DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection

Title ----- DDIVRT-2011-38 KnowledgeTree login.php Blind SQL Injection Severity -------- High Date Discovered --------------- November 18, 2011 Discovered By ------------- Digital Defense, Inc. Vulnerability Research Team Credit: sxkeebler and r@b13$ Vulnerability Description...

Secunia Research: Winamp AVI Parsing Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 12/12/2011 - Winamp AVI Processing Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

QuesCom Qportal User 5.10.014 Source Disclosure

Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - QuesCom Qportal User Vendor Product Description - No vendor product description - Site: http://www.quescom.com/ Advisory Timeline - 12/01/2011 - First Contact requesting security department...

CyberLink Stack Buffer Overflow

!/usr/bin/python Exploit Title: CyberLink Multiple Products File Project Handling Stack Buffer Overflow POC by: modpr0beatspenteradotcom @modpr0be Platform: Windows Tested on: Windows XP SP3, Windows 7 SP1 with: CyberLink Power2Go 7 build 196 CyberLink Power2Go 8 build 1031 CyberLink WaveEditor 2...

BlackBerry PlayBook Tablet 特权提升漏洞

Bugtraq ID: 50931 CVE ID：CVE-2011-0291 BlackBerry PlayBook Tablet是一款黑莓公司推出的平板电脑。 BlackBerry PlayBook平板电脑上的BlackBerry PlayBook服务存在安全漏洞，可提升特权，此服务用于通过USB连接在平板电脑与运行BlackBerry桌面软件的电脑进行文件共享。此漏洞不能用于远程攻击者，但可以提升特权。 可执行特制代码的用户可利用此漏洞操作黑莓PlayBook备份归档文件，更改特定配置文件以获得root权限，比如用于越狱。 Research In Motion Blackberry...

OSTP Announces New Cybersecurity R&D Plan

The Office of Science and Technology Policy OSTP released a new report yesterday that details plans to complement the nation’s existing cybersecurity policy, according to a blog entry on the office’s site co-authored by U.S. Chief Technology Officer Aneesh Chopra and Cybersecurity Coordinator...

Multiple XSS vulnerabilities in XOOPS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in XOOPS, which can be exploited to perform Cross-Site Scripting XSS attacks. 1 Multiple Cross-Site Scripting XSS in XOOPS: CVE-2012-0984 1.1 Input passed via the "touserid" POST parameter to /modules/pm/pmlite.php ...

PT-2011-48: Multiple Vulnerabilities in AtMail

Specialists from the Positive Technologies Research Center have revealed multiple vulnerabilities in the AtMail webmail interface. 1. Arbitrary Files Loading The system allows one to load files attached to email letters. File extension is not checked; thus, arbitrary files including .php files ca...

Heap Memory Corruption in HP Device Access Manager for Protect Tools Information Store

No description provided by source. Vulnerable Version: Prior to v.6.1.0.1 Tested Version: 5.0.0.5 Vendor Notification: 26 August 2011 Vulnerability Type: Heap Memory Corruption Status: Fixed by Vendor Risk level: Medium Credit: High-Tech Bridge SA Security Research Lab...

Microsoft Research: Spammers Act Just Like HIV Virus In Avoiding Filters

Security researchers often use language and metaphors from the natural world to describe problems in the virtual world. Thus, our use of the terms “virus,” and “worm.” Now it turns out that the links may not be so arbitrary, after Microsoft researchers discovered that tools they developed to dete...

RedHat Update for cyrus-imapd RHSA-2011:1508-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

McAfee drafted Five Steps to Avoiding bad apps on Pc & Mobile

McAfee drafted Five Steps to Avoiding bad apps on Pc & Mobile Malicious applications are one of the most serious threats to smartphone users today. Not only can a dangerous app infect your phone and steal your personal information, it can even spy on you. Read our five easy tips for avoiding bad...

McAfee drafted Five Steps to Avoiding bad apps on Pc & Mobile

McAfee drafted Five Steps to Avoiding bad apps on Pc & Mobile Malicious applications are one of the most serious threats to smartphone users today. Not only can a dangerous app infect your phone and steal your personal information, it can even spy on you. Read our five easy tips for avoiding bad...

cyrus, perl security update

CentOS Errata and Security Advisory CESA-2011:1508 Updated cyrus-imapd packages that fix two security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System...

IBM Lotus Domino Server Controller Authentication Bypass Vulnerability

No description provided by source. Exploit Title: IBM Lotus Domino Controller auth. bypass Date:30/11/2011 Author: Alexey Sintsov Software Link: http://www.ibm.com/ Version:8.5.3/8.5.2 FP3 0day Tested on: Windows 7 / Windows 2008 CVE : CVE-2011-1519 Application: IBM Lotus Domino Controller Versio...

Nullcon GOA 2012 - International Security Conference

Nullcon GOA 2012 - International Security Conference The open security community is a registered non-profit society and by far the largest security community in India with more than 2000 members comprising of information security professionals, ethical hackers and law enforcement professionals...

Security Research : Be friend to anyone on Facebook in 24 hours

Security Research : Be friend to anyone on Facebook in 24 hours "People have simply ignored the threat posed by adding a profile without checking if this profile is true. New Technologies have loopholes, but it is up to the users to be aware of this type of flaw. Social networks can be fantastic,...

Security Research : Be friend to anyone on Facebook in 24 hours

Security Research : Be friend to anyone on Facebook in 24 hours "People have simply ignored the threat posed by adding a profile without checking if this profile is true. New Technologies have loopholes, but it is up to the users to be aware of this type of flaw. Social networks can be fantastic,...

Cross-site Scripting (XSS) Vulnerabilities in epesi BIM

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in epesi BIM which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in epesi BIM 1.1 The vulnerability exists due to input sanitation error in the "diratual"...

Millions of printers open to devastating hack attack

Millions of printers open to devastating hack attack Could a hacker from half-way around the planet control your printer and give it instructions so frantic that it could eventually catch fire? Or use a hijacked printer as a copy machine for criminals, making it easy to commit identity theft or...