Large-Scale Security Experiments Coming

A consortium of cybersecurity researchers from MIT, Purdue and Carnegie Mellon was announced in Washington D.C. with the stated goal is to collaborate on cybersecurity research including 10 projects, one which is the development of an Internet-scale model on which to perform constrained experimen...

Secunia Research: Roxio Creator Image Rendering Integer Overflow Vulnerability

====================================================================== Secunia Research 02/12/2009 - Roxio Creator Image Rendering Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: RhinoSoft Serv-U TEA Decoding Buffer Overflow

====================================================================== Secunia Research 18/11/2009 - RhinoSoft Serv-U TEA Decoding Buffer Overflow - ====================================================================== Table of Contents Affected...

Hellcode Research: Novell eDirectory HTTPSTK Login Stack Overflow Vulnerability

Vendor: Novell Product: eDirectory for Windows Version: 8.8 SP5 Vulnerability: Stack Overflow Description: Vulnerability is in "/dhost/httpstk" This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell eDirectory. The specific flaw exists in the...

Mike Bailey on Adobe Flash Vulnerabilities

Dennis Fisher talks with Mike Bailey of Foreground Security about his research on Adobe Flash flaws, the same-origin policy and Web site security. Podcast audio courtesy of sykboy65 Download Subscribe to the Digital Underground podcast on Image via AJolly‘s Flickr photostream...

Secunia Research: Gimp PSD Image Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 17/11/2009 - Gimp PSD Image Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2009-3944

This CVE concerns the BlackBerry Browser on the BlackBerry 8800. It describes a remotely triggerable denial of service caused by a JavaScript loop that configures the home page via the setHomePage method and a DHTML behavior property. The statement implies the vulnerability arises from how the pa...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Secunia Research: Gimp BMP Image Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 12/11/2009 - Gimp BMP Image Parsing Integer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

Facial Recognition Research Claims Near 100% Accuracy

Mohamed Abdel-Mottaleb, professor and chair in the UM Department of Electrical and Computer Engineering has developed state-of-the-art systems capable of photographing an image of someone’s face and ear and comparing it against pre-stored images of the same person, with 95-100 percent accuracy...

Spam Botnet Gaining Traction

Upping its output of spam by nearly 5 percent in recent weeks, a new botnet called Festi has grabbed the attention of researchers, cracking the list of top 10 most prolific spamming botnets. The botnet has apparently pumped up the volume of spam by recruiting more bots, about 60 percent of which...

openSUSE Security Update : mozilla-nspr (mozilla-nspr-1510)

This update fixes a bug in the Mozilla NSPR helper libraries, which could be used by remote attackers to potentially execute code via JavaScript vectors. MFSA 2009-59 / CVE-2009-1563: Security researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to...

Critical Flaw in BlackBerry Desktop Manager Software

Research in Motion RIM has shipped a patch to cover a gaping hole in its BlackBerry Desktop Manager software. The vulnerability, which exists in a Lotus Notes Intellisync DLL that the BlackBerry Desktop Manager uses, allows a malicious user to perform an attack that leverages social engineering t...

Data Breaches Increase ID Theft Chances 4X

Individual data compromised in a data breach is four times more likely to be used for identity theft finds Javelin Research in a multi-year study. Another key finding cited: Most consumers do not see the link between breaches and identity theft. “Despite 19.5 percent of breach victims suffering...

Secunia Research: IBM Tivoli Storage Manager CAD Service Buffer Overflow

====================================================================== Secunia Research 04/11/2009 - IBM Tivoli Storage Manager CAD Service Buffer Overflow - ====================================================================== Table of Contents Affected...

Kingsoft Internet Security 9 Denial of Services

No description provided by source. Application: Kingsoft Internet Security 9 Platforms: Windows Vista SP2 Windows XP SP3 Exploitation: Denial of Services Discover Date: 2009-11-05 Author: Francis Provencher Protek Research Lab's BLog: httP://Protekresearch.blogspot.com 1 Introduction 2 Report...

IBM Tivoli Storage Manager CAD Service Buffer Overflow

No description provided by source. ====================================================================== Secunia Research 04/11/2009 - IBM Tivoli Storage Manager CAD Service Buffer Overflow - ====================================================================== Table of Contents Affected...

Buffer overflow

Buffer overflow in the IBM Lotus Notes Intellisync ActiveX control in lnresobject.dll in BlackBerry Desktop Manager in Research In Motion RIM BlackBerry Desktop Software before 5.0.1 allows remote attackers to execute arbitrary code via a crafted web page. NOTE: some of these details are obtained...

Security Fixes for Java, BlackBerry Desktop

Sun Microsystems and Research In Motion have issued critical bug fixes for security issues with their products. Both updates include fixes for critical security bugs that could be abused by attackers to run unauthorized software on a victim’s computer, although none of the flaws appear to have be...

PSArt 1.2 SQL Injection Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: PSArt Version: 1.2 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...