2011)

Security Event : Hack In Paris 16-17 June, 2011 Hack In Paris is an international and corporate security event that will take place in Disneyland Paris® fromJune 16th to 17th of 2011. Please refer to the homepage to get up-to-date information about the event. Topics The following list contains...

Hacker Grrl Behind HBGary Attack?

Could a 16 year old girl named Kayla be the mastermind behind the breach of elite security firm HBGary? That’s the contention of Forbes blogger Parmy Olson, who has written up her online conversations with a purported member of the Anonymous hacker collective who goes by the online handle ‘k. ‘K...

IRS Security Holes Put Taxpayer Data At Risk

With the deadline for filing U.S. tax returns fast approaching, the U.S. Government’s watchdog agency warns that the Internal Revenue Service still hasn’t implemented steps to secure its IT infrastructure and protect taxpayers’ financial data. The U.S. Government Accountability Office GAO issued ...

IT Security Metrics: The Enterprise FUD Killer

One of the greatest knocks on the information security profession is that IT security is always asking for budget to spend against the latest threat, only to abandon the cause like harried firefighters, jumping from one conflagration to the next. Viruses, worms, spam, network access control, data...

Microsoft Windows Picture and Fax Viewer Library Vulnerability !

Microsoft Windows Picture and Fax Viewer Library Vulnerability ! I. BACKGROUND The Windows Picture and Fax Viewer "shimgvw.dll" library is used by Windows Explorer to generate thumbnail previews for media files. II. DESCRIPTION Remote exploitation of a buffer overflow vulnerability in multiple...

Zombies, Baseball and IT Security

How is defending your network and users from sophisticated cyber attacks like fending off a zombie invasion? Funny you should ask! In an interview with Threatpost Editor Paul Roberts, Josh Corman, the Research Director in the Enterprise Security Practice at the 451 Group reprises a 2011 RSA...

IT Compliance Matures into Risk Management

Over the past ten years rapid change and an evolving threat landscape has better prepared Coalfire to defend our clients against known risks. Not surprisingly, much of the progress is due to compliance-related investments. As we look towards the next ten years, we see a proactive risk management...

Cyber Ethics, Safety and Security Education is essential for Indian users ?

India is an emerging economy investing in computerization and broadband for rapid and balanced economic development. The Indian government has embarked on large egovernance programs and enablers like the Unique ID program UID which provides a unique biometric based ID for all Indian residents. Th...

Stephen Colbert Riffs On HBGary Breach

The controversy over the hack of D.C. security firm HBGary burst into the spotlight last week when comedian Stephen Colbert weighed in on the back and forth between HBGary Federal CEO Aaron Barr and the online mischief making group Anonymous. As Threatpost has noted, the incident, which began wit...

More than 199 Indian govt websites defaced in last 6 months !

The government today said 199 government websites have been defaced by foreign hackers in the last six months. "The website of Central Bureau of Investigation CBI was defaced by a foreign hacker "Pakistan Cyber Army" on December 3, 2010. In addition to this, a total of 198 government websites wer...

Bridging The Gap Between IT And Law Enforcement

One of the big impediments to prosecuting computer crimes is getting law enforcement to pursue computer crimes with the same intensity that they do traditional property and violent crimes. But that’s easier said than done. At the recent B-Sides San Francisco Conference, Threatpost.com sat down wi...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...

Social networks to be monitored by Mumbai police to keep a check on hate pages !

After observing an increase in the number of phishing attacks and several other cyber crimes, the cyber police have intensified patrolling of the social networking sites. Police, with the help of IT experts, will keep a check on any hate posts or groups created in cyberspace. The action reportedl...

Lessons to learn from the HBGary Federal hack !

The Anonymous attack on HBGary may have amused some who enjoyed the sight of a security firm left embarrassed and exposed, but it should send a shiver down the spine of any IT administrator responsible for securing their own company. Because can you honestly put your hand on your heart and say a...

After The Hack: Tips For Working With Local Law Enforcement

SAN FRANCISCO–If you are in business long enough, you’re going to get hacked and you’re going to have to call the cops. Maybe you’ll need their help finding the perpetrators of a crime in which your business was victimized. Maybe employees will have conducted a crime involving IT, or maybe you’ll...

Geomi CMS 1.23.0 - SQL Injection

Geomi CMS 1.23.0 - SQL Injection + Exploit Title : Geomi CMS by Tridan IT Sql Injection Vunerability Author : ThunDEr HeaD Contact : [email protected] Date : 11-01-2011 HomePage : www.indishell.in Version : 1.2 , 3.0 Tested on : PBL Technology Vulnerability Style : PHPCMS Sql Injection...

ReOS 2.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ===================================== Vulnerability ID: HTB22807 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos1.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20...

Local Training Center, Hacker University, 8 in the USA Participate in Global Launch of Certified Ethical Hacker version 7

450 Global Training Centers Nominated, 25 Selected Worldwide, 8 in the USA, 1 in St. Louis February 2, 2011 St. Louis, MO – Hacker University is pleased to announce it has been asked by EC-Council, the leading international certification body in information security, to participate in the Global...

reos 2.0.5 - Multiple Vulnerabilities

reos 2.0.5 - Multiple Vulnerabilities ===================================== Vulnerability ID: HTB22807 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos1.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011...