Joomla! Component com_phocadownload - Local File Inclusion

source: https://www.securityfocus.com/bid/47399/info The 'comphocadownload' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information and...

Security Stories We Wish Had Been April Fool's Jokes

There’s a grand tradition in the security community of clever, cerebral and sometimes downright inane April Fool’s pranks. They often take the form of fake news stories about viruses, world-ending attacks or something involving Bruce Schneier and Chuck Norris. But the security world is bizarre...

40th anniversary of the computer virus !

This year marks the 40th anniversary of Creeper, the world's first computer virus. From Creeper to Stuxnet, the last four decades saw the number of malware instances boom from 1,300 in 1990, to 50,000 in 2000, to over 200 million in 2010. Besides sheer quantity, viruses, which were originally use...

Pentagon tightens computer security in wake of WikiLeaks breach !

Top defense and intelligence officials reiterated their commitment to information-sharing at a Senate hearing Thursday, even as they outlined new safeguards to prevent a repeat of the WikiLeaks breach that has led to the release of thousands of classified military reports and diplomatic cables. T...

FTC Charges Scareware Operators to Pay $8 Million Settlement

The FTC doled out $8 million in fines to the operators of an online scareware scheme. The scam involves tricking consumers into thinking their computers are infected with malware and then selling them software to remedy problems that doesn’t exist in the first place. A district court order in...

Creating a community of hackers in Las Vegas !

Las Vegas is a city like few others. Every year more than 35 million people visit and lose themselves in the casinos, bars, shows and shopping malls on Las Vegas Boulevard aka The Strip. The vast influx of visitors, coupled with the insatiable desire of those hotels and casinos to set themselves...

Fake antivirus pop-ups hacking into computers !

MISSOULA - Univision Computers, a company based in Missoula, is warning people about a fake antivirus alert pop-ups that could not only damage your computer, but could pull personal information from it. The FBI says it's called "scareware" because criminals try to frighten you into buying fake...

Virus War : Be aware of bogus e-mails !

The past year reached a new record high for bogus e-mails that clog people's inboxes and can release damaging and costly viruses on computers. Nearly 90 percent of sent e-mail is a ruse to rip off unsuspecting Internet users, according to data released by the computer security firm Symantec. The...

Joomla! Component com_redirect 1.5.19 - Local File Inclusion

Joomla! Component comredirect 1.5.19 - Local File Inclusion source: https://www.securityfocus.com/bid/45364/info The 'comredirect' component for Joomla! is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this...

Be Alert : "Postcard" computer virus is Out ~~ !!

WARNINGS have been issued this weekend about a highly destructive computer virus which has been released under the guise of a postcard greeting. It is strongly advised that computer users should not open any message with an attachment entitled "Postcard" or "Postcard from Hallmark", regardless of...

Top 5 best criminal computer hackers of all time

These hackers are the ones that you've seen in shackles arrested for cybercrimes when they were just getting out of puberty. Some have done it for financial gain others just for fun. 1. Kevin Mitnick. Mitnick is perhaps synonymous with Hacker. The Department of Justice still refers to him as "the...

Chaos Communication Congress

Berlin, Germany One of the security world’s most venerable conferences, the Chaos Communications Congress CCC is an annual gathering for hackers sponsored by the Chaos Computer Club. First held in 1984, the event now draws thousands of hackers, intellectuals, academics and Utopians to snowy Berli...

Freed object reuse across plugin instances — Mozilla

Microsoft Vulnerability Research reported that two plugin instances could interact in a way in which one plugin gets a reference to an object owned by a second plugin and continues to hold that reference after the second plugin is unloaded and its object is destroyed. In these cases, the first...

Yamamah Photo Gallery 1.00 - 'download.php' Local File Disclosure Vulnerability

Yamamah Photo Gallery 1.00 'download.php' Local File Disclosure Vulnerability. Webapps exploit for php platform source: http://www.securityfocus.com/bid/40834/info Yamamah Photo Gallery is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input. ...

Gary McGraw on BSIMM2, Software Security and Cargo Cult Science

Dennis Fisher talks with Gary McGraw of Cigital about the release of the BSIMM2 model, the continued maturing of software security programs and the similarities between computer security and cargo cult science. Podcast audio courtesy of Where’s Aubrey. Subscribe to the Digital Underground podcast...

Experts Say New Storm Variant of Poor Design

A new variant of the Storm worm has emerged, but it does not appear to be as well-designed as its older relative, according to computer security researchers. Read the full article. IDG News Service...

Researchers Get Funding for New Secure Operating System

Researchers at the University of Illinois at Chicago have received a $1.15 million grant from the National Science Foundation to build a new computer operating system based on virtual machines and the concept of isolation. The new OS project, called Ethos, is the brainchild of UIC associate...

eGroupWare 1.6.002 and eGroupWare premium line 9.1 - Multiple Vulnerabilities

Advisory Name: Remote Command Execution in EGroupware Vulnerability Class: Remote Command Execution Release Date: 2010-03-09 Affected Applications: Confirmed in EGroupware 1.4.001+.002 and 1.6.001+.002. EGroupware Premium Line 9.1 and 9.2 is also affected. Other versions may also be affected...

phpCOIN 1.2.1 - mod Local File Inclusion

phpCOIN 1.2.1 - mod Local File Inclusion source: https://www.securityfocus.com/bid/38576/info phpCOIN is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. An attacker can exploit this vulnerability to obtain potentially sensitive information an...

OpenInferno OI.Blogs 1.0 - Multiple Local File Inclusions

source: https://www.securityfocus.com/bid/38402/info OpenInferno OI.Blogs is prone to multiple local file-include vulnerabilities because it fails to properly sanitize user-supplied input. An attacker can exploit these vulnerabilities to obtain potentially sensitive information and execute...