Google, Microsoft Seek Help in Lifting FISA Gag Order

Google and Microsoft have locked arms with a number of civil liberties advocates in filing a brief with the secret Foreign Intelligence Surveillance Court hoping to lift a gag order preventing the two tech giants from releasing information on their role in the NSA’s surveillance activities. To...

Drive Letters Missing From Backup Browser During Windows Guest File Level Restore

Challenge When performing a Windows FLR. the drive letters listed in the Backup Browser do not reflect those of the original server. Cause This occurs when the drive containing the Guest OS registry hives was not included in the backup process. The registry hive is used to map disk IDs to drive...

[SECURITY] Fedora 17 Update: ksudoku-4.10.4-1.fc17

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

rnd_case

This evasion plugin changes the case of random letters. Example: Input: /bar/foo.asp Output : /BAr/foO.Asp Plugin type Evasion Options This plugin doesnt have any user configured options. Source For more information about this plugin and the associated tests, theres always the source code to...

[SECURITY] Fedora 19 Update: ksudoku-4.10.4-1.fc19

KSudoku is a logic-based symbol placement puzzle. The player has to fill a grid with symbols so that each column, row and block on the game board contains only one instance of each symbol. In KSudoku the symbols are usually the numbers 1 to 9, but may be the letters A to P or A to Y in larger...

Google ordered to hand over sensitive users details to FBI without a warrant

Judge Susan Illston of the U.S. District Court for the Northern District of California on Friday has ordered the Google to hand over customer details to FBI without a warrant. FBI counter terrorism agents began issuing the secret letters, which don't require a judge's approval, after Congress...

EFF Evaluates Internet Companies on Privacy, Transparency

Internet companies are making it a standard practice to publish transparency reports and advocate for users’ privacy concerns with law enforcement and legislators. And while some do it well, there’s plenty of room for improvement among ISPs such as AT&T and Verizon, and large companies such as...

Microsoft Transparency Report Shows Company Supplied User Content in 2.2% of Cases

Microsoft received more than 11,000 requests for user information or content data from law enforcement agencies in the United States last year and supplied some user content in more than 1,500 of those cases. Overall, the company received more than 70,000 requests from law enforcement agencies...

Google For First Time Reports FBI Non-Warrant Requests for User Data

Google today revealed – if in vague terms – it last year received less than 1,000 “national Security letters” from federal authorities seeking financial and communications data on up to almost 2,000 individuals. The disclosure of such government requests marks a first for a major Internet service...

Monitoring of standalone hosts fails

Challenge No topology is created for standalone ESX/ESXi hosts. nworks logs contain the following errors: 0.0017 EXCOL+ VP120 retrieveHostProperties failed, buildMorList: zero count at nworksCore.Collectors.VimUtil.buildMorListList1 nodes at...

Re-IP fails on Windows 2003/2008 servers.

Article Applicability The issue discussed in this article is strictly related to the use of VMXNET3 network adapters with the following vSphere VM guest operating systems: Windows 7 Windows 7 SP1 Server 2008 R2 Server 2008 R2 SP1 Challenge When you perform failover for a Win2008R2 server with a...

Wired: Courts Back Government After Tech Company Challenges National Security Letter Gag Rule

Wired’s ThreatLevel blog is digging into the story of technology companies pushing back against the government’s use of super-secret National Security Letters NSLs to collect information on “persons of interest” to the FBI earlier this year. According to the Wired account, an unnamed company – ve...

#Opiran new press release for 23 September by Anonymous Hackers

Opiran new press release for 23 September by Anonymous Hackers Salutation To the Noble and Brave People of Iran and Syria, Acknowledge plight The people of Iran and Syria are still being caged, tortured and murdered. They are ruled by vile leaders, who seek not to protect, but to harm. Leaders wh...

smbind 0.4.7 - SQL Injection

smbind query"SELECT ID FROM users WHERE username = '" . $SESSION'username' ."' AND password = '" . md5$SESSION'password' . " ' "; Easy admin login Enter in username field: admin'; Enter in password field: anything Sql query will result like this: SELECT ID FROM users WHERE username = 'admin'; ' A...

mssql hash password cracking method-vulnerability warning-the black bar safety net

mssql hash stored in the table master. dbo. sysxlogins, with select name,password from master. dbo. sysxlogins can extract the user hash. 0x01004E04BE46023057E323AF27269E5b7ddca140c98d225bdd3d06e8efe8cfaec02985b27b38059fa3b18349612b Decomposition: Constant part: 0×0 1 0 0 Salt part: 4E04BE46 Mixi...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

CVE-2009-2889

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

CVE-2009-2889: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in index.php in PHP Scripts Now Hangman allows remote attackers to inject arbitrary web script or HTML via the letters parameter...

MDVA-2008:011 : kdelibs

Due to bad encoding, accented letters appeared on the KDE menu and kicker as strange symbols rather than the actual letters. This update fixes the issue and properly displays those letters. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a...

Directory traversal

F5 FirePass 5.4 through 5.5.2 and 6.0 allows remote attackers to access restricted URLs via 1 a trailing null byte, 2 multiple leading slashes, 3 Unicode encoding, 4 URL-encoded directory traversal or same-directory characters, or 5 upper case letters in the domain name...