5443 matches found
A Doomsday Worm - The Sputnik of 2011
We had an Interesting Article by "Paul F Renda " in our The Hacker News Magazine's November Edition. We would Like to share this article with our website readers also. You can Download November Issue Here. This is a theoretical prima to bring out a discussion about whether an Internet doomsday wo...
CSWorks LiveData Service vulnerable to denial-of-service (DoS)
Overview LiveData Service, a server component of CSWorks contains a denial-of-service DoS vulnerability. LiveData Service, a server component of CSWorks, contains an issue when processing TCP packets, which may lead to a denial-of-service DoS. Kuang-Chun Hung of Security Research and Service...
CVE-2011-3246
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...
Code injection
CFNetwork in Apple iOS before 5.0.1 and Mac OS X 10.7 before 10.7.2 does not properly parse URLs, which allows remote attackers to trigger visits to unintended web sites, and transmission of cookies to unintended web sites, via a crafted 1 http or 2 https URL...
QR Tags Can Hide Malicious Links, Experts Warn
QR tags have become the next big thing in interactive marketing. But as smart phone users flock to the trendy, postage-stamp sized bar codes, researchers are warning that they could be used to hijack mobile phones by directing them to malicious Web pages. In a post on the mobile security blog...
The rlogin service is running
This remote host is running a rlogin service. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : dtc -- multiple vulnerabilities (879b0242-c5b6-11e0-abd1-0017f22d6707)
Ansgar Burchardt reports : Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services : The bwpermoth.php graph contains a SQL injection vulnerability; insufficient checks in bwpermonth.php can lead to bandwidth usage information...
DEDECMS get SHELL EXP-vulnerability warning-the black bar safety net
Network transmission is said to know the background to use, but don't, as long as the plus the directory exists, the server can even outside, you can get the shell www.t00ls.net5 G$ w& h" m! n9 S: G Before the title conditions, you must ready yourself for the dede database, and then insert the...
#Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards
Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards Researchers at the Black Hat security conference today revealed two ways the Square payment system , which turns any iPhone, iPad or Android into a point-of-sale credit card processor, could be used for fraud. Square a mobile...
#Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards
Blackhat Conference : Square Mobile Gadget allows to Hack Credit Cards Researchers at the Black Hat security conference today revealed two ways the Square payment system, which turns any iPhone, iPad or Android into a point-of-sale credit card processor, could be used for fraud. Square a mobile...
kernel: sctp: fix to calc the INIT/INIT-ACK chunk length correctly to set
net/sctp/smmakechunk.c in the Linux kernel before 2.6.34, when addipenable and authenable are used, does not consider the amount of zero padding during calculation of chunk lengths for 1 INIT and 2 INIT ACK chunks, which allows remote attackers to cause a denial of service OOPS via crafted packet...
CVE-2011-2344
Android Picasa in Android 3.0 and 2.x through 2.3.4 uses a cleartext HTTP session when transmitting the authToken obtained from ClientLogin, which allows remote attackers to gain privileges and access private pictures and web albums by sniffing the token from connections with picasaweb.google.com...
ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability
ZDI-11-127: CA Total Defense Suite UNCWS Web Service getDBConfigSettings Credential Disclosure Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-127 April 13, 2011 -- CVE ID: CVE-2011-1655 -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C -- Affected Vendors: CA -- Affected Products: CA Tota...
Apache Tomcat information leakage
Under some conditions, information may be sent to wrong client...
Pandora Mobile App Transmits Gobs Of Personal Data
A popular free mobile application from online music service Pandora.com that is the subject of a Grand Jury investigation into loose data privacy practices in the mobile application market confirms that the application silently sends reams of sensitive data to advertisers. The analysis was...
694 Israel Mails Hacked By Dinelson Us !
694 Israel Mails Hacked By Dinelson Us ! Target : Pic : https://capitoltransmissionservices.com/capture2.jpg ListMail : https://capitoltransmissionservices.com/mails.html Login page : https://asif-bag.co.il/index.php?suserslogin Decrypter Password : Zip :...
Credit Card Number Cleartext Transmission (Client)
Binary data 5828.prm...
Credit Card Number Cleartext Transmission (Client)
Binary data 5829.prm...