Mark Russinovich on His Novel Zero Day and Coordinated Cyber Attacks

Dennis Fisher talks with Mark Russinovich of Microsoft about his novel Zero Day, the idea of a coordinated cyber attack by terrorists and the difficulty of writing a technical novel for a mainstream audience. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on Image...

November, 2005: Sony/BMG Digital Rights Management Rootkit

Sony helped create the home entertainment industry by successfully defending the right of its customers to copy movies for personal use with the help of its Betamax technology, of course all the way to the U.S. Supreme Court. That made the debacle of the company’s decision, two decades later, to...

AST-2011-006: Asterisk Manager User Shell Access

Asterisk Project Security Advisory - AST-2011-006 Product Asterisk Summary Asterisk Manager User Shell Access Nature of Advisory Permission Escalation Susceptibility Remote Authenticated Sessions Severity Minor Exploits Known Yes Reported On February 10, 2011 Reported By Mark Murawski markm AT...

Andy's PHP Knowledgebase 0.95.2 SQL Injection

'Andy's PHP Knowledgebase' SQL Injection Vulnerability CVE-2011-1546 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of the 's' query parameter. II. TESTED VERSION...

Andys PHP KnowledgeBase 0.95.2 - viewusers.php SQL Injection

Andys PHP KnowledgeBase 0.95.2 - viewusers.php SQL Injection 'Andy's PHP Knowledgebase' SQL Injection Vulnerability CVE-2011-1546 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in aviewusers.php allowing for SQL injection of...

Quick Polls - Local File Inclusion / Deletion

'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & local file deletion due to null-byte attacks...

Quick Polls - Local File Inclusion Deletion

Quick Polls - Local File Inclusion Deletion 'Quick Polls' Local File Inclusion & Deletion Vulnerabilities CVE-2011-1099 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- Two vulnerabilities exist in 'Quick Polls' providing local file inclusion & loca...

Moderate: Red Hat Security Advisory: mailman security update

An updated mailman package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings,...

TheHackerNews and CyberArmy(India) Facebook Pages Hacked By Albania Security Group !

TheHackerNews and CyberArmyIndia Facebook Pages Hacked By Albania Security Group ! Link of pages : and https://www.facebook.com/cyberarmy.in Albania Security Group !! The Group is created by 4 members !! hacker twilight ,akrepi hacker , BombRun , WarBot ! They have hacked 300 facebook fan pages i...

Facebook Founder, Mark Zuckerberg's Facebook Fan Page Hacked !

It turns out even if you own the Internet, you're still susceptible to malicious hackers. Facebook CEO Mark Zuckerberg had to change Web addresses for his Facebook fan page late Tuesday night after a hacker appeared to gain access to the page and had the ability to write status messages on behalf...

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability (CVE-2010-4331)

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted content to be presented to a user...

Seo Panel 2.2.0 - Cookie-Rendered Persistent Cross-Site Scripting

'Seo Panel' Cookie-Rendered Persistent XSS Vulnerability CVE-2010-4331 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in 'Seo Panel' page rendering which allows for unfiltered, unencrypted content to be presented to a user...

Rumors of Facebook shutting down !

Rumors of an impending Facebook shutdown had the site's millions of users in a panic Saturday as they wondered who would take their number one procrastination tool away. The Internet rumor was sparked by a report from the "Weekly World News," a website which also includes a story insisting "Alien...

U.S. investigators demand details about WikiLeaks' Twitter account from court !

U.S. investigators have gone to court to demand details about WikiLeaks' Twitter account, according to documents obtained Saturday -- the first revelation about the criminal case Washington is trying to build against those who leaked classified U.S. documents. The U.S. District Court for the...

Kenya police site hacked, hacker thought about Mark Zuckerberg !

This kind of thing tends to happen from time to time, though this time it seems that Mark Zuckerberg's name has been dragged into it. A hacker out there managed to hack into Kenya's law enforcement body's website and post some graffiti there, which is some kind of tribute to Facebook's co-founder...

The Little Black Book Of Computer Virus by Mark Ludwig

The Little Black Book Of Computer Virus by Mark Ludwig His Little Black Book of Computer Viruses fully describes a sophisticated MS-DOS executable virus --- Download Link : Please say thanks.. Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we po...

WSN Links SQL injection vulnerability-vulnerability warning-the black bar safety net

WSN Links is an advanced PHP-based/MySQL search script, WSN Links 6.0.1, 5.1.51;, 5.0.81 version of the search. php file existsSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: 'WSN Links' SQL Injection Vulnerability CVE-2 0 1 0-4 0 0 6 Mark Stanislav -...

Free Simple Software - SQL Injection

Free Simple Software - SQL Injection 'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION...

Free Simple Software - SQL Injection

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...

Free Simple Software SQL Injection

'Free Simple Software' SQL Injection Vulnerability CVE-2010-4298 Mark Stanislav - [email protected] I. DESCRIPTION --------------------------------------- A vulnerability exists in the 'Free Simple Software' download module which allows for a 'UNION SELECT' to easily expose the application...