Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overload SEH

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Broadcom BCM4325 BCM4329 Devices - Denial of Service

Broadcom BCM4325 BCM4329 Devices - Denial of Service Exploit Author: CoreLabs Core Security Technologies fue descubierta por el investigador argentino Andrés Blanco, Vendor Homepage: Software Link: download link if available Version: 1.0 Tested on: Apple iPhone 3GS Apple iPod 2G HTC Touch Pro 2 H...

CVE-2012-2619

The CVE-2012-2619 entry concerns a flaw in Broadcom BCM4325/ BCM4329 Wi‑Fi firmware that handles 802.11i information elements. An out-of-bounds read could be triggered by a remote attacker on the same Wi‑Fi network, potentially causing a Wi‑Fi outage or device instability. Apple TV advisories cor...

Sony PlayStation 3 hacked with custom firmware

The PlayStation 3 has been hacked before, originally with the PSJailbreak dongle and fail0verflow, but Sony managed to fight back with Firmware 3.60 which managed to ingeniously re-secure the console. But Hackers have released a custom firmware which allows compromised consoles to log into PSN,...

Broadcom DoS on BCM4325 and BCM4329 devices

1. Advisory Information Title: Broadcom DoS on BCM4325 and BCM4329 devices Advisory ID: CORE-2012-0718 Advisory URL: http://www.coresecurity.com/content/broadcom-input-validation-BCM4325-BCM4329 Date published: 2012-10-23 Date of last update: 2012-10-23 Vendors contacted: Broadcom Corporation...

Former LulzSec hacker pleads guilty to Sony case

After last year's big PlayStation Network hack a lot of hacking groups such as Anonymous and LulzSec were intensely publicized. Back in June, a massive hack was conducted on the Sony Pictures Website. The attack led to the theft of details on over 1 million accounts and was linked to the hacker...

Unfixed Redirect vulnerability at openx.kanobu.ru

Security researcher Sony, has submitted on 10/01/2012 a Redirect vulnerability affecting openx.kanobu.ru, which at the time of submission ranked 26059 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed. If you...

Sony Mobile website hacked by NullCrew

Another Cyber attack on Sony this year, Hacking group called "NullCrew" hack into one of the biggest site of Sony mobile website www.sonymobile.com and leak complete database on Internet. Nullcrew releasing their hack dumps from their official twitter account @OfficialNull. The dump of database...

Unfixed XSS vulnerability at c2.com

Security researcher Sony, has submitted on 09/02/2012 a cross-site-scripting XSS vulnerability affecting c2.com, which at the time of submission ranked 38577 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 01/08/2012. It is currently unfixed. I...

Classmate of Lulzsec Hacker arrested and accused as another Lulzsec teammate

The two students accused of Sony Pictures hack participated in Cyber Defense Competition team exercises at the University of Advanced Technology in Arizona. US authorities have reportedly arrested a second suspected member of hacking group LulzSec on charges of taking part in an extensive compute...

Second LulzSec Member Arrested for Sony Pictures Attack

A Tempe, Arizona man was arrested Tuesday for allegedly taking part in the June 2011 attack on Sony Pictures Entertainment Inc.’s network, in which passwords and other personal data was stolen from one million user accounts. Raynaldo Rivera, 20, was charged with conspiracy and unauthorized...

Sony VAIO Wireless Manager ActiveX Control WifiMan.dll Multiple Buffer Overflows

The Sony VAIO Wireless Manager ActiveX control installed on the remote Windows host is affected by buffer overflow vulnerabilities in 'SetTmpProfileOption' and 'ConnectToNetWokrkOption' in WifiMan.dll. By tricking a victim into visiting a specially crafted page, an attacker may be able to execute...

ffmpeg library multiple security vulnerabilities

Multiple security vulnerabilities on Westwood Studios VQA, Apple MJPEG-B, Theora, Matroska, Vorbis, Sony ATRAC3, DV, NSV parsing...

LulzSec Affiliate, Ryan Cleary, Indicted in U.S.

Ryan Cleary, the 20 year-old Essex, England hacker associated with the hacker collective LulzSec, was indicted by a federal grand jury in the United States on Tuesday. According to an FBI press release, the grand jury indicted Cleary with one count of conspiracy and two counts of the unauthorized...

CVE-2012-0985

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.0064, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0...

Buffer overflow

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.0064, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0...

CVE-2012-0985

The CVE-2012-0985 issue affects Sony VAIO Wireless Manager components (ActiveX control in WifiMan.dll and related VAIO utilities). Multiple buffer overflows in SetTmpProfileOption() and ConnectToNetwork() allow a remote attacker to crash the application and potentially execute arbitrary code via ...

CVE-2012-0985

Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.0064, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0...

Unfixed XSS vulnerability at libguides.sit.edu

Security researcher Sony, has submitted on 06/02/2012 a cross-site-scripting XSS vulnerability affecting libguides.sit.edu, which at the time of submission ranked 196887 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currentl...

Unfixed XSS vulnerability at guides.lib.uiowa.edu

Security researcher Sony, has submitted on 06/02/2012 a cross-site-scripting XSS vulnerability affecting guides.lib.uiowa.edu, which at the time of submission ranked 11674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...