Japanese Police 'Collar' Cat Carrying Malware Code

A hacker, or possibly group, that’s issued terrorists threats using remotely controlled computers in Japan remains at large despite a rare 3 million yen bounty and continuous games with media and police. The latest antic to generate considerable attention this week was leading Japanese authoritie...

Adobe Patches Acrobat, Reader and Flash Flaws

Adobe has not only joined Microsoft on the Patch Tuesday parade, but it too has critical vulnerabilities being exploited in the wild while a security update is in the works. Two patches were released today for Acrobat/Reader and Flash Player, yet the company has said that fixes for three ColdFusi...

Samsung Smart TV Bug Allows Remote Access, Root Privileges

It turns out that some smart TVs are a little too smart for their own good–and the good of users. Some specific models of Samsung TVs that have Wi-Fi and other advanced capabilities have a flaw that enables an attacker to take a variety of actions on the TV, including accessing potentially...

Samsung smart TV vulnerability allow attacker to read storage remotely

ReVuln Ltd. , a small security company headed by Donato Ferrante and Luigi Auriemma, post a video that demonstrates that how attacks can gain root on the appliances. Samsung Smart TV contain a vulnerability which allows remote attackers to swipe data from attached storage devices. In this...

CVE-2012-4841

Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service resource consumption via unknown vectors...

Memory corruption

Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service resource consumption via unknown vectors...

CVE-2012-4841

CVE-2012-4841 affects Tivoli Endpoint Manager for Remote Control Broker, versions 8.2 and earlier (up to 8.2.1- TIV-TEMRC821-IF0002). The vulnerability is described as unspecified and allows remote attackers to cause a denial of service through unknown vectors. Connected sources corroborate the t...

CVE-2012-4841

Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service resource consumption via unknown vectors...

PT-2012-5604

Name of the Vulnerable Software and Affected Versions Tivoli Endpoint Manager for Remote Control Broker version 8.2 Description The issue allows remote attackers to cause a denial of service, specifically resource consumption, via unknown vectors. Recommendations For version 8.2, update to...

CVE-2012-4841: Undefined Security Weakness

Unspecified vulnerability in Tivoli Endpoint Manager for Remote Control Broker 8.2 before 8.2.1-TIV-TEMRC821-IF0002 allows remote attackers to cause a denial of service resource consumption via unknown vectors...

Java zero-day exploit sold in underground Market

Once again a zero day vulnerability exploit is sold by cyber criminals in the underground, once again a the flaw is related to Oracle's Java software that could allow to gain remote control over victim's machine. The news has been reported by KrebsOnSecurity blog that announced that the exploit...

Multiple Command Execution Vulnerabilities in Smartphone Pentest Framework (SPF)

High-Tech Bridge Security Research Lab discovered multiple command execution vulnerabilities in Smartphone Pentest Framework SPF web-based GUI, which could be exploited to get control over a pentester's machine remotely. Similar vulnerabilities were discovered...

MPC (Media Player Classic) WebServer Multiple Vulnerabilities

========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...

MPC (Media Player Classic) XSS / Denial Of Service

========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities ==========================================================================================...

Media Player Classic XSS / Denial Of Service

MPC Media Player Classic suffers from cross site scripting and denial of service vulnerabilities. ========================================================================================== MPC Media Player Classic WebServer Multiple Vulnerabilities...

PT-2013-1719

Name of the Vulnerable Software and Affected Versions IBM Java versions 7 SR2 and earlier IBM Java versions 6.0.1 SR3 and earlier IBM Java versions 6 SR11 and earlier IBM Java versions 5 SR14 and earlier IBM Java 142 SR13 FP13 and earlier IBM Rational Host On-Demand affected versions not specifie...

PT-2013-1718

Name of the Vulnerable Software and Affected Versions IBM Java versions prior to 7 SR2 IBM Java 6.0.1 versions prior to SR3 IBM Java 6 versions prior to SR11 IBM Java 5 versions prior to SR14 IBM Java 142 versions prior to SR13 FP13 IBM Rational Host On-Demand affected versions not specified IBM...

Malware making bomb and death threats detected

Japanese police had arrested three people, accused them of making death threats via email and discussion forums. However, later Researchers at Symantec have determined that a piece of malware was making death and bomb threats online on behalf of its victims infected. Symantec confirmed that the...

Inventory 1.0 SQL Injection

Exploit Title: Inventory 1.0 Multiple SQL Vulnerabilities Date: 10/19/12 Author: G13 Twitter: @g13net Software Site: https://github.com/farevalod/inventory Version: 1.0 Category: webapp php dc585 ToC 0x01 Description 0x02 SQL Injection 0x03 Vendor Notification 0x01 Description PHP + SQL Inventory...

Researcher Develops Patch for Java Zero-Day, Puts Pressure on Oracle to Deliver its Fix

A security researcher has submitted to Oracle a patch he said took him 30 minutes to produce that would repair a zero-day vulnerability currently exposed in Java SE. He hopes his actions will spur Oracle to issue an out-of-band patch for the sandbox-escape vulnerability, rather than wait for the...