Secunia Research: Employee Timeclock Software Backup Information Disclosure

====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software Backup Information Disclosure - ====================================================================== Table of Contents Affected...

Secunia Research: Employee Timeclock Software "mysqldump" Password Disclosure

====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software "mysqldump" Password Disclosure - ====================================================================== Table of Contents Affected...

Secunia Research: XnView DICOM Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 10/03/2010 - XnView DICOM Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Employee Timeclock Software SQL Injection Vulnerabilities

====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities - ====================================================================== Table of Contents Affected...

Employee TimeClock Software 0.99 - SQL Injection

Employee TimeClock Software 0.99 - SQL Injection source: http://www.securityfocus.com/archive/1/509995 ====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities -...

Employee TimeClock Software 0.99 - SQL Injection

source: http://www.securityfocus.com/archive/1/509995 ====================================================================== Secunia Research 10/03/2010 - Employee Timeclock Software SQL Injection Vulnerabilities - ====================================================================== Table of...

Voice Authentication Gets Research Boost

North Carolina state researchers have modified existing speech authentication computer models and have streamlined the process so that it operates more efficiently. Read the full article. ScienceDaily...

JITed stage-0 shellcode

JITed stage-0 shellcode. Shellcode exploit for win32 platform Title: JITed stage-0 shellcode Author: Alexey Sintsov Download N/A // JITS0.AS // // VirtualProtect stage-0 shellcode // // how to use stack // // 0000: 0x11111111 -- ret addr to JIT satge0 shellcode // 0004: 0x60616f62 -- pointer on...

Linux x86 - disabled modsecurity - 64 bytes

No description provided by source. view source print? / [email protected] - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable modsecurity 64 bytes asm "xor %eax,%eax \n" "push %eax \n" "cdq \n" "push $0x646f6d73 \n" "push $0x69643261 \n" "push $0x2f6e6962...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

OpenSSL 0.9.8i on the Gaisler Research LEON3 SoC on the Xilinx Virtex-II Pro FPGA uses a Fixed Width Exponentiation FWE algorithm for certain signature calculations, and does not verify the signature before providing it to a caller, which makes it easier for physically proximate attackers to...

CVE-2010-0928

Removed by vendor...

CVE-2010-0928

CVEs and details: CVE-2010-0928 affects OpenSSL 0.9.8i on the Gaisler LEON3 SoC (Xilinx Virtex-II Pro FPGA). The root cause is a Fixed Width Exponentiation (FWE) implementation that does not verify the signature before returning it, enabling a physically proximate attacker to recover the private ...

linux/x86 - disabled modsecurity - 64 bytes

Exploit for linux/x86 platform in category shellcode =========================================== linux/x86 - disabled modsecurity - 64 bytes =========================================== / email protected - Goodfellas Security Research Team - 2010 /usr/sbin/a2dismod mod-security2 - disable...

P2P Networks Can Nab Private Medical Info

The personal health and financial information stored in thousands of North American home computers may be vulnerable to theft through file-sharing software, according to a research study published online in the Journal of the American Medical Informatics Association. Read the full article...

Microsoft Internet Explorer 678 - winhlp32.exe MsgBox() Remote Code Execution

Microsoft Internet Explorer 678 - winhlp32.exe MsgBox Remote Code Execution Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context...

Microsoft Internet Explorer 6/7/8 - 'winhlp32.exe MsgBox()' Remote Code Execution

Microsoft Internet Explorer is prone to a remote code execution vulnerability. Source iSEC Security Research: http://isec.pl/vulnerabilities10.html Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise th...

Researchers Improve Random-Number Generation with Forced Memory 'Twitching'

A German research team has now developed a true random number generator that uses an extra layer of randomness by making a computer memory element, a flip-flop, twitch randomly between its two states 1 or 0. Immediately prior to the switch, the flip-flop is in a “metastable state” where its...

Research Finds Crystal Material For Chip Security

Researchers at Florida State University have discovered crystals that could lead to super security chips. The security chips could store encrypted data written two different ways — electrically and magnetically — making extraction of the data more complex and so more difficult for attackers to...

IBM Websphere Portal Cross Site Scripting

Hacktics Research Group Security Advisory http://www.hacktics.com/view=Resources%7CAdvisory By Oren Hafif, Hacktics. 24-Feb-2010 =========== I. Overview =========== During a penetration test performed by Hacktics' experts, certain vulnerabilities were identified in an IBM Websphere Portal Server...