Mandriva Linux Security Advisory : php-ZendFramework (MDVSA-2014:072)

Updated php-ZendFramework packages fix security vulnerabilities : XML eXternal Entity XXE and XML Entity Expansion XEE flaws were discovered in the Zend Framework. An attacker could use these flaws to cause a denial of service, access files accessible to the server process, or possibly perform...

Adobe Reader Multiple Vulnerabilities (Feb 2008) - Windows

Adobe Reader is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:adobe:acrobatreader";...

Hardware provider is missing in Veeam Backup and Replication user interface

Challenge Backups using a specific hardware provider do not work, and the provider is missing from the user interface. Cause During a Hyper-V host rescan, available VSS providers are enumerated via a VSS API query. Then, all VSS volumes for which those providers can be used are retrieved. In some...

Phabricator: OAuth Stealing Attack (New)

Hi Evan, I found a new and more dangerous way to steal phabricator facebooks oauth tokens,codes, In this case, I exploited the behavior of Phabricator OAuth Dialog, If you provide a differnet scope in phabricator OAuth Dialog...

Java OpenID Server 1.2.1 XSS / Session Fixation

Hi, This is a public disclosure with disarmed Proof of Concept of unpatched vulnerabilities in JOIDS Java OpenID Server. "JOIDS Java OpenID Server is a multi-domain, multi-user OpenID Provider based on OpenID4Java, Spring Framework, Hibernate, Velocity" https://code.google.com/p/openid-server/...

Adult Magazine Sued LeaseWeb for Hosting Pirated Websites, claiming $188M in Damages

Perfect 10, an Adult Magazine Publisher who previously accused Google, Amazon, RapidShare, Deposit File and many more companies for Copyright Infringement, has sued LEASEWEB Hosting provider this time. LEASEWEB is the former hosting provider of File Sharing website 'Megaupload', and Perfect 10...

File Explorer (FX) For Android Path Traversal

Disclosure Date: 31 Jan 2014 Author: Keith Makan http://blog.k3170makan.com Vendor or Software Link: https://play.google.com/store/apps/details?id=nextapp.fx&hl=en Version: 2.3.0.10 Tested on: Android 3.2.1 Site : http://blog.k3170makan.com Description: File Explorer FX for Android Suffers from a...

[Fing] Tool for Network Scan and Analysis for iPhone

Highlight of features: + Discovers all devices connected to a Wi-Fi network. No limitation! + Displays the MAC Address and up-to-date Vendor names. + Customize names, icons and notes. + Wake On LAN. Switch on your cable-connected devices. + History of all discovered networks. You can review...

CREDO Mobile Publishes Industry's First Transparency Report

Credo Mobile, the small San Francisco mobile provider that is reportedly the unnamed plaintiff in a suit that challenged the legality of national security letters, yesterday published its first transparency report, the first such report published by a mobile provider. Credo, which has raised tens...

Weak Password Used to Access Hypervisor, Deface OpenSSL Site

The OpenSSL Project blames a weak password used at its hosting provider for its recent site defacement. The organization that hosts the ubiquitous open source encryption implementation updated a notice on its website yesterday informing users that attackers used the weak credential to gain contro...

Hyper-V VSS snapshot import delay

Challenge If you backup your VMs using Dell Equallogic hardware VSS provider in some cases datavhd/vhdx that we read from VSS snapshot could be inconsistent Cause During Hyper-V backup, we execute VSS API call DoSnapshotSet, as soon as it completes, we execute ImportSnapshot VSS API call, without...

SuSE 11.2 Security Update : OpenJDK 1.6 (SAT Patch Number 8598)

OpenJDK 1.6 was updated to the new Icedtea release 1.12.7, which includes many fixes for bugs and security issues : - S8006900, CVE-2013-3829: Add new date/time capability - S8008589: Better MBean permission validation - S8011071, CVE-2013-5780: Better crypto provider handling - S8011081,...

CVE-2013-6819

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in Performance Provider in SAP NetWeaver allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

How to Collect Logs for Veeam Backup & Replication

Purpose This article documents how to collect logs from Veeam Backup & Replication and additional information to include when submitting a Veeam Support case for technical assistance. Additional Logging Veeam Backup & Replication interoperates with other Veeam products. Please refer to the...

Microsoft Windows AutoRuns Winsock Provider

Binary data windowsautorunswinsockproviders.nbin...

World's Largest Web Hosting company 'LeaseWeb' Hacked by KDMS Team

LeaseWeb, one of the World's largest hosting provider has been defaced by Palestinian hackers, named as KDMS Team. LeaseWeb was also hosting provider for one of the biggest file-sharing website Megaupload in the past. Later Megaupload Founder, Kim Dotcom claimed that Leaseweb had deleted all...

OWASP ESAPI Security Advisory: MAC Bypass in ESAPI Symmetric Encryption

OWASP ESAPI for Java Security Advisory 1 The OWASP Foundation MAC Bypass in ESAPI Symmetric Encryption Summary ======= Category: Symmetric cryptography Module: ESAPI Encryptor interface Announced: 2013-08-23 via ESAPI-Dev mailing list...

Google: Gmail Users Should Have No Expectation of Privacy

Edward Snowden has done enough to highlight how vulnerable electronic communications are to surveillance and Gmail users should not expect privacy from Google. Lavabit is no more. Silent Circle has shuttered its secure email service. A California watchdog group says that Gmail users now have a...

Karsten Nohl Demonstrates SIM Card Root Attack At Black Hat

LAS VEGAS–Thanks to manufacturers employing old, weak encryption on SIM cards, researchers have found a way to root the cards and get access to billions of mobile devices. German security researcher Karsten Nohl of Security Research Labs demonstrated the SIM card attack in his talk at the Black H...