Academic Web Tools CMS <= 1.4.2.8 - Multiple Vulnerabilities

No description provided by source. www.BugReport.ir AmnPardaz Security Research Team Title: Academic Web Tools CMS Multiple Vulnerabilities Vendor: www.yektaweb.com Vulnerable Version: 1.4.2.8 and prior versions Exploit: Available Impact: Medium Fix: N/A Original Advisory: www.bugreport.ir/?/44 1...

Full Disclosure Security Mailing List Shuts Down

The Full Disclosure security mailing list, which has been one of the main discussion forums for vulnerability and exploit information for 12 years, is shutting down because “‘one of our own’ would undermine the efforts of the last 12 years”, one of the creators said. John Cartwright, one of the...

MIRcon Preview: Why C-Level Executives Should Attend

Security conferences come and go and most are well attended by information security practitioners for professional development and networking. But what about the executives who are responsible for strategy and who hold the budgets - what conferences should they attend? With MIRcon 2013, Nov. 5-6,...

NSA Bought Exploit Service From VUPEN, Contract Shows

The U.S. government–particularly the National Security Agency–are often regarded as having advanced offensive cybersecurity capabilities. But that doesn’t mean that they’re above bringing in a little outside help when it’s needed. A newly public contract shows that the NSA last year bought a...

Dennis Fisher and Mike Mimoso Recap Black Hat and DEF CON 2013

Dennis Fisher and Mike Mimoso discuss the news from Black Hat and DEF CON, particularly the fact that the Web seems to be broken and that a lot of the attacks revealed in Las Vegas don’t have easy solutions. Download: digitalunderground122 Subscribe to the Digital Underground podcast on...

Konftel 300IP SIP-based Conference Phone - Remote Bypass Reboot

Exploit for hardware platform in category dos / poc The Konftel 300IP is a flexible SIP-based conference phone, perfect for companies that use IP voice services. Its clear, natural sound comes from OmniSound HD, Konftel’s patented wideband audio technology. The stylishly designed Konftel 300IP is...

Ryan Naraine on the Security Analyst Summit 2013

Dennis Fisher talks with Ryan Naraine, the founding editor of Threatpost, about the Security Analyst Summit in San Juan, the reason why so many talks at security conferences sound the same and why surprise talks are so valuable. Download: digitalunderground111 Podcast audio courtesy of sykboy65...

CVE-2012-5444

Cisco TelePresence Video Communication Server (VCS) X7.0.3 contains a vulnerability where improper processing of certain search rules can be exploited by an unauthenticated, remote attacker to bypass security restrictions and create conferences via an unspecified Conductor request. The Cisco advi...

HITB2011KUL - Mobile Malware Analysis

Document Title: =============== HITB2011KUL - Mobile Malware Analysis References: =========== Download: http://www.vulnerability-lab.com/resources/videos/424.wmv View: http://www.youtube.com/watch?v=nVAuZ7jf7Sk Release Date: ============= 2012-02-05 Vulnerability Laboratory ID VL-ID:...

Rethinking DEFCON

For nearly two decades, the DEFCON hacking conference has brought together people with an interest in investigating technology and cracking security. In recent years, however, DEFCON has suffered significant growing pains. Getting between sessions meant pushing through crowds reminiscent of major...

Time to Focus on Results-Oriented Security

The security industry is full of pernicious problems with no easy solutions. Take spam, for example. The current best defense is filtering out the obvious spam messages. Yet, the countermeasure is not a solution: As anti-spam technology gets better, spammers merely churn out more spam and achieve...

Get Free CEH V7 Training via EC-Council to 375 selected professionals around the world !

How to get FREE CEH V7 Training? EC-Council is going to be selecting 125 information security professionals from all over the world to be part of the inaugural CEH V7 launch for FREE ! That's right, you heard it right. It is Absolutely Free ! You can be one of the 125 Information Security...

Yaws 1.89 Directory Traversal

Exploit for windows platform in category remote exploits ===================================== Yaws 1.89 Directory Traversal Exploit ===================================== Exploit Title: Yaws 1.89 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link:...

Yaws 1.89 Directory Traversal

Exploit Title: Yaws 1.89 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://yaws.hyber.org/download/Yaws-1.89-windows-installer.exe Version: 1.89 Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs http://chatsubo-labs.blogspot.com...

Mongoose Web Server 2.11 - Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Yaws 1.89 - Directory Traversal

Yaws 1.89 - Directory Traversal Exploit Title: Yaws 1.89 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://yaws.hyber.org/download/Yaws-1.89-windows-installer.exe Version: 1.89 Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Mongoose Web Server 2.11 Directory Traversal

Exploit Title: Mongoose 2.11 Directory Traversal Date: 29 Oct Author: nitr0us Alejandro Hernandez H. Software Link: http://mongoose.googlecode.com/files/mongoose-2.11.exe Version: 2.11 Windows Version Tested on: Windows XP Service Pack 2 Chatsubo inSecurity Dark Labs...

Home FTP Server Post-Auth Directory Traversal

Exploit for windows platform in category remote exploits ============================================= Home FTP Server Post-Auth Directory Traversal ============================================= Exploit Title: Home FTP Server Directory Traversal Date: Oct 28, 2010 Author: chr1x Software Link:...

Week in Security: Toorcon and SecTor Wrap-up, Bugs and Stuxnet Stances

Autumn conferences grabbed the headlines this week as presentations at the Toorcon Conference in San Diego and SecTor in Toronto wrapped up October, with revelations about the vulnerability of social networking sessions and critical infrastructure headlining. In San Diego, talks at Toorcon came...

Home FTP Server 1.11.1.149 - (Authenticated) Directory Traversal

Home FTP Server 1.11.1.149 - Authenticated Directory Traversal Exploit Title: Home FTP Server Directory Traversal Date: Oct 28, 2010 Author: chr1x Software Link: http://downstairs.dnsalias.net/files/HomeFtpServerInstall.exe Description: Home Ftp Server is an easy to use FTP server, that allows yo...