EUVD-2011-0254

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...

CVE-2011-0228

The Data Security component in Apple iOS before 4.2.10 and 4.3.x before 4.3.5 does not check the basicConstraints parameter during validation of X.509 certificate chains, which allows man-in-the-middle attackers to spoof an SSL server by using a non-CA certificate to sign a certificate for an...

Automated HTTPS Vulnerability Testing by Qualys SSL Labs

Automated HTTPS Vulnerability Testing by Qualys SSL Labs One of main problem in HTTP protocol is encrypting traffic and verifying data security, securing the web application against any threat is very important especially that if hackers conduct a Man-in the middle attack he can get all users...

New Guidelines Address PCI DSS Tokenization

"Tokenization" is one of the best techniques to reduce the risk of credit card data loss. Basically, it is the process of substituting sensitive data with other values not considered sensitive. By doing this, tokenization technology essentially removes anything of value from the data stream, and,...

California Approves Data Security Rules for Smart Meters

The state of California has approved new rules to protect the data stored on so-called “smart meters,” in an effort to protect customer consumption data as household utilities are wired and connected to an IP-enabled “smart grid.” The California Public Utilities Commission CPUC, which regulates...

Rep. Bono Mack Requests More Data on Operation Shady RAT

Rep. Mary Bono Mack, chair of the influential House committee that oversees information security, is asking for more information about the Shady RAT attacks that McAfee publicized last week, saying that the “details of the report are alarming at the least,” and asking that researchers brief membe...

German Hacker Cracks GSM Call Encryption Code

German Hacker Cracks GSM Call Encryption Code A German computer boffin has worked out a way to crack code used to encrypt most of the world's mobile Internet traffic. Karsten Nohl is going to publish a guide to prompt global operators to improve their safeguards. Karsten Nohl and his team of 24...

Chi youdao professional travel system v1. 0 vulnerability-vulnerability warning-the black bar safety net

Default information: “Chi youdao”professional travel site system is wise to have team professional development, for the current tourism platform for powerful features developers! Back office management Background path: admin/login. asp Administrator: user:admin Password: psw:1 2 3 4 5 6 下载 地址...

APPLE-SA-2011-07-25-1 iOS 4.3.5 Software Update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-07-25-1 iOS 4.3.5 Software Update iOS 4.3.5 Software Update is now available and addresses the following: Data Security Available for: iOS 3.0 through 4.3.4 for iPhone 3GS and iPhone 4 GSM, iOS 3.1 through 4.3.4 for iPod touch 3rd...

APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-07-25-2 iOS 4.2.10 Software Update for iPhone iOS 4.2.10 Software Update for iPhone is now available and addresses the following: Data Security Available for: iOS 4.2.5 through 4.2.9 for iPhone 4 CDMA Impact: An attacker with a privilege...

Apple iOS < 4.2.10 / 4.3.x < 4.3.5 Data Security Certificate Verification

Binary data 5993.prm...

Android Passwords are stored in plain text on Disk

Android Passwords are stored in plain text on Disk A Android user complain that , All passwords are stored in plane text on Disk via a message on discussion board of Android. He said "The password for email accounts is stored into the SQLite DB which in turn stores it on the phone's file system i...

Lady Gaga Website The Latest in String of Celebrity Hacks

A collective of hackers known as SwagSec claims to have broken into the UK website of Lady Gaga and made off with information on thousands of registered fans, according to a report from the UK’s Mirror. The hack, just the latest in a string of attacks on high profile artists, was made public afte...

U.S. House Committee Questions Ability to Secure Wall Street Data

Cyber security experts warned on Thursday that the U.S. government is failing to learn the lessons of past computer and intelligence breaches and often exhibits a careless attitude towards securing the data it keeps. The testimony came in a hearing on Thursday before the U.S. House of...

Laptop Containing 8.6m Medical Records Lost in UK

A laptop from the UK’s National Health Service NHS containing 8.6 million patient records has gone missing, prompting warnings from UK authorities. The device was last seen in a room in an NHS facility in North Central London and was missing for three weeks before being reported to authorities...

CVE-2011-0871

Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remote untrusted Java Web Start applications and untrusted Java applets to affect confidentiality, integrity, and availabili...

Microsoft Office Excel SELECTION Record Out Of Boundary (MS11-045; CVE-2011-1277)

Microsoft Excel is a popular spreadsheet application. A remote code execution vulnerability exists in the way that Microsoft Excel handles specially crafted Excel files. An attacker who successfully exploited this vulnerability could take complete control of an affected system. An attacker could...

CVE-2011-1711

CVE-2011-1711 affects Novell Mobility Pack 1.1.2 and earlier, and Novell Data Synchronizer 1.0.x and 1.1.x up to 1.1.1 build 428. The description indicates an unspecified vulnerability where remote authenticated users can access other accounts via unknown vectors. Connected sources confirm affect...

Avoiding the Privacy Apocalypse

Google has been criticized widely for its privacy practices, and some of the harshest critiques have come from outside privacy advocates. In this video, Simon Davies and Gus Hosein of Privacy International discuss the ways in which companies such as Google that have large amounts of user data can...

The wind classification of the information management program injection vulnerability-vulnerability warning-the black bar safety net

Wind PHP classification information of the program v1. 3 to inject the latest injection vulnerabilities. Vulnerability file index.php vulnerability type: SQL injection. ? requireonce"conn.php";?& gt; $page=$GET"page"; $cid=$GET"cid"; $pagesize=1 5; if$cid!="" $r2=mysqlquery"select count from cbod...