Know who you're dealing with

The EFF has some advice for interacting with border agents. First: don’t lie to them. This is a punishable crime regardless of whether you are lying to cover something up or not. It is always better to decline answering than it is to give a false answer. Don’t obstruct an Agent’s investigation or...

EU Audit Forces Changes To Facebook Privacy Policies

An audit of Facebook’s operations by the Office of the Data Protection Commissioner in Ireland will result in major changes to the way the social networking giant manages user data. The 143 page report, issued on Wednesday, calls on Facebook to give users more control over how their personal...

Un-HappyMeal: Complaint Alleges McDonald's WiFi was Platform for Devastating Pharma Hack

Suppose you’re a IT professional who has an axe to grind against your employer, and knowledge of the company’s network and access necessary to really do some damage. You might consider launching said attack from a free, public Wi-fi hotspot, like the ones offered at chains like McDonald’s. That...

Design/Logic Flaw

Windows Event Log SmartConnector in HP ArcSight Connector Appliance before 6.1 uses world-writable permissions for exported report files, which allows local users to change or delete log data by modifying a file, a different vulnerability than CVE-2011-0770...

Phpmyadmin direct Database access exploit

Exploit for php platform in category web applications Discovered by: ssgodfather Presented by : J|nX Category:: webapps Google dork: allinurl:index.php?db=informationschema ===================================================================================== + Description:...

Kryn.cms 6.0 - Cross-Site Request Forgery HTML Injection

Kryn.cms 6.0 - Cross-Site Request Forgery HTML Injection source: https://www.securityfocus.com/bid/41229/info Kryn.cms is prone to a cross-site request-forgery vulnerability and an HTML-injection vulnerability. Exploiting these issues may allow a remote attacker to perform certain administrative...

Debian Security Advisory DSA 2057-1 (mysql-dfsg-5.0)

The remote host is missing an update to mysql-dfsg-5.0 announced via advisory DSA 2057-1. OpenVAS Vulnerability Test $Id: deb20571.nasl 6614 2017-07-07 12:09:12Z cfischer $ Description: Auto-generated from advisory DSA 2057-1 mysql-dfsg-5.0 Authors: Thomas Reinke Copyright: Copyright c 2010 E-Sof...

Ubuntu 6.06 LTS / 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : mysql-dfsg-5.0, mysql-dfsg-5.1 vulnerabilities (USN-950-1)

It was discovered that MySQL did not check privileges before uninstalling plugins. An authenticated user could uninstall arbitrary plugins, bypassing intended restrictions. This issue only affected Ubuntu 9.10 and 10.04 LTS. CVE-2010-1621 It was discovered that MySQL could be made to delete anoth...

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

CVE-2010-1626

MySQL before 5.1.46 allows local users to delete the data and index files of another user's MyISAM table via a symlink attack in conjunction with the DROP TABLE command, a different vulnerability than CVE-2008-4098 and CVE-2008-7247...

CVE-2005-4885

Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...

CVE-2005-4885

Technical details of CVE-2005-4885 are not provided in the supplied documents; no concrete exploit/vector/affected products are specified here. Monitor for updates.

CVE-2005-4885

Unspecified vulnerability on certain Sun StorEdge 6130 SE6130 Controller Arrays allows remote attackers to delete data via unknown vectors...

Zenoss 2.3.3 - Multiple Cross-Site Request Forgery Vulnerabilities

source: https://www.securityfocus.com/bid/37843/info Zenoss is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain administrative actions, execute arbitrary commands, gain unauthorized access to the affected...

Zenoss 2.3.3 - Multiple Cross-Site Request Forgery Vulnerabilities

Zenoss 2.3.3 - Multiple Cross-Site Request Forgery Vulnerabilities source: https://www.securityfocus.com/bid/37843/info Zenoss is prone to multiple cross-site request-forgery vulnerabilities. Exploiting these issues may allow a remote attacker to perform certain administrative actions, execute...

Ruby on Rails 2.3.5 - protect_from_forgery Cross-Site Request Forgery

Ruby on Rails 2.3.5 - protectfromforgery Cross-Site Request Forgery source: https://www.securityfocus.com/bid/37322/info Ruby on Rails is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain...

Ruby on Rails 2.3.5 - 'protect_from_forgery' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/37322/info Ruby on Rails is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain data. Oth...

Quick.Cart 3.4 Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery

Quick.Cart 3.4 Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery source: https://www.securityfocus.com/bid/37115/info Quick.Cart and Quick.CMS are prone to a cross-site request-forgery vulnerability because the applications allow users to bypass certain security checks. Exploiting this...

Quick.Cart 3.4 / Quick.CMS 2.4 - Delete Function Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/37115/info Quick.Cart and Quick.CMS are prone to a cross-site request-forgery vulnerability because the applications allow users to bypass certain security checks. Exploiting this issue may allow a remote attacker to perform certain administrative actions...