iPhones Automatically Connect to Rogue Networks

Some iPhone users are vulnerable to having their devices automatically join rogue Wi-Fi networks because of a combination of an iOS feature that allows devices to reconnect to known networks and a directory of carrier-specific wireless network SSIDs that are preloaded into iOS, according to mobil...

Wi-Fi Spot Configuration Software vulnerability in the connection process

Overview Wi-Fi Spot Configuration Software provided by SoftBank contains a vulnerability within the process of connecting to Wi-Fi access points, which may lead to user information being sent unintentionally. Masashi Sakai reported this vulnerability to IPA. JPCERT/CC coordinated with the develop...

BlackBerry Enterprise Servers vulnerable to TIFF Image based Exploit

If you are a BlackBerry Enterprise Network user, here is something you need to be careful about. BlackBerry Enterprise Server BES users have been warned that an image-based exploit could allow hackers to access and execute code on the servers used to support corporate users of BlackBerry...

Beside network lightweight blog system upload vulnerability-vulnerability warning-the black bar safety net

Demo Station: http://www.tuidoong.com/ First of all, we first register a user of this you know the register well after we return to the personal home page point pictures On upload directly to upload any file 后门 地址 http://www.tuidoong.com/uploads/4e472c674c0f24e9b6b2d56c6cb9e9f2.php...

Security flaw in 3G could allow anyone to track your smartphone

New privacy threats have been uncovered by security researchers that could allow every device operating on 3G networks to be tracked, according to research from the University of Birmingham with collaboration from the Technical University of Berlin. Researchers said that standard off-the-shelf...

USN-1598-1: Linux kernel vulnerability

An error was discovered in the Linux kernel's network TUN/TAP device implementation. A local user with access to the TUN/TAP interface which is not available to unprivileged users until granted by a root user could exploit this flaw to crash the system or potential gain administrative privileges...

Design/Logic Flaw

The CBC mode in the TLS protocol, as used in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, Windows 7 Gold and SP1, and other products, allows remote web servers to obtain plaintext data by triggering multiple requests to a...

Ubuntu Update for nut USN-1456-1

Ubuntu Update for Linux kernel vulnerabilities USN-1456-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14561.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for nut USN-1456-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

FlexNet License Server Manager - lmgrd Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'FlexNet License Server Manager lmgrd...

Symantec Web Gateway Multiple Security Issues

SUMMARY Symantecs Web Gateway management GUI is susceptible to file include command injection/execution, file upload/execution and file download/deletion security issues. The management GUI is also susceptible to cross-site scripting XSS. Successful exploitation could result in execution of...

Microsoft, Security Experts Warn 'Wormable' RDP Exploit Will Come Sooner Than Later

As a follow-up to its usual Patch Tuesday release this week, officials at Microsoft are warning users that an exploit against the recently disclosed Remote Desktop Protocol RDP vulnerability for Windows is likely to come in the next 30 days. According to a supplementary entry on its Security...

mysql: over-sized packet denial of service vulnerability

The mynetskiprest function in sql/netserv.cc in MySQL 5.0 through 5.0.91 and 5.1 before 5.1.47 allows remote attackers to cause a denial of service CPU and bandwidth consumption by sending a large number of packets that exceed the maximum length...

Design/Logic Flaw

Unspecified vulnerability in Oracle Solaris 8, 9, 10, and 11 Express allows remote attackers to affect availability via unknown vectors related to Network...

Attacking 3G and 4G Mobile Tele-Communications Networks

Document Title: =============== Attacking 3G and 4G Mobile Tele-Communications Networks References: =========== Document: http://www.vulnerability-lab.com/resources/documents/320.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1782 Original Mirror:...

HP OpenView Network Node Manager nnmRptConfig.exe Buffer Overflow (CVE-2011-0268)

The Network Node Manager NNM is an HP OpenView product which manages networks. It determines and displays physical and logical connectivity in networks, as well as information referring to protocols running over the network. A buffer overflow vulnerability has been reported in HP OpenView Network...

CVE-2010-4565

The bcmconnect function in net/can/bcm.c aka the Broadcast Manager in the Controller Area Network CAN implementation in the Linux kernel 2.6.36 and earlier creates a publicly accessible file with a filename containing a kernel memory address, which allows local users to obtain potentially sensiti...

CVE-2010-4168

Multiple use-after-free vulnerabilities in OpenTTD 1.0.x before 1.0.5 allow 1 remote attackers to cause a denial of service invalid write and daemon crash by abruptly disconnecting during transmission of the map from the server, related to network/networkserver.cpp; 2 remote attackers to cause a...

Cable Modem Termination System Authentication Bypass - Cisco Systems

Two issues are described in this security advisory. The first issue involves cable modems not manufactured by Cisco that allow a configuration file to be downloaded from an interface that is not connected to the network of the cable modem's service provider. This historical behavior allows an...

Bouncing RPC

In the early years of Core Security Technologies, the company not only offered security consulting services, but often was sub-contracted to do R+D for several security vendors. The first and most intellectually rewarding of such contracts came from Secure Networks Inc. SNI, a Canadian start-up...

AlienTechnology ALR-9900 default root password and backdoor

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Tested: www.alientechnology.com/readers/alr9900.php Background: Alien Technology is a major rfid-reader designer and manufacturer. Alien's products are sold to many corporations and the military. Alien's readers can be interfaced with in several ways...