PT-2012-2464

Name of the Vulnerable Software and Affected Versions WordPress versions 3.3.x through 3.3.0 Description A cross-site scripting XSS issue exists due to improper handling of the query string in a POST operation by the "Duplicate comment detected" feature when Internet Explorer is used. This allows...

The Hacker News Hacking Awards : Best of Year 2011

The Hacker News Hacking Awards : Best of Year 2011 2011 has been labeled the "Year of the Hack" or "Epic Fail 2011". Hacking has become much easier over the years, which is why 2011 had a lot of hacking for good and for bad. Hackers are coming up with tools as well as finding new methods for...

2011: Wait, What?

The security industry can be a giant repetitive, follow-the-loser echo chamber of unoriginal thoughts, familiar flaws and copycat theories. But if ever there was a year in which folks could stand back and look at what’s gone on and say, what in the hell just happened, 2011 was it. So rather than...

Windows Explorer Denial Of Service (DOS)

No description provided by source. Windows 2008 SP2 RC2 Explorer Go Byebye :P Windows 7 Pro SP1 Explorer Go Byebye :P Interesting Brought to you by Level & z0r0 @ Smash The Stack from win32com.shell import shell, shellcon from os import mkdir try: mkdir"c:\triggeralt" except: print "! Trigger...

Report: UK Newspaper Computer Hacking Could Be As Widespread As Phone Hacking

Investigations by the BBC suggest a widening probe into alleged computer hacking by UK newspapers. In all, the computer hacking may have been as widespread as now-notorious voicemail hacking conducted by reporters at Rupert Murdoch’s News of the World, and may have compromised classified British...

Patch 3 Release Notes for Veeam Backup & Replication 6.0.0.153

More Recent Version Available Please find the latest version of Veeam Backup & Replication here: Veeam Downloads - Latest Version Challenge These are the issues resolved by the Patch 3 for Veeam Backup version 6.0.0.153. All patches are cumulative so each below fix is contained in this patch...

FTC Gives Refunds to Rogue Antivirus Victims

The Federal Trade Commission FTC is sending reimbursement checks to more than 300,000 people victimized by a rogue antivirus scam. According to the FTC, the checks are the result of the settlement between the agency and several defendants named in a complaint the FTC filed in 2008. As part of the...

[SECURITY] Fedora 16 Update: python-celery-2.2.8-1.fc16

An open source asynchronous task queue/job queue based on distributed message passing. It is focused on real-time operation, but supports scheduling as well. The execution units, called tasks, are executed concurrently on one or more worker nodes using multiprocessing, Eventlet or gevent. Tasks c...

[SECURITY] Fedora 15 Update: python-celery-2.2.8-1.fc15

An open source asynchronous task queue/job queue based on distributed message passing. It is focused on real-time operation, but supports scheduling as well. The execution units, called tasks, are executed concurrently on one or more worker nodes using multiprocessing, Eventlet or gevent. Tasks c...

CVE-2011-4052

Stack-based buffer overflow in CEServer.exe in the CEServer component in the Remote Agent module in InduSoft Web Studio 6.1 and 7.0 allows remote attackers to execute arbitrary code via a crafted 0x15 aka Remove File operation for a file with a long name...

Century wind enterprise website management system vulnerability-vulnerability warning-the black bar safety net

by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+css architecture,is...

Century wind enterprise website management system plug horse vulnerabilities and fixes-vulnerability warning-the black bar safety net

From www.0855.tv by Mr. DzY Century wind enterprise website management system of SME-oriented Web Site Management System,page fine,atmosphere. Having a stable set of strong,multi-function,Safety,code loading speed,web site content management, easy operation and other advantages. The use of div+cs...

Report: Computer Hacking, Theft Of Government Secrets Alleged In News International Probe

A report from The Guardian claims that detectives working for Rupert Murdoch’s News International may have siphoned off classified intelligence documents from MI5, Britain’s domestic intelligence agency. The report comes some six months after the first reports indicating that computer hacking,...

#OpRobinHood : Thousands of United Nation logins leaked by TeaMp0isoN

OpRobinHood : Thousands of United Nation logins leaked by TeaMp0isoN Online 'hactivist' collective Anonymous and hackers Team Poison have joined forces for a new group effort known as 'Operation Robin Hood', that plans to target banks in an effort to give money back to the people. TeaMp0isoN toda...

#OpRobinHood : Thousands of United Nation logins leaked by TeaMp0isoN

OpRobinHood : Thousands of United Nation logins leaked by TeaMp0isoN Online 'hactivist' collective Anonymous and hackers Team Poison have joined forces for a new group effort known as 'Operation Robin Hood', that plans to target banks in an effort to give money back to the people. TeaMp0isoN toda...

Feds Take Down 131 Counterfeiting Sites

It’s going to be considerably harder to get that sweet, knock-off Louis Vuitton bag you’ve been eyeing, and you can thank the US Immigrations and Customs Enforcement Agency ICE for that. The agency reportedly seized control of some 130 websites last week in advance of Black Friday and Cyber Monda...

How the Duqu Authors May Have Erred

Duqu has been called the spawn of Stuxnet, or maybe some sort of stepchild or second cousin. That initial analysis came from some similarities in the code of the two attack tools, and now that researchers have had more time to pull Duqu apart and see how it works, it seems more and more likely th...

CVE-2011-3900

CVE-2011-3900 affects Google Chrome prior to 15.0.874.121, specifically a vulnerability in the V8 engine where an out-of-bounds write could lead to denial of service or potentially other impact. Public references in the connected documents confirm the Chrome/Chromium V8 context and the remediatio...

PT-2011-4831

Name of the Vulnerable Software and Affected Versions InduSoft Web Studio versions 6.1 through 7.0 Description The issue is related to a stack-based buffer overflow in the CEServer.exe component. This occurs when handling a crafted 0x15 operation, also known as a Remove File operation, for a file...

Anonymous Finland Wages War on Mining, Leaks 500,000 E-mails

The Finnish arm of the Hacktivist collective Anonymous announced their intent to wage a war against domestic mining company Talvivaara over the weekend, according to a press release posted to the Pastebin file sharing Web site on Saturday. In what Anonymous has deemed “Operation Screw Talvivaara,...