Australian Newspaper Offices Raided in Hacking Inquiry

Detectives from Australia’s Victoria Police last week executed a raid of offices at The Age, one of the largest newspapers in Melbourne, seizing computers and documents they believe were used in a hacking scheme. Authorities spent eight hours removing computers that were purportedly used by...

DEBIAN-CVE-2010-4759

Open Ticket Request System OTRS before 3.0.0-beta7 does not properly restrict the ticket ages that are within the scope of a search, which allows remote authenticated users to cause a denial of service daemon hang via a fulltext search...

Internet-Based Crime Rises to 11%, Nearing Traditional Theft Rates

Americans are nearly as likely to be victimized by Internet-based crime as by other forms of nonviolent theft. This perception emerges from a recent survey on crimes committed against individuals and their families. According to a Gallup Poll released Monday, 11% of American adults reported that...

Unfixed XSS vulnerability at www.dragonagenexus.com

Security researcher Timse, has submitted on 22/09/2010 a cross-site-scripting XSS vulnerability affecting www.dragonagenexus.com, which at the time of submission ranked 84524 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 15/12/2011. It is...

Operating System Choice Does Not Equal Security

Yesterday while some of us in the USA were enjoying a day off Google made the news with this article in the Financial Times stating that they are moving away from Microsoft Windows due to security concerns. My first reaction was to question why a company with as many smart brains as Google would...

Moxie Marlinspike on RedPhone, TextSecure and Internet Privacy

Dennis Fisher talks with security researcher Moxie Marlinspike about his new startup, Whisper Systems, his RedPhone and TextSecure voice and data encryption software and the challenges of maintaining privacy in the Google Age. Podcast audio courtesy of sykboy65 Subscribe to the Digital Undergroun...

Citrix NetScaler和Access Gateway多个远程拒绝服务漏洞

BUGTRAQ ID: 36948 Citrix NetScaler是一款网络流量管理产品，Citrix Access Gateway是一款通用的SSL VPN设备。 远程攻击者可以利用Citrix NetScaler和Access Gateway等产品中所使用的URL Transform、Application Firewall和AGEE Clientless VPN功能中的安全漏洞导致拒绝服务。 Citrix Access Gateway 企业版9.1 Citrix Access Gateway 企业版9.0 Citrix NetScaler 9.1 Citrix NetScaler...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

DEBIAN-CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

Design/Logic Flaw

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

Linux-PAM before 1.0.4 does not enforce the minimum password age MINDAYS as specified in /etc/shadow, which allows local users to bypass intended security policy and change their passwords sooner than specified...

CVE-2009-0579

CVE-2009-0579 affects Linux-PAM before 1.0.4. The vulnerability is that PAM does not enforce the minimum password age (MINDAYS) as specified in /etc/shadow, allowing local users to bypass the intended security policy and change their passwords sooner than allowed. Connected documents corroborate ...

Sql injection

SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2009-0326

The CVE-2009-0326 entry describes a SQL injection in Dark Age CMS 0.2c beta, exploiting login.php through the (1) username and (2) password parameters. The underlying issue is improper input handling that allows remote attackers to execute arbitrary SQL commands. Impact is described as enabling p...

CVE-2009-0326

SQL injection vulnerability in login.php in Dark Age CMS 0.2c beta allows remote attackers to execute arbitrary SQL commands via the 1 username and 2 password parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Dark Age CMS 0.2c Beta SQL Injection

--+++==================================================================================+++-- --+++====== Dark Age CMS = v0.2c Beta Auth Bypass SQL Injection Vulnerability ======+++-- --+++==================================================================================+++-- + Dark Age CMS = v0.2...

Dark Age CMS 2.0 - login.php SQL Injection

Dark Age CMS 2.0 - login.php SQL Injection source: https://www.securityfocus.com/bid/33271/info Dark Age CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...