Security Stories We Wish Had Been April Fool's Jokes

There’s a grand tradition in the security community of clever, cerebral and sometimes downright inane April Fool’s pranks. They often take the form of fake news stories about viruses, world-ending attacks or something involving Bruce Schneier and Chuck Norris. But the security world is bizarre...

CVE-2010-1674

The extended-community parser in bgpd in Quagga before 0.99.18 allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a malformed Extended Communities attribute...

CVE-2010-1674

Removed by vendor...

The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

HP Discovery & Dependency Mapping Inventory information leak

public community has SNMP read access by default...

CMS Loko Media - Local File Download

CMS Loko Media - Local File Download !===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net Date : 16 Mei,...

CMS Loko Media - Local File Download

!===========================================================================! CMS Lokomedia Local File Download Vulnerability Author : Xr0b0t [email protected] Homepage : http://www.indonesiancoder.com | http://xrobot.mobi | http://mc-crew.net Date : 16 Mei, 2010...

SuSE 11 Security Update : Websphere Community Edition (SAT Patch Number 1016)

This update of WebSphere fixes the following vulnerabilities : - GERONIMO-3838: close potential denial of service attack - fix Apache Geronimo web administration console directory traversal vulnerabilities. CVE-2008-5518 - fix Apache Geronimo web administration console XSS vulnerabilities...

Katie Moussouris on Microsoft, Trustworthy Computing and the Evolution of the Security Community

Dennis Fisher talks with Microsoft’s Katie Moussouris about the way that the Trustworthy Computing effort at Microsoft has changed, how the security community has evolved since she got involved in the 1990s and the challenges–and fun–of being a woman in security. Podcast audio courtesy of sykboy6...

Attackers Targeting MHTML Bug in Windows

There is a wave of ongoing attacks against a bug in MHTML that affects all of the current versions of Windows, and there seems to be little recourse for sites trying to protect their users from the attacks. The current spate of attacks is targeting users of Internet Explorer, and experts are...

Why Pwn2Own Is What's Right With Security

VANCOUVER — When the Pwn2Own contest began in 2007, it was dismissed by some in the industry as nothing more than a publicity stunt meant to inflate the egos of researchers while embarrassing software vendors. But as the fifth edition of the hacker challenge gets underway at the CanSecWest...

How to join Anonymous Hacker - Identity less Cyber Heroes ?

How to join Anonymous Hacker - Identity less Cyber Heroes ? We have a long fight ahead of us. lets work toward a better world together. together we can do what our elected officials refuse to do. make the world a better place. We Are Legion. Expect Us. Protect your identity : Click Here HOW TO...

Shia Community Forums hacked by ALM3R3FH

Shia Community Forums hacked by ALM3R3FH Hacked site : www.shiaforums.com Mirror: News Source : ALM3R3FH...

DHS Needs to Change Rules to Recruit Hackers into U.S. Security Agencies !

Members of the hacker community are leery of working with the government and sharing their skills, if it means navigating through outdated regulations and being viewed as potential security risks. Hackers and other computer experts willing to collaborate with the Department of Homeland Security t...

U.S. Military's Cyber Chief Warns Of Eroding Technical Prowess

SAN FRANCISCO — The U.S. Military’s top officer in charge of cyber security said that the country must invest more in so-called “STEM” programs – science, technology, engineering and math – to avoid being outflanked in a world where cyber offensive- and defensive operations are the keys to milita...

Social networks to be monitored by Mumbai police to keep a check on hate pages !

After observing an increase in the number of phishing attacks and several other cyber crimes, the cyber police have intensified patrolling of the social networking sites. Police, with the help of IT experts, will keep a check on any hate posts or groups created in cyberspace. The action reportedl...

PivotX -- administrator password reset vulnerability

US CERT reports: PivotX contains a vulnerability that allows an attacker to change the password of any account just by guessing the username. Version 2.2.4 has been reported to not be affected. This vulnerability is being exploited in the wild and users should immediately upgrade to 2.2.5 or late...

[SECURITY] Fedora 13 Update: openoffice.org-3.2.0-12.35.fc13

OpenOffice.org is an Open Source, community-developed, multi-platform office productivity suite. It includes the key desktop applications, such as a word processor, spreadsheet, presentation manager, formula editor and drawing program, with a user interface and feature set similar to other office...

Web 2.0 Social Network Freunde Community SQL Injection

Exploit Title: Web 2.0 Social Network Freunde Community SQL Injection Vunerability Google Dork: inurl:"user.php?userId=" +site:de Date: 08.02.2011 Author: NoNameMT Software Link: http://www.scripteverkauf.com/products/de/neuheiten/web-20-social-network-freunde-community.html Version: - Price: 79,...

Flickr accidentally deletes photos of 3,400 user's permanently !

Flickr initially said that it had assuredly deleted Mirco Wilhelm's five-year old account, but a day afterwards said that it has absolutely adequate the photo collection. It's every Flickr user's affliction nightmare: one day you login to acquisition your accumulating of bags of anxiously organiz...