1085 matches found
Amit Yoran on Cyberwar, Federal Cybersecurity and the Evolution of Threats
Dennis Fisher talks with Amit Yoran, former director of the National Cyber Security Division at DHS and CEO of NetWitness, about state-sponsored attacks, federal cybersecurity and the changing nature of security threats. Download Subscribe to the Digital Underground podcast on Podcast audio...
David Mortman and Alex Hutton on Exploit Code Use, Data Breaches and Reputation Damage
Dennis Fisher talks with David Mortman and Alex Hutton of the New School of Information Security blog about the Mortman/Hutton model, data breaches and the effect of breaches on the reputation and viability of an organization. Download Subscribe to the Digital Underground podcast on Podcast audio...
CVE-2008-6857
Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
Authentication flaw
Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
CVE-2008-6857
CVE-2008-6857 affects Absolute Podcast .NET 1.0. The issue lets a remote attacker bypass authentication and gain administrative access by setting a specific cookie value. The vulnerability is described in CVE sources as an authentication bypass with partial confidentiality/integrity/availability ...
CVE-2008-6857
Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain value...
Robert "Rsnake" Hansen On Slowloris, DoS Attacks And RFC-1918 Networks
Dennis Fisher talks with Robert “Rsnake” Hansen about his Slowloris tool, low-bandwidth DoS attacks and the law of unintended consequences. Download SHOW NOTES: Mitigating the Slowloris HTTP DoS Attack New attack class exploits intranet weaknesses Subscribe to the Digital Underground podcast on...
Threatpost News Wrap #3: Patch releases, RFC1918 attack
Threatpost editors Ryan Naraine and Dennis Fisher discuss this week’s massive patch releases by Microsoft, Adobe and Apple, the RFC1918 attack paper by Robert Hansen and who they’d pick in a rotisserie hacker draft. Download SHOW NOTES: New attack class exploits intranet weaknesses The time has...
Podcast Generator多个模块文件包含和任意文件删除漏洞
BugCVE: CVE-2009-1230 CVE-2008-1124 CVE-2008-1125 BUGTRAQ: 34317 28038 Podcast Generator的core/archivecat.php、core/admin/itunescategories.php和core /admin/login.php页面没有正确地过滤对GLOBALSabsoluteurl参数所传送的输入，core/themes.php页面没有正确地过滤对GLOBALSthemepath参数所传送的输入，这可能用于包含本地或外部资源的任意文件；此外core/admin...
Podcast Generator 1.2 Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...
Threatpost News Wrap #2: Drive-by malware, Twitter attacks
Threatpost editors Ryan Naraine and Dennis Fisher look at the latest security news headlines and dig deeper into the latest wave of drive-by download infections and scareware attacks on Twitter. Download SHOW NOTES Cybercriminals hijack Twitter trending topics to serve malware Subscribe to the Ne...
Podcast Generator 1.2 File Inclusion / Deletion
++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | | admin.php?p=admin&GLOBALSabsoluteurl= | |...
Podcast Generator 1.2 - Unauthorized Re-Installation
Podcast Generator 1.2 - Unauthorized Re-Installation $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if...
Podcast Generator 1.2 - Unauthorized Re-Installation
$file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1. blocks all 'amilogged' REQUEST variables,what about GLOBALS?,therefore useless! 2. if 'amilogged' isn't true - exit function activated. 3. unlink...
Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit
Exploit for unknown platform in category web applications ==================================================================== Podcast Generator $file.$ext $Ldeleted"; / Explanation code snippet above points ----------------------------------------------------------------------------------- 1...
Podcast Generator 1.2 - GLOBALS[] Multiple Vulnerabilities
Podcast Generator 1.2 - GLOBALS Multiple Vulnerabilities ++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | |...
Podcast Generator <= 1.2 GLOBALS[] Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================== Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ |...
Podcast Generator <= 1.2 GLOBALS[] Multiple Remote Vulnerabilities
No description provided by source. ++ | Podcast Generator = 1.2 GLOBALS Multiple Remote Vulnerabilities | ++ | by staker - stakerathotmaildotit / http://zeroidentity.org | ++ +-------------------------------------------------------------------------------------+ | Remote/Local Arbitrary File...
Podcast Generator 1.2 - 'GLOBALS[]' Multiple Vulnerabilities
++ | Podcast Generator RFI | | | magicquotesgpc=off -- LFI | +-------------------------+-----------------------------------------------------------+ | delete.php?GLOBALSamilogged=true&file&GLOBALSabsoluteurl= | | admin.php?p=admin&GLOBALSabsoluteurl= | |...