Google Adds Online Malware Scanner VirusTotal To Security Lineup

Google made a significant addition to its security lineup Friday with its acquisition of online malware scanning service VirusTotal. Experts say the malware intelligence Google will have at its disposal would enhance not only existing products and services, but will backbone site safety rankings...

CVE-2012-4578

The geli encryption provider 7 before r239184 on FreeBSD 10 uses a weak Master Key, which makes it easier for local users to defeat a cryptographic protection mechanism via a brute-force attack...

Grum Botnet Briefly Revived, Now Dead Again

Botnets are a lot like dandelions; you think they’re dead and then when you’re not looking they pop right back up. It’s happened time and again in the malware ecosystem and the latest member of the undead botnet society is Grum, which was only just taken down last week. Over the weekend several o...

Quota Violation While Running WMI Queries

Challenge In the Veeam Management Pack for System Center UI, some monitored objects are grey or missing altogether. Standard troubleshooting steps do not help. The SCOM agent log on the Collector server contains the following error: WMI Error: 0x8004106C When you try to use the WBEMTEST utility,...

AutoCAD Worm Stealing Designs, Blueprints

Security researchers have come across a new worm that is meant specifically to steal blueprints, design documents and other files created with the AutoCAD software. The worm, known as ACAD/Medre.A, is spreading through infected AutoCAD templates and is sending tens of thousands of stolen document...

Description of the Outlook Social Connector update (Oscmoss-x-none.msp): April 10, 2012

None None...

DreamHost Warns of Attack, Forces Customer Password Changes

Attackers were able to compromise a database at DreamHost, a large hosting provider, late last week and the company is forcing all of its customers to change their passwords for their FTP and shell accounts as a precautionary measure. DreamHost did not provide many details about what happened in...

SimpleSAMLphp Detection

The remote web server hosts SimpleSAMLphp, an implementation of SAML Security Assertion Markup Language for written in PHP. It acts as both a Service Provider, authenticating users to PHP applications, as well as an Identity Provider, storing information about them. C Tenable Network Security, In...

Android 'content://' URI Multiple Information Disclosure

Exploit for Android platform in category web applications Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download...

Android 'content://' URI Multiple Information Disclosure Vulnerabilities

No description provided by source. Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 whi...

Google Android - content: URI Multiple Information Disclosure Vulnerabilities

Google Android - content: URI Multiple Information Disclosure Vulnerabilities Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/...

Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities

Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We lo...

myOpenID XSS : One of the Largest OpenID provider is Vulnerable

myOpenID XSS : One of the Largest OpenID provider is Vulnerable One of the One of the Largest Independent OpenID provider "myOpenID" is Vulnerable to Cross Site Scripting XSS ,Discovered by "SeeMe" - Member of Inj3ct0r Team. Cross Site Scripting or XSS is one of the most common application-layer...

Supermicro IPMI Password Disclosure

== Product == Tested hardware: Supermicro X8SI6-F mainboard - IPMI firmware: 2.50 Supermicro X9SCL-F mainboard - IPMI firmware: 1.01 Likely affects other Supermicro boards of those generations that use the same type of firmware. == Problem == Modern servers often include a feature called IPMI to...

Wateen Isp wimax router login bypass

Exploit for hardware platform in category web applications =================== Salam wa Alaikum =================== +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ . . \ \ | | ||/ | | || | \ \ / //\ | /|//|||| / / /|| /...

CVE-2011-2664 Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products

======================================================================= title: Symlink Following and Second-Order Symlink Vulnerabilities in Multiple Check Point Security Management Products product: Check Point Security Management Multi-Domain Security Management / Provider-1 SmartCenter...

CVE-2009-5085

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions vi...

Design/Logic Flaw

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions vi...

CVE-2009-5083

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2, when configured as an OpenID relying party, does not perform the expected login rejection upon receiving an OP-Identifier from an OpenID provider, which allows remote attackers to bypass authentication via unspecified vectors...

CVE-2009-5085

IBM Tivoli Federated Identity Manager TFIM 6.2.0 before 6.2.0.2, when configured as an OpenID provider, does not delete the site information cookie in response to a user's deletion of a relying-party trust entry, which allows user-assisted remote attackers to bypass intended trust restrictions vi...