1804 matches found
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
Design/Logic Flaw
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, sets up circuits through a process different from the process used by a client, which makes it easier for remote attackers to enumerate bridges by observing circuit building...
CVE-2011-4895
Tor before 0.2.2.34, when configured as a bridge, builds circuits in a way that differs from client circuits, making it easier for remote attackers to enumerate bridges by observing circuit construction. Affects Tor code path used for bridges; vulnerability achieved through the bridge-circuit set...
German Researchers Break RFID Smartcard Encryption
German Researchers Break RFID Smartcard Encryption Scientists have found a way to circumvent the encryption used to protect a smartcard used to restrict access to buildings and to process public transit system payments. A team of German scientists have demonstrated a hack that lets them make a...
The Past, Present and Future of Software Security
Perhaps no segment of the security industry has evolved more in the last decade than the discipline of software security. At the start of the 2000s, software security was a small, arcane field that often was confused with security software. But several things happened in the early part of the...
Lamb Building SQL Injection
. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG - Exploit Title: Lamb Building SQL Injection Vulnerability - Author: Net.Edit0r -Discovered By: Mr.XHat - Home : Black-HG.Org - Version: Full - Tested On: Linux - Google Dork:...
EC-Council is launching "CyberLympics" - Olympic games for Cyber Security
EC-Council is launching "CyberLympics" - Olympic games for Cyber Security Global CyberLympics is conceptualized and organized by EC-Council. The goal of the CyberLympics is to raise awareness towards increased education and ethics in information security. The mission of the Global CyberLympics is...
EC-Council is launching "CyberLympics" - Olympic games for Cyber Security
EC-Council is launching "CyberLympics " - Olympic games for Cyber Security Global CyberLympics is conceptualized and organized by EC-Council. The goal of the CyberLympics is to raise awareness towards increased education and ethics in information security. The mission of the Global CyberLympics i...
Fedora 15 : erlang-R14B-03.2.fc15 (2011-9598)
Ver. R14B03 - New module - diameter - Several new examples directories - Fixed building on F-15 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as...
Outdated Assumptions
The term “targeted attack” gets thrown around an awful lot nowadays. In fact I’m guessing you’ll be hard pressed to find many public breach disclosures that make it to the news that aren’t labeled as having been “targeted”. It reminds me of an important quote from the character Inigo Montoya in T...
Torrent-Finder fighting with Google for Domain !
The US government - along with organizations like the RIAA and the MPAA - are hitting Torrent sites where it hurts. Indeed, due to a slew of recent domain seizures, affected websites are currently experiencing major dips in traffic. However, Torrent-Finder is refusing to throw in the towel. The...
Hackid
One of the more interesting trends is the way hacking culture is starting to trickle down from the technology cognoscenti to a far broader and equally receptive audience. Hackid is a great example of that. In its first year ever, Hackid is a conference specifically targeted at kids aged 5 to 17...
Intellicom NetBiter WebSCADA Vulnerabilities
OVERVIEW This advisory is a follow-up to ICS-ALERT-10-293-01 - Intellicom NetBiter WebSCADA Vulnerabilities, published on the ICS-CERT Web page on October 20, 2010. On October 1, 2010 independent researchers identified vulnerabilities in the Intellicom NetBiter Supervisory Control and Data...
Cisco Network Building Mediator products contain multiple vulnerabilities
Overview Cisco Network Building Mediator NBM products are affected by multiple vulnerabilities that could allow an attacker to gain control of a vulnerable device or to cause a denial of service. Description Cisco Network Building Mediator NBM products are designed to manage facility energy use...
Code injection
Cisco Mediator Framework 1.5.1 before 1.5.1.build.14-eng, 2.2 before 2.2.1.dev.1, and 3.0 before 3.0.9.release.1 on the Cisco Network Building Mediator NBM-2400 and NBM-4800 and the Richards-Zeta Mediator 2500 does not encrypt XML RPC sessions from operator workstations, which allows remote...
Cisco Network Building Manager Vulnerabilities
Cisco has released a security advisory to address multiple vulnerabilities in Network Building Manager. The advisory indicates that the legacy Richards-Zeta Mediator products are also affected by these vulnerabilities. Exploitation of these vulnerabilities may allow an attacker to operate with...
