CVE-2013-0269

The JSON gem before 1.5.5, 1.6.x before 1.6.8, and 1.7.x before 1.7.7 for Ruby allows remote attackers to cause a denial of service resource consumption or bypass the mass assignment protection mechanism via a crafted JSON document that triggers the creation of arbitrary Ruby symbols or certain...

Travis Goodspeed - Prototyping Active Disk Antiforensics

Document Title: =============== Travis Goodspeed - Prototyping Active Disk Antiforensics References: =========== View: http://www.youtube.com/watch?v=qZtkANvDxZA Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 818 Common Vulnerability...

Travis Goodspeed - Prototyping Active Disk Antiforensics

Document Title: =============== Travis Goodspeed - Prototyping Active Disk Antiforensics References: =========== View: http://www.youtube.com/watch?v=qZtkANvDxZA Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 818 Common Vulnerability...

Anonymous General Purpose Operating System: Whonix

Whonix is a free desktop operating system OS that is specifically designed for advanced security and privacy. Based on Tor, Debian GNU/Linux and the principle of security by isolation, it realistically addresses common attack vectors while maintaining usability. Online anonymity is made possible...

MySQL 5.1/5.5 WiNDOWS REMOTE R00T (mysqljackpot)

No description provided by source. FARLiGHT ELiTE HACKERS LEGACY R3L3ASE Attached is the MySQL Windows Remote Exploit post-auth, udf technique including the previously released mass scanner. The exploit is mirrored at the farlight website http://www.farlight.org. Oracle MySQL on Windows Remote...

Cyber attack on Iran's Internet system Disrupts Iran Internet

IRAN state official has said that Cyber attackers have targeted Iranian infrastructure and communications companies, disrupting the Internet across the country. "Yesterday we had a heavy attack against the country's infrastructure and communications companies which has forced us to limit the...

SA-CONTRIB-2012-141 - Mass Contact - Access bypass

This module allows anyone with permission to send a single message to multiple users of a site, using its roles functionality. The module doesn't sufficiently check permissions after the form has been submitted. This vulnerability is mitigated by the fact that an attacker must use a tool of some...

Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661

Check for the Version of glpi-mass-ocs-import OpenVAS Vulnerability Test Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Fedora Update for glpi-mass-ocs-import FEDORA-2012-10661

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Pennsylvania Man Indicted For Hack of Department of Energy Network

A Pennsylvania man was arrested yesterday after a Massachusetts grand jury issued a four-count indictment alleging that he hacked into computer networks belonging to the U.S. Department of Energy DoE and the University of Massachusetts and tried to sell access to a DoE supercomputer for $50,000 t...

WordPress WP Mass Mail Spoofing

Description : Wordpress Plugins - WP Mass Mail Send Mass Email Vulnerability Version : 2.45 Link : http://wordpress.org/extend/plugins/wp-mass-mail/ Plugins : http://downloads.wordpress.org/plugin/wp-mass-mail.zip Date : 26-05-2012 Google Dork : inurl:/wp-content/plugins/wp-mass-mail/ Author :...

Wordpress Plugins - WP Mass Mail Send Mass Email Vulnerability

Exploit for php platform in category web applications Description : Wordpress Plugins - WP Mass Mail Send Mass Email Vulnerability Version : 2.45 Link : http://wordpress.org/extend/plugins/wp-mass-mail/ Plugins : http://downloads.wordpress.org/plugin/wp-mass-mail.zip Date : 26-05-2012 Google Dork...

PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version

?php www.bugreport.ir Title: PHP CGI Argument Injection Remote Exploit V0.3 - PHP Version Vendor: http://www.php.net Vulnerable Version: PHP up to version 5.3.12 and 5.4.2 Exploitation: Remote Original Advisory: http://eindbazen.net/2012/05/php-cgi-advisory-cve-2012-1823/ Original Exploit URL:...

June 2011 – Bioware hacked, EA info compromised

Electronic Arts’ Bioware, creators of MMORPG Star Wars: The Old Republic and the popular Mass Effect and Dragon Age series had a hacker infiltrate a decade-old server that was hosting the Neverwinter Nights forums in June, 2011. While no social security numbers or credit cards were compromised, E...

New Version of WordPress Fixes Slew of Security Bugs

A new version of the WordPress software is available, and the update includes fixes for a number of security vulnerabilities, including a bug in components that are used to upload media to WordPress sites. Version 3.3.2 also has some other fixes for cross-site scripting and other flaws. WordPress...

Nikjju Mass injection campaign target more than 2 Millions Urls

Nikjju Mass injection campaign target more than 2 Millions Urls Daniel Cid an open source developer and information security professional reported on Sucuri blog that their team tracked a new mass SQL injection campaign that started early this month and till now more than 180,000 URLs have been...

CVE-2012-2055

GitHub Enterprise before 20120304 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set the publickeyuserid value via a modified URL for the public-key update form, related to a "mass assignment" vulnerability...

CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...

CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...

DEBIAN-CVE-2012-2054

Redmine before 1.3.2 does not properly restrict the use of a hash to provide values for a model's attributes, which allows remote attackers to set attributes in the 1 Comment, 2 Document, 3 IssueCategory, 4 MembersController, 5 Message, 6 News, 7 TimeEntry, 8 Version, 9 Wiki, 10 UserPreference, o...