Location Apps Ripe For Malware Exploits

As soon as a new technology gets traction, smart criminals figure out a way to misapply it, and one of the hottest features in the mobile world, location awareness, is next in line for exploitation. A contest involving 300 testers found close to 900 bugs in three leading location/check-in service...

Top secret: three steps to teach you easily steal a VMware virtual machine and its data-vulnerability warning-the black bar safety net

Whether to remember a virtualized e-mail server or the payment system? If you have access to the virtualization environment administrator privileges, you can easily get into the virtualization environment, and steal all the data without leaving any traces. From the Data Center to steal a physical...

Google Releases Chrome 5.0.375.70

Google has released Chrome 5.0.375.70 for Linux, Mac, and Windows to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code, conduct cross-site scripting attacks, bypass security restrictions, or obtain sensitive information. US-CERT encourages use...

Researchers Show Weaknesses of Vehicle Software Systems

A new paper by a group of academic researchers has exposed a set of serious weaknesses in the software systems that control many modern cars, giving them the ability to lock passengers inside the car, cut the car’s brakes and perform other interesting tricks. The work, done by researchers at the...

OWASP Releases Top 10 Web App Risks

The non-profit Open Web Application Security Project OWASP has released its latest list of top 10 web application security risks. Read the release statment. OWASP.org...

velBox 1.2 Insecure Cookie Handling

======================================================================================== | Title : velBox v1.2 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | | Web Site : http://dl.p30vel.ir/scripts/velBox-cms-p30vel.zip |...

Using Live Data In Development Is Risky

Those charged with the care and feeding of database information stores, beware: A new statistic tucked into a comprehensive study of financial services firms’ data protection policies shows that even at the most security-aware organizations, application developers still use live data in their...

eSmile Script - 'index.php' SQL Injection

eSmile index.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : eSmile .:. Bug Type : Sql InjectionMysql .:. Dork : "Powered by: eSmile" =...

UGiA PHP UPLOADER 0.2 - Arbitrary File Upload

======================================================================================== | Title : UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : sourceforge.net/projects/upu/files | Dork : Powered b...

CVE-2008-7252

libraries/File.class.php in phpMyAdmin 2.11.x before 2.11.10 uses predictable filenames for temporary files, which has unknown impact and attack vectors...

I-Rater Basic Shell Upload

======================================================================================== | Title : I-RATER Basic Shell Upload Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Site :...

PHPMPS 0day-vulnerability warning-the black bar safety net

Author:Minghacker From:http://www.3est.com Blog: http://yxmhero1989.blog.163.com PHPMPS ,masterhttp://www.phpmps.com/to download. v2. 0 official version of GBK and v2. 0 full version UTF8 There are serious security risks, hope you do not destroy, and calmly wait for the official fix upgrade...

DSA-1960-1 acpid - weak file permissions

Bulletin has no description...

How to clear Remote Desktop Connection to the IP domain information-vulnerability warning-the black bar safety net

Commonly used Remote Desktop Connection friends will find Remote Desktop Connection every time a record is successfully connected to the remote IP or domain name, and the information displayed in the connection address in the input box drop-down menu. As a result of course of Remote Desktop...

Unencrypted Telnet Server

The remote host is running a Telnet server over an unencrypted channel. Using Telnet over an unencrypted channel is not recommended as logins, passwords, and commands are transferred in cleartext. This allows a remote, man-in-the-middle attacker to eavesdrop on a Telnet session to obtain...

AspBar V3. 0 the entire Station management system 0day-vulnerability warning-the black bar safety net

AspBar V3. 0 the entire Station management system for the presence of Cookies injection vulnerability Kugo. asp problem code: %id=request"kuid" set rsl=server. createobject"adodb. recordset" sqll="update kulink set hits=hits+1 where ID="&ID&"" rsl. open sqll,conn,1,3 set rs=server...

CA20091008-01: Security Notice for CA Anti-Virus Engine

CA20091008-01: Security Notice for CA Anti-Virus Engine Issued: October 8, 2009 CA's support is alerting customers to multiple security risks associated with CA Anti-Virus Engine. Vulnerabilities exist in the arclib component that can allow a remote attacker to cause a denial of service, or to...

moziloCMS 1.10.1 Traversal / XSS / Fixation

MajorSecurity Advisory 55moziloCMS - Directory Traversal, Cross Site Scripting and Session Fixation Issues Details ======= Product: moziloCMS Security-Risk: high Remote-Exploit: yes Vendor-URL: http://cms.mozilo.de/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovere...

Security Pros Are Focused on the Wrong Threats

From The New York Times Riva Richmond Corporate information technology departments are prioritizing the wrong threats to their computer systems, focusing on old problems and leaving their companies open to a raft of new cyberattacks targeting sensitive customer and corporate information. That is...

Parsing JS Trojan attack with anti-bug warning-the black bar safety net

Web hang horse has now become hackers launched cyber attacks the main one way, and therefore protect against Web security threats, it is particularly important, this article will introduce some of the common JS hung it to the phenomenon and how to respond. Trojan has always been a hack of adept...