CVE-2011-3640

Untrusted search path vulnerability in Mozilla Network Security Services NSS, as used in Google Chrome before 17 on Windows and Mac OS X, might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory. NOTE: the vendor's response was "Strange behavior, but...

PT-2011-4555 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 17 Description: The issue is related to an untrusted search path vulnerability in Mozilla Network Security Services NSS as used in Google Chrome. This might allow local users to gain privileges via a Trojan hor...

DerbyCon 2011 Security Conference - Louisville, Kentucky

DerbyCon 2011 Security Conference - Louisville, Kentucky Welcome to a new age in security conferences, a new beginning, and a new way to share in the information security space. Our goal is to create a fun environment where the security community can come together and share ideas. Before we even...

Java.com URL Redirect

================================== java.com | Arbitrary URL Redirect Vulnerability ================================== 1. VULNERABILITY DESCRIPTION - Arbitrary URL Redirect http://java.com/inc/BrowserRedirect1.jsp?locale=en&host=attacker.in Demo:...

Parallels Plesk 8.2 URL Redirection

Parallels Plesk 7.0 - 8.2 | Open URL Redirection Vulnerability 1. OVERVIEW The Plesk versions from 7.0 to 8.2 are vulnerable to Open URL Redirection when "Enable [email protected]" access format, a new feature introduced in Plesk 7.0, is enabled in user preferences. 2. BACKGROUND Parallels Plesk...

Europe's Cybersecurity Agency Gears Up for War on Botnets !

The European Network and Information Security Agency ENISA, Europe's Cyber security agency, issued a report focused on botnets this week titled, "Botnets: Measurement, Detection, Disinfection and Defence." The report discusses the reliability of botnet size estimates and provides recommendations...

UBUNTU-CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

Albanian Cyber Army Hack into Digitalb.al & Top-channel.tv !

Albanian Cyber Army Hack into Digitalb.al & Top-channel.tv ! Shell on Top-channel.tv Shell on Digitalb.al News Source : Albanian Cyber Army...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability

============================================================================== Joomla! 1.0.x 1.0.15 | Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The Joomla! 1.0.x series are currently vulnerable to Cross Site...

Jose Ignacio Lopez (GM)

Lopez was the head of General Motors’ Global Purchasing division when he defected for GM competitor VW to head that company’s purchasing operation in 1993. According to a lawsuit filed by GM, Lopez and other company executives brought with them more than two million pages of top-secret GM...

Top-Channel.Tv DDOS Atack By Teo DownTurn (AHT-CREW)

Top-Channel.Tv DDOS Atack By Teo DownTurn AHT-CREW Top-Channel.Tv The Best TV Channel In Albania...!!! Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Threatpost's List of the Top 10 Security Top 10 Lists

Ever since the traditional print industry collapsed in on itself like a decommissioned ‘Vegas casino, replaced with blogs, micro blogs, social networking and other forms of Web based publishing, the end of the year has brought with it a blizzard of retrospective and prospective Top 10 lists from...

Data Consumption via Opera Mini Reaches 6.3 Petabytes

Opera releases monthly data generated by its users. In November 2010, Opera reported significant increases in unique users, pages viewed, and data consumed via its Mini browser. Around 80 million people used the Opera Mini browser in November, viewing 44.6 billion pages. According to Opera, its...

PHP Top Sites Cross Site Scripting / SQL Injection

PHP Top Sites Multiple SQL/XSS Vulnerability Author : kAsvææ | c0de Hunters Name : PHP Top Sites Bug Type : SQL/XSS Version :All Google Dork:"Powered By PHP TopSites" Home Page : http://itop10.net/ You can download it : http://webscripts.softpedia.com/script/Top-Sites/PHP-TopSites-41994.html SQL ...

Study Finds Popular Sites Guilty of Hi-Jacking History

A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...

Joomla! 1.5.20 <= Cross Site Scripting (XSS) Vulnerability

OVERVIEW The Joomla! web application was vulnerable to Cross Site Scripting vulnerability. 2. PRODUCT DESCRIPTION Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a model–view–controller MVC Web application...

ShmooCon

Washington D.C., U.S. Go to Shmoo. Enjoy yourself at Shmoo. But for God’s sake, just don’t ask anyone at Shmoo who they work for. This D.C. based hacking con, now in its seventh year, is lousy with spooks and other assorted hackers in the employ of Uncle Sam. The show was started and took its nam...

Hack in the Box (HITB)

Kuala Lumpur, Malaysia Booked as “Asia’s Premier Deep Knowledge Security Conference,” HITB is in its 8th year and has since expanded into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions and a multi track security conference and...

Month Of Abysssec Undisclosed Bugs - Sirang D-Control

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | "" then txt10 ="select from "+ cstrtblname +" where del='false' and id='"+ id +"'" set xx = conn.executetxt10 if not xx.eof then ... lots of files those will have to do input validation from user input are...