HITB2011KUL - Satellite Telephony Security - Jim Geovedi

Document Title: =============== HITB2011KUL - Satellite Telephony Security - Jim Geovedi References: =========== Download: http://www.vulnerability-lab.com/resources/videos/464.wmv View: http://www.youtube.com/watch?v=23FKGifzCJs Release Date: ============= 2012-03-07 Vulnerability Laboratory ID...

Design/Logic Flaw

DISPUTED wp-admin/setup-config.php in the installation component in WordPress 3.3.1 and earlier generates different error messages for requests lacking a dbname parameter depending on whether the MySQL credentials are valid, which makes it easier for remote attackers to conduct brute-force attack...

Image Perspective Design SQL Injection

x Exploit Title: Image Perspective Design SQL Ýnjection Vulnerability x Date: 31/08/2011 x Author: 3spi0n x HomePage: Http://Www.3spi0n.NET / Facebook.Com/3spi0ne x E-Mail: 3spi0natgmaildotcom | Http://Twitter.Com/RigidusCO x Software Link: http://www.imageperspective.com/ x Category: WebApps x...

Owning Virtual Worlds For Fun and Profit

I’m a security researcher. I find bugs in software, they get fixed. I write exploits, they give me a shell. It’s more or less always the same and it gets kind of boring. But there was one exploit I helped write back in 2007 that was a little different. This is the story of that exploit. Second Li...

Verizon DBIR Cryptography Challenge: Here's The First Clue

So, according to a little birdie tweeting in the night, the 2010 Verizon Data Breach Investigations Report DBIR contains another encryption challenge that leads to actual cash prizes. Last year, after I dropped a big clue here, Grant Stavely, Chris Eng and others decoded the hidden message on the...

The All-Decade Interview Team

It occurred to me recently that I’ve been covering the security industry for just about 10 years. That’s a long time to be doing anything, and especially to be writing about one topic. But it’s hard to think of something that would have been much more interesting to cover this decade, given the...

gld 1.4 - Postfix Greylisting Daemon Remote Format String

/ 0x82-meOw-linuxerforever - gld 1.4 remote overflow format string exploit. c 2005 Team INetCop Security. Nickname of this code is, Kill two bird with one stone.' or, One shot, two kill!.' hehehe ;-D Advisory URL: http://x82.inetcop.org/h0me/adv1sor1es/INCSA.2005-0x82-026-GLD.txt It's as well as...