A Good Year for Security Collaboration

It seems like just yesterday when I was at Black Hat. Now as I get ready to fly to Las Vegas again, I look forward to seeing a lot of security researchers, hearing their latest exploits and how they fared over the last 352 days. At the same time, it is a great opportunity to look back at the past...

Design/Logic Flaw

The Research In Motion RIM BlackBerry 8800 allows remote attackers to cause a denial of service memory consumption and browser crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

Admin News Tools 2.5 - 'fichier' Remote File Disclosure

Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability...

Admin News Tools 2.5 - fichier Remote File Disclosure

Admin News Tools 2.5 - fichier Remote File Disclosure Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts:...

Admin News Tools 2.5 (fichier) Remote File Disclosure Vulnerability

No description provided by source. Securitylab.ir Application Info: Name: Admin News Tools Version: 2.5 Website: http://www.adminnewstools.fr.nf Download: http://www.adminnewstools.fr.nf/zip/ANT-2.5.zip Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir &...

Secunia Research: Novell eDirectory iMonitor "Accept-Language" Buffer Overflow

====================================================================== Secunia Research 14/07/2009 - Novell eDirectory iMonitor "Accept-Language" Buffer Overflow - ====================================================================== Table of Contents Affected...

citrix xencenterweb - Cross-Site Scripting / SQL Injection / Remote Code Execution

Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL: http://www.citrix.com Authors: Alberto Trivero [email protected] - Claudio...

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution

citrix xencenterweb - Cross-Site Scripting SQL Injection Remote Code Execution Secure Network - Security Research Advisory Vuln name: Citrix XenCenterWeb Multiple Vulnerabilities Systems affected: Citrix XenCenterWeb Systems not affected: n/a Severity: High Local/Remote: Remote Vendor URL:...

dedecms v5.3 Arbitrary File Upload Vulnerability

Securitylab.ir Application Info: Name: dedecms Version: v5.3 Website: http://dedecms.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk: High...

Researchers to Show Off Veiled Browser Darknet

One of the more interesting presentations on the schedule at next month’s Black Hat conference is a talk by renowned Web security researcher Billy Hoffman of HP on a new method for implementing a darknet in browsers using just PHP and JavaScript. The approach, which Hoffman and his co-presenter...

[Full-disclosure] CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Title: CA20090615-01: CA ARCserve Backup Message Engine Denial of Service Vulnerabilities CA Advisory Reference: CA20090615-01 CA Advisory Date: 2009-06-15 Reported By: iViZ Security Research Team Impact: A remote attacker can cause a denial of servic...

Secunia Research: Mozilla Firefox Java Applet Loading Vulnerability

====================================================================== Secunia Research 12/06/2009 - Mozilla Firefox Java Applet Loading Vulnerability - ====================================================================== Table of Contents Affected...

Unfixed XSS vulnerability at stavrakoudis.econ.uoi.gr

Security researcher TurKPoweR, has submitted on 13/06/2009 a cross-site-scripting XSS vulnerability affecting stavrakoudis.econ.uoi.gr, which at the time of submission ranked 102075 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It...

Cormac Herley on the Underground Economy, IRC Economics and the Externalities of Cybercrime

Dennis Fisher talks with Cormac Herley of Microsoft Research about the paper he co-authored on the realities of the underground economy, why sales of stolen credit cards resemble a market for lemons and how we can get better data on cybercrime activities. Podcast audio courtesy of sykboy65 Downlo...

Mac OS X malware posing as fake video codec

From ZDNet Dancho Danchev Researchers from ParetoLogic are reporting on a newly discovered Mac OS X malware variant posing as fake video ActiveX object paretologic.com found at a bogus Macintosh PortTube site. The use of fake video codecs is a social engineering tactic exclusively used by malware...

Secunia Research: Adobe Reader JBIG2 Text Region Segment Buffer Overflow

====================================================================== Secunia Research 10/06/2009 - Adobe Reader JBIG2 Text Region Segment Buffer Overflow - ====================================================================== Table of Contents Affected...

Race condition while accessing the private data of a NPObject JS wrapper class object — Mozilla

Jakob Balle and Carsten Eiram of Secunia Research reported a race condition in NPObjWrapperNewResolve when accessing the properties of a NPObject, a wrapped JSObject. Balle and Eiram demonstrated that this condition could be reached by navigating away from a web page during the loading of a Java...

TELUS Security Labs VR - Microsoft Office Excel Malformed Records Stack Buffer Overflow

Microsoft Office Excel Malformed Records Stack Buffer Overflow TSL ID : FSC20090609-01 Reference: http://telussecuritylabs.com/threats/show/FSC20090609-01 1. Affected Software Microsoft Office Excel 2000 Microsoft Office Excel 2002 Reference: http://office.microsoft.com/en-us/excel/default.aspx 2...

Secunia Research: Microsoft Excel String Parsing Integer Overflow Vulnerability

====================================================================== Secunia Research 09/06/2009 - Microsoft Excel String Parsing Integer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft Excel Record Parsing Array Indexing Vulnerability

====================================================================== Secunia Research 09/06/2009 - Microsoft Excel Record Parsing Array Indexing Vulnerability - ====================================================================== Table of Contents Affected...