iPhone AT&T WiFi Settings Open to MiTM Attacks

A security researcher has discovered that any wireless network can pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting iPhone users to an untrusted network connection. Read the full article. CNet...

Researchers Get Funding for New Secure Operating System

Researchers at the University of Illinois at Chicago have received a $1.15 million grant from the National Science Foundation to build a new computer operating system based on virtual machines and the concept of isolation. The new OS project, called Ethos, is the brainchild of UIC associate...

Joomla Component Realtyna Translator Local File Inclusion Vulnerability

No description provided by source. ============================================================================================================== o Joomla Component Realtyna Translator Local File Inclusion Vulnerability Software : comrealtyna version 1.0.15 Vendor : http://software.realtyna.com/...

Address Book Script 1.9 Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/scripts/AB201109/AB201109.zip Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00...

PHPIDS 0.4 Remote File Inclusion

PHPIDS 0.4 - Remote File Inclusion Vulnerability @package PHPIDS @Version 0.4 @license http://www.gnu.org/licenses/lgpl.html LGP @link http://php-ids.org/ Type : Remote File Inclusion Vulnerability Author: eidelweiss Date : 2010-02-08 Location: Indonesia http://yogyacarderlink.web.id Contact:...

United Way Hack Exposes Work-at-Home Scam

Hackers broke into computer systems at a Massachusetts chapter of the United Way last month and attempted to make off with more than $150,000 from one of the nation’s largest charities with the use of a money mule duped by a “Work-at-home” scam. Read the full article. KrebsonSecurity...

eWebeditor Directory Traversal

Exploit for unknown platform in category web applications ============================== eWebeditor Directory Traversal ============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' ...

AT&T Flaw Let Facebook Users See Accounts

A Georgia mother and her two daughters logged onto Facebook from mobile phones last weekend and wound up in a startling place: strangers’ accounts with full access to troves of private information. Read the full article. Associated Press...

Google Sues Work@Home Scam Co.

Google filed a lawsuit Monday against a U.S. company it alleges runs work-at-home scams that unnecessarily charge people’s credit cards and spoof Google’s brand name. Read the full article. Computerworld...

gAlan 0.2.1 Buffer Overflow

This module exploits a stack buffer overflow in gAlan 0.2.1 by creating a specially crafted galan file. Module Options msf use exploit/windows/fileformat/galan/fileformatbof msf undefinedfileformatbof show actions ...actions... msf undefinedfileformatbof set ACTION msf undefinedfileformatbof show...

WinVNC Web Server <= v3.3.3r7 GET Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'WinVNC Web...

Allied Telesyn TFTP Server 1.9 Long Filename Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Allied Teles...

FBI Reports Malware on Rise in Electronic Funds Fraud

The FBI reports it has seen a rise of malware over the past few months targeting small and medium businesses and municipal government entities and school districts. Once a malicious attachment or link is opened, keylogging tactics obtain bank account info where criminals then initiate wire...

DDL CMS 1.0 - Multiple Remote File Inclusions

DDL CMS 1.0 - Multiple Remote File Inclusions +============================================================+ | | | DDL CMS 1.0 Multiple Remote File Inclusion Vulnerabilities | | | +============================================================+ | | | Author : HxH | | | | E-Mail : HxHatlivedotat | |...

Stephen Toulouse on the MSRC, the Evolution of Security at Microsoft and Securing Xbox Live

Dennis Fisher talks with Stephen Toulouse, director of policy and enforcement for Xbox Live at Microsoft, about his years at the Microsoft Security Response Center, the evolution of security at Microsoft and the joy and pain of being the bad guy on Xbox Live. Download Subscribe to the Digital...

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion

LightOpenCMS 0.1 - smarty.php?cwd Local File Inclusion LightOpenCMS 0.1 smarty.php cwd Local File Inclusion Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

AIX 6.1 : bos.rte.cron (U823854)

The remote host is missing AIX PTF U823854, which is related to the security of the package bos.rte.cron. The at command does not drop permissions when reading certain files. A local attacker may exploit this error to read any file on the system because the command is setuid root. The following...

Solaris Update for at/atrm/batch/cron/inetd 109008-28

Check for the Version of at/atrm/batch/cron/inetd OpenVAS Vulnerability Test Solaris Update for at/atrm/batch/cron/inetd 109008-28 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it...

Solaris Update for at utility 114135-03

Check for the Version of at utility OpenVAS Vulnerability Test Solaris Update for at utility 114135-03 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Solaris Update for at utility 114136-02

Check for the Version of at utility OpenVAS Vulnerability Test Solaris Update for at utility 114136-02 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...