UNITED Security Summit 2011, 19-20 September - San Francisco

UNITED Security Summit 2011, 19-20 September - San Francisco The UNITED Security Summit is focused on innovation and collaboration in the security community. Bringing together security decision makers, practitioners, commercial vendors, open source projects and academia, the Summit highlights...

TRUSTe Website - Remote SQL Injection Vulnerability

Document Title: =============== TRUSTe Website - Remote SQL Injection Vulnerability Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 188 Product & Service Introduction: =============================== TRUSTe is a company based in San...

TRUSTe Website - Remote SQL Injection Vulnerability

Document Title: =============== TRUSTe Website - Remote SQL Injection Vulnerability Release Date: ============= 2011-07-18 Vulnerability Laboratory ID VL-ID: ==================================== 188 Product & Service Introduction: =============================== TRUSTe is a company based in San...

HP Virtual SAN Appliance buffer overflow

Buffer overflow in hydra.exe TCP/13838 authentication is unpatched for 180 days...

ZDI-11-111: (0Day) Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request Remote Code Execution Vulnerability

ZDI-11-111: 0Day Hewlett-Packard Virtual SAN Appliance hydra.exe Login Request Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-111 March 23, 2011 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packa...

PT-2011-4860

Name of the Vulnerable Software and Affected Versions Hewlett-Packard Virtual SAN Appliance affected versions not specified Description The issue concerns a remote code execution vulnerability in the hydra.exe login request of the Hewlett-Packard Virtual SAN Appliance. Recommendations At the...

Website critical of Myanmar regime hacked by unknown Hackers !

A Thailand-based news website critical of Myanmar's military government says it has been hacked by unknown attackers who posted fake articles on it. The Irrawaddy website is run by exiled Myanmar journalists. It said on its home page Sunday that it was trying to fix the problem and prevent furthe...

Fei Ye and Ming Zhong (Transmeta, Sun Microsoystems, NEC and Trident Microsystems)

Ye and Zhong were alleged to have obtained trade secrets, including designs for super integrated circuit chips from a variety of Silicon Valley firms through a front company, Supervision, Inc. a/k/a Hangzhou Zhongtian Microsystems Company Ltd. The two posed as legitimate businessmen interested in...

Study Finds Popular Sites Guilty of Hi-Jacking History

A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...

ToorCon

San Diego, California, U.S. Southern California’s premiere hacking event, ToorCon is in its 12th year, after being launched by San Diego area 2600 user group members David Hulton aka h1kari and Ben Greenberg in 1999. No industry event, ToorCon is for serious security practitioners, offering...

SF Network Admin Terry Childs Gets 4 Years

A city of San Francisco network administrator who refused to hand over administrative passwords to the city’s network was sentenced to four years in state prison Friday. Read the full article. IDG News Service...

Palo Alto Network Vulnerability - Cross-Site Scripting

Palo Alto Network Vulnerability - Cross-Site Scripting XSS ------------------------------ Class: Cross-Site Scripting XSS Vulnerability CVE: CVE-2010-0475 Remote: Yes Local: Yes Published: May 11, 2010 08:30AM Timeline:Submission to MITRE: 1/18/2010 Vendor Contact: 2/18/2010 Vendor Response:...

Childs Guilty of Hijacking SF Passwords

After a six-month trial, San Francisco city admin Terry Childs was found guilty of a sole felony count of hijacking the city’s computer system. Read the full article. Wired...

SugarCRM x<5.5.0a and 5.2.0l cross site scripting Vulnerability

Exploit for unknown platform in category web applications =============================================================== SugarCRM x ;...

SugarCRM Cross Site Scripting

Class: Stored Cross Site Scripting XSS CVE: CVE-2010-0465 Remote: Yes Local: Yes Published: Jan 1, 2010 12:01AM Timeline: Submission to Mitre: January 29, 2010 Vendor Contact: February 18, 2010 Vendor Response: February 19, 2010 Patch Available: March 10, 2010 Credit: Jeromie Jackson CISSP, CISM...

RSA 2010: Cryptographers Discuss Wisdom of 'Foolishness'

At the RSA conference in San Francisco, a panel of leading cryptographers reveal some of the lessons they have learned while making seemingly imprudent decisions. By going against the grain, new objectives can be made and boundaries overcome...

Security B-Sides On The Conference Map

When security professionals flock to San Francisco for next week’s RSA 2010 security conference, they will have access to a set of presentations and events not found on the official RSA agenda. It’s billed as an anti-conference of sorts; a place where practitioners can go for an alternate,...

UBUNTU-CVE-2009-3941

Martin Lambers mpop before 1.0.19, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the 1 subject's Common Name or 2 Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted...

CNN iReport: ToorCon Hacker Conference

At the ToorCon San Diego conference, a CNN iReporter talks with security professionals about basic security issues and then see Marty Morrow escape from handcuffs without a key!...

cman security, bug fix, and enhancement update

2.0.115-1 - RSA II fencing agent has been fixed. - Resolves: rhbz493802 2.0.114-1 - local variable 'verbosefilename' referenced before assignment has been fixed - RSA II fencing agent has been fixed. - Resolves: rhbz493802 rhbz514758 2.0.113-1 - Limitations with 2-node fencescsi are now properly...