191 matches found
Flaw in Intel Ethernet controller exposes to 'packet of death' attack
The hardware qualification is a very important issue, recent vulnerabilities discovered in network appliances of various manufacturer have alerted security community once again on the necessity to validate the hardware especially for large consume product. The last news is related to a...
Intercepter-Ng - Pocket Sniffer For Android
Intercepter-NG is a multifunctional network toolkit for various types of IT specialists. It has functionality of several famous separate tools and more over offers a good and unique alternative of Wireshark for android. The main features are: network discovery with OS detection network traffic...
Detecting Advanced Persistent Threat with Network Traffic Analysis
A high degree of stealthiness over a prolonged duration of operation in order to do a successful cyber attack can be defined as Advanced Persistent Threat. The attack objectives therefore typically extend beyond immediate financial gain, and compromised systems continue to be of service even afte...
Watching a Botnet From the Inside
When you hear about botnets such as Rustock, Mariposa or Grum being taken down, one of the tactics that’s usually involved is sinkholing. The technique, which involves pointing the infected machines to a server controlled by good guys rather than attackers, often is used as one of the last steps ...
Scrutinizer NetFlow & sFlow Analyzer Detection
Scrutinizer NetFlow & sFlow Analyzer, a network traffic analysis tool, was detected on the remote web server. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid58992; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22"; scriptnameenglish:"Scrutinizer NetFlow & sFlow...
Finding Location Data In Google Maps SSL Sessions
In the last couple of years, Google and some other Web giants have moved to make many of their services accessible over SSL, and in many cases, made HTTPS connections the default. That’s designed to make eavesdropping on those connections more difficult, but as researchers have shown, it certainl...
A New Cybersecurity Research Agenda (In Three Minutes or Less)
Editor’s Note: As the CISO of In-Q-Tel, the CIA-backed strategic investment firm focused on developing technologies for the intelligence community, Dan Geer gets paid to help find the answers to big questions about computer security, national security, privacy and technology. Headlines proliferat...
Attacking and Defending the Tor Network
BOSTON–The Tor Project has become a vital mechanism for privacy advocates, human rights activists, journalists and others in sensitive positions to evade online censorship and persecution. And while the governments interested in limiting user access to the Internet and controlling content have ha...
Privacy Flaw Found in Tor Project !
At the Chaos Computer Club Congress here Tuesday, researchers from the University of Regensburg delivered a new warning about the Tor anonymizer network, a system aimed at hiding details of a computer user's online activity from spying eyes. The attack doesn't quite make a surfer's activity an op...
Metasploit 3.5.1 adds Cisco device exploitation !
Metasploit now enables security professionals to exploit Cisco devices, performs passive reconnaissance through traffic analysis, provides more exploits and evaluates an organization's password security by brute forcing an ever increasing range of services. This latest release adds stealth...
PHPStat 2.0 remote code execution vulnerability-vulnerability warning-the black bar safety net
phpStat is a professional web site traffic statistics software system that provides website Log analysis, web data analysis, user behavior analysis system,to provide customers with in-depth excavation of the site of flow cross-Data Report. In visitor behavior analysis,web marketing analysis, and...
Suspicious Adobe Director Files
Adobe Shockwave is a multimedia player that allows Adobe Director applications to be published on the Internet and viewed in a web browser by anyone who has the Shockwave plug-in installed. Multiple vulnerabilities have been identified in Adobe Shockwave Player. The vulnerabilities are due to...
Mining Firewall Traffic for Better Net Security
Researchers at the Univeristy of Texas at Dallas have developed a method for analyzing the activity log files of corporate firewalls. Their analysis can determine what rules the firewall is actually applying to incoming and outgoing network traffic and then compare these with the original rules t...
SA-CONTRIB-2010-024 - eTracker - Cross Site Scripting
The eTracker module provides integration of a Drupal site with the eTracker web traffic analysis service and takes the current URL as a parameter to track what pages have been visited. The URL from the browser is forwarded to JavaScript in the current page, and because the URL wasn't sanitised, i...
Cisco Firewall Services Module DoS
Device crash on application traffic analisys...
phpTrafficA <=1.4.3 Admin Login Bypass
-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform: WindowsLinuxUni...
phptraffica143-bypass.txt
-=--------------------ADVISORY-------------------=- phpTrafficA =1.4.3 Author: CorryL [email protected] -=-----------------------------------------------=- -=+ Application: phpTrafficA -=+ Version: =1.4.3 -=+ Vendor's URL: http://soft.zoneo.net/phpTrafficA/index.php -=+ Platform:...
phpTrafficA < 1.4.2
Application: phpTrafficA 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql , xss , full path ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1 Introduction ===========...
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
No description provided by source. Application: phpTrafficA = 1.4.2 Web Site: http://soft.zoneo.net/phpTrafficA/ Versions: all Platform: linux, windows Bug: injection sql ------------------------------------------------------- 1 Introduction 2 Bug 3 Proof of concept 4 Credits =========== 1...
phpTrafficA <= 1.4.2 (pageid) Remote SQL Injection Vulnerability
Exploit for unknown platform in category web applications ================================================================ phpTrafficA load some file as /etc/passwd or /path/www/stats/Php/configsql.php ?lang= is also vulnerable to xss attacks, and as Hamid Ebadi has mention $lang is also vulnerab...