Hiawatha WebServer 7.4 - Denial of Service

Hiawatha WebServer 7.4 - Denial of Service Source: http://packetstormsecurity.org/files/view/99021/DCA-2011-0006.txt Discussion - DcLabs Security Research Group advises about the following vulnerabilityies: Software - Hiawatha WebServer 7.4 Vendor Product Description - Hiawatha is an open source...

TOTVS ERP Microsiga Protheus User Enumeration

DCA-2011-0002 Discussion - DcLabs Security Research Group advises about following vulnerabilityies: Software - TOTVS ERP Microsiga Protheus Vendor Product Description - Portuguese - Software de Gestão - TOTVS A TOTVS é uma empresa de software, inovação, relacionamento e suporte à gestão, líder...

Microsoft Windows XP - WmiTraceMessageVa Integer Truncation (PoC) (MS11-011)

/ Exploit Title: MS11-011CVE-2011-0045: MS Windows XP WmiTraceMessageVa Integer Truncation Vulnerability PoC Date: 2011-03-01 Author: Nikita Tarakanov CISS Research Team Software Link: Version: prior to MS11-011 Tested on: Win XP SP3 CVE : CVE-2011-0045 Status : Patched Binary Analysis:...

Microsoft Windows XP WmiTraceMessageVa Integer Truncation

/ Exploit Title: MS11-011CVE-2011-0045: MS Windows XP WmiTraceMessageVa Integer Truncation Vulnerability PoC Date: 2011-03-01 Author: Nikita Tarakanov CISS Research Team Software Link: Version: prior to MS11-011 Tested on: Win XP SP3 CVE : CVE-2011-0045 Status : Patched Binary Analysis:...

Google tweaks Search algorithm to reduce the search spam !

Google has warned that search rankings will be changing after it refined its systems to weed out content farms and other search spammers. Changes made in the last 24 hours have "noticeably impacts" on around 12 per cent of search queries. The changes are designed to block out so-called content fa...

Multiple Vulnerabilities in Lazyest Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in Lazyest Gallery which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerability in Lazyest Gallery The vulnerability exists due to...

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability

ZDI-11-090: Novell Netware RPC XNFS xdrDecodeString Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-090 February 18, 2011 -- CVE ID: CVE-2010-4227 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Novell -- Affected Products: Novell Netware --...

Multiple Vulnerabilities in 1 Flash Gallery wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in 1 Flash Gallery wordpress plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in 1 Flash Gallery wordpress plugin The vulnerability exists du...

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability

ZDI-11-087: Novell iPrint LPD Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-087 February 16, 2011 -- CVE ID: CVE-2010-4328 -- CVSS: 9, AV:N/AC:L/Au:N/C:P/I:P/A:C -- Affected Vendors: Novell -- Affected Products: Novell iPrint -- TippingPointTM IPS Customer...

Cross-site Scripting (XSS) Vulnerability in Question and Answer Forum

High-Tech Bridge SA Security Research Lab has discovered vulnerability in Question and Answer Forum WordPress plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in Question and Answer Forum The vulnerability exists due to input...

VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows Shell Graphics biCompression Buffer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft...

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "height" Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft...

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability

VUPEN Security Research - Microsoft Windows Shell Graphics BMP "width" Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user interfaces produced by Microsoft...

Anti-computer hacking bill coming in U.S. Congress !

Strengthening cybersecurity is the goal of legislation being introduced in the U.S. Congress after reports of hack attacks on computer networks at Nasdaq OMX Group NDAQ.O and at oil and gas companies. "Cyber-threats are not on the horizon, they are upon us," Democratic Senator Robert Menendez, wh...

Metasploit Framework v3.5.2 latest version download !

Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit Framework version 3.5.2! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits...

How to Recover iPhone Passwords in Six Minutes

Smartphone security has jumped to the top of the list of concerns for many IT security staffs and one of the main reasons for that is the epidemic of lost and stolen smartphones. Many of those devices have only minimal password protection, and now researchers in Germany have devised a new techniq...

Multiple Vulnerabilities in IWantOneButton WordPress Plugin

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in IWantOneButton WordPress Plugin which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in IWantOneButton WordPress Plugin The vulnerability...

Linksys WAP610N - Root Access Security

Linksys WAP610N - Root Access Security Secure Network - Security Research Advisory Vuln name: Linksys WAP610N Unauthenticated Access With Root Privileges Systems affected: WAP610N Firmware Version: 1.0.01 Systems not affected: -- Severity: High Local/Remote: Remote Vendor URL:...

Identity Theft Down, Losses Up

The number of identity theft victims in 2010 dropped 28 percent, yet individuals lost more on average than ever before, suggesting that attackers’ techniques are getting more sophisticated. According to a survey on consumer fraud released by Javelin Strategy & Research on Tuesday, annual fraud wa...

Multiple Vulnerabilities in Comment Rating

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Comment Rating which could be exploited to perform SQL injection attacks and gain access to sensitive information. 1 SQL injection vulnerabilities in Comment Rating The vulnerability exists due to input sanitatio...