Tastes Like Chicken: Industrial Shredder Eats PCs, Peripherals

Data leaked from lost, stolen or recycled IT equipment is a major, major issue. News reports about the reams of data that can be retrieved from the hard drives and memory of second hand PCs are nothing new. Organizations like the IEEE have been calling attention to the insecure storage of data fo...

Researchers Develop Privacy-Protecting Android App

The continuing shift to mobile computing and the proliferation of smartphones has raised a slew of privacy and security concerns around the way that mobile devices and applications handle users’ data and personal information. A group of researchers from North Carolina State University has develop...

Insider Allegedly Leaked Data Belonging to 3,000 US Airways Pilots

An insider data breach at the US Airline Pilots Association USAPA has exposed the sensitive financial data of some 3,000 US Airways pilots, according to reports. The USAPA, a union representing more than 5,000 US Airways pilots, claims that the airline recently became aware of an incident in whic...

Classified Ads PLUS Scripts SQL Injection

Exploit Title : Classified Ads PLUS Scripts Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 05-04-2011 + Software Link: http://www.softbizscripts.com/classified-ads-plus-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Multiple Vulnerability in McAfee Website , XSS and Other Attacks !

Multiple Vulnerability in McAfee Website , XSS and Other Attacks ! Researchers at the YGN Ethical Hacker Group have revealed multiple security vulnerabilities found in the McAfee.com website that leaves the company's portal susceptible to attacks and data leakage. The group found that the McAfee...

Client Data Leakage Detection (SSN)

Binary data 5822.prm...

Client Data Leakage Detection via FTP (SSN)

Binary data 5915.prm...

Server Data Leakage Detection via FTP (SSN)

Binary data 6632.prm...

Server Data Leakage Detection (SSN)

Binary data 5857.prm...

Movicon TcpUploadServer Data Leakage (remote check)

Binary data scadamovicontcpuploadserverdataleakage.nbin...

Server Data Leakage Detection (SSN) (deprecated)

Binary data 7044.pasl...

Maian Weblog 4.0 - Blind SQL Injection

?php / maian weblog = v4.0 Remote Blind SQL Injection Exploit vendor: http://www.maianscriptworld.co.uk/ Thanks to Johannes Dahse: http://bit.ly/dpQXMK Explanation: Lines 335 - 341 of the index.php we see this if statement that concerns our variable $bpost. // Check month and year vars... // If...

IBM WebSphere Portal Server input validation vulnerability

Overview IBM WebSphere Portal Server does not validate entry path inputted data. Description From the IBM Portal website: "IBM WebSphere Portal software provides a composite application or business mashup framework and the advanced tooling needed to build flexible, SOA-based solutions, as well as...

DEBIAN-CVE-2011-0014

ssl/t1lib.c in OpenSSL 0.9.8h through 0.9.8q and 1.0.0 through 1.0.0c allows remote attackers to cause a denial of service crash, and possibly obtain sensitive information in applications that use OpenSSL, via a malformed ClientHello handshake message that triggers an out-of-bounds memory access,...

Massive data leakage in Vodafone Australia !

Australian media giant Fairfax leads today with dramatic claims that customer data from mobile phone company Vodafone Australia is routinely falling into the wrong hands, thanks to lax database security. According to Fairfax, Vodafone's customer database is accessible to all its dealers over the...

PT-2011-46: Information disclosure in SAP

The specialists of the Positive Research center have detected "Information disclosure" vulnerability in SAP. An Information Leakage vulnerability exists in the way SAProuter works with dynamic memory. The cause of the leakage is that SAProuter does not clear the dynamically captured memory before...

Mozilla accidentally publishes user IDs and passwords hashes !

On Monday, Mozilla, the developer of popular open source applications like Firefox and Thunderbird, announced that a database containing usernames and password hashes belonging to users of addons.mozilla.org had been posted publicly by accident. If you registered for an account on...

WAP form content can be leaked to other sites – Opera Security Advisories

When accepting user input in form fields on a WAP page, WML requires that the input contents are remembered, and used to populate every further input sharing the same name. This should continue as long as the user continues to click links known as a WAP session, even populating similarly named...

Gawker Roadkill? How To Find Out and Recover

CLARIFICATION: This story corrects information concerning the availability of the stolen account names and passwords online. Millions of Web users are waking up to news that broke over the weekend that systems belonging to Gawker Media were hacked and password data on millions of user accounts...

Class Action Suits Target Google, Facebook, Zynga

A raft of class action lawsuits filed in Federal court charge the globe’s biggest social networking firms with violating federal communications privacy laws, allowing advertisers to profit from personal information harvested from users. Weeks after the Wall Street Journal blew the whistle on lax...