Tips for DAG Exchange Backup and Replication in vSphere

vSphere Snapshot Improvements This article was initially written when vSphere 5 snapshot operations were known and expected to cause small amounts of I/O stun to a VM's guest OS. Improvements in the latter vSphere versions, including significant changes to snapshot operation methodology in vSpher...

ipa security, bug fix and enhancement update

3.0.0-25.el6 - Filter generated winbind dependencies so the right version of samba can be installed. 905594 3.0.0-24.el6 - Add certmonger condrestart to server post scriptlet 903758 - Make certmonger a pre Requires 903758 - Add selinux-policy to Requirespre to avoid post scriptlet AVCs 903758 - S...

How to bypass iOS 6.1.2 Screen Lock, another Exploit Exposed

After a series of security issues, it appears that Apple still has not been able to resolve all the issue in iOS. Last week, Apple rolled out its iOS 6.1.2 update to owners of the iPhone, iPad and iPod touch in an effort to fixing the 3G connectivity and an Exchange calendar bugs. Hackers found a...

Oracle Java JDK / JRE 6 < Update 30 Multiple Vulnerabilities (Unix)

The version of Oracle formerly Sun Java Runtime Environment JRE 6.x installed on the remote host is earlier than Update 30 and is, therefore, potentially affected by the following vulnerabilities: - A stack overflow error exists related to proxy tunnels. Bug 6670868 - An error exists related to...

IRIS Citations Management Tool - (Authenticated) Remote Command Execution

IRIS Citations Management Tool - Authenticated Remote Command Execution Here is a bug that I finally found time to write about :- https://infosecabsurdity.wordpress.com/2013/02/09/iris-citations-management-tool-post-auth-remote-command-execution/ The attached contains my mini framework, exploit a...

Linksys WRT160N - Multiple Vulnerabilities

Exploit for hardware platform in category web applications Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored med...

Linksys WRT160N - Multiple Vulnerabilities

Device Name: Linksys WRT160Nv2 Vendor: Linksys/Cisco ============ Device Description: ============ Best For: Delivers plenty of speed and coverage, so large groups of users can go online, transfer large files, print, and stream stored media Features: Fast Wireless-N connectivity frees you to do...

[Revenssis] Mobile Penetration Testing Suite

Fully featured network, wireless and web app pentesting suitefor Smartphones Nicknamed as the "Smartphone Version of Backtrack", Revenssis Penetration Suite is a set of all the useful types of tools used in Computer and Web Application security. Tools available in it include: Web App scanners,...

CentOS Update for vino CESA-2013:0169 centos6

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

FixMeStick PRO : Best remote malware remediation product

This week Corey and Marty over at FixMeStick shared the specs of their recently released FixMeStick PRO with me. This Pro is the best remote malware remediation product we've seen. It retails for $299.99 per year, or $209.99 for the first 50 'The Hacker News' readers use coupon code 'THNFIX' for...

VMware vSphere Hypervisor Vulnerability

Core Security - Corelabs Advisory 1. Advisory Information Title: VMware vSphere Hypervisor Vulnerability Advisory ID: CORE-2012-0710 Advisory URL: Date published: 2012-11-15 Date of last update: 2012-11-16 Vendors contacted: VMware Release mode: Coordinated release 2. Vulnerability Information...

SAP /sap/bc/soap/rfc SOAP Service RFC_PING Function Service Discovery

This module makes use of the RFCPING function, through the /sap/bc/soap/rfc SOAP service, to test connectivity to remote RFC destinations. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on,...

VM Loses Connection During Snapshot Removal

Challenge During the snapshot removal step of a Veeam Backup & Replication task, the source vSphere VM loses connectivity temporarily. Cause Veeam does not remove the snapshot itself; Veeam sends an API call to the vSphere environment to have the action performed. The snapshot removal process...

CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

Buffer overflow

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3745

Off-by-one error in Telephony in Apple iOS before 6 allows remote attackers to cause a denial of service buffer overflow and connectivity outage via a crafted user-data header in an SMS message...

CVE-2012-3745

CVE-2012-3745 affects iOS before 6, in Telephony. Off-by-one error in the handling of SMS user-data headers can allow a remote attacker to trigger a denial of service via a crafted SMS, potentially causing a buffer overflow and connectivity outage. Connected documentation references the same CVE ...

The Pirate Bay have nothing to do with Free VPN service

Yesterday someone anonymously posted on Slashdot that The Pirate Bay had launched a free VPN service called PrivitizeVPN https://freevpn.thepiratebay.se/. But Just today team at torrentfreak confirms on behalf of team The Pirate Bay that its not a Pirate Bay project. They're just running it as an...

MacOSX Cisco AnyConnect Secure Mobility Client Detection

Cisco AnyConnect Secure Mobility Client formerly known as Cisco AnyConnect VPN Client is installed on the remote host. This software can be used for secure connectivity. TRUSTED...