2011 will be Stuxnet-like viruses year !

Known to successfully slow down the Iranian nuclear program, the Stuxnet cyber worm is now expected to spawn variations that are predicted to disrupt non-traditional IT targets, from power grids to electronic voting stations. The Stuxnet cyber worm is a very complex, efficient and stealthy string...

Germany to create cyber defense center !

Germany is planning the creation of a national cyber defense center in 2011 in reaction to a growing number of cyber attacks on government institutions that mostly originate in China. An interior ministry spokesman said Monday that while in 2009 the government registered only 900 attacks, there...

OpenEMR v3.2.0 SQL Injection and XSS

Exploit for php platform in category web applications Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management,...

OpenEMR 3.2.0 SQL Injection / Cross Site Scripting

Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic Medical Record, Prescription Writing and Medical...

OpenEMR 3.2.0 - SQL Injection / Cross-Site Scripting

Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic Medical Record, Prescription Writing and Medical...

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting

OpenEMR 3.2.0 - SQL Injection Cross-Site Scripting Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic...

Facebook Revises Bug Disclosure Policy

Social networking behemoth Facebook revised their bug disclosure policy last week to protect well-intentioned vulnerability researchers from potential lawsuits stemming from their discoveries. The revisions, which were made with the assistance of the Electronic Frontier Foundation, are part of...

New Intel Chips Support SMS Kill Switch

HED: New Intel Chips Support SMS Kill Switch DEK: Anti Theft 3 Chips Can be disabled via 3G Networks New computer processors from Intel Corp, due out in 2011, can be disabled using an SMS “poison pill” message sent over any 3G cellular network, according to Intel documentation. The new anti-theft...

Banks Lack Cybersecurity Measures: Top Interpol Official Raises Concerns

A top Interpol chief has expressed concerns about the cybersecurity measures in banks across the region. According to Major Ali Qubaisi, the Interpol team leader for the Middle East and North Africa, and head of the Economic Crimes unit of the Qatari Interior Ministry, banks in the region are...

Interpol Conference Highlights Cyber-Crime Challenges and Solutions

The emergence of cyber-crime, which transcends man-made boundaries, has underscored the urgent need for global cooperation among law enforcement agencies to prevent and solve these crimes, according to a senior Dubai Police official. At the Third International Conference on Interpol for the Middl...

Indian Cyber Army Hacks 375 Pakistani Websites Amid Cyber War

The cyber war between Pakistani and Indian hackers is intensifying. A group called the Indian Cyber Army ICA has claimed access to scripts from more than 375 Pakistani websites, including those belonging to the government, high-level organizations, and notable individuals. Hackers from both...

Gatesoft Docusafe 4.1.0 - SQL Injection

Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to re...

New Browsing Tool Keeps Firesheep At Bay

Weeks after researchers unveiled Firesheep, the Firefox Web browser plugin that makes it easy to snoop on strangers’ Facebook, Flickr and other Web 2.0 sessions, a software update from the Electronic Frontier Foundation promises to secure more Web sessions from Firesheep-enabled snooping. The...

Electronic Arts SnoopyCtrl - ActiveX Control Buffer Overflow (Metasploit)

$Id: eacheckrequirements.rb 10998 2010-11-11 22:43:22Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Linux Kernel 2.6.x - 'net/core/filter.c' Local Information Disclosure

/ source: https://www.securityfocus.com/bid/44758/info The Linux kernel is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. / / You've done it. After hours of gdb and caffeine, you've...

Cyber Stalking and Defamation Criminalized in IT Act Amendments

With mobile phones now essentially serving as personal computers, proposed amendments to the Information Technology Act, 2006, specify that transmitting offensive or menacing text, audio, or video can result in two years of imprisonment. This punishment also applies if the content is false and...

Researcher Develops Small Device to Intercept, Modify Electronic Payments

With bank fraud and attacks against financial institutions and online banking applications having turned into an epidemic, researchers, banks and other concerned parties have been looking for new ways to protect the integrity of financial transactions. A researcher at the University of Cambridge...

The Folly of Internet Wiretapping

The last 10 years have seen a great number of advancements in the sophistication and usability of strong encryption programs, and many people now use encrypted messaging services by default. This has made it much simpler for people to keep their private thoughts and data private and secure, and n...

Joomla! Component Biblioteca 1.0 Beta - Multiple SQL Injections

Joomla! Component Biblioteca 1.0 Beta - Multiple SQL Injections Biblioteca 1.0 Beta Joomla Component Multiple SQL Injection Vulnerabilities Name Biblioteca Vendor http://www.cielostellato.info Versions Affected 1.0 Beta Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net...

EA Battlefield 2 Battlefield 2142 - Multiple Arbitrary File Upload Vulnerabilities

EA Battlefield 2 Battlefield 2142 - Multiple Arbitrary File Upload Vulnerabilities Source: http://aluigi.org/adv/bf2urlz-adv.txt Luigi Auriemma Application: Refractor 2 engine Games: Battlefield 2 = 1.50 aka 1.5.3153-802.0 http://www.battlefield.ea.com/battlefield/bf2/ Battlefield 2142 = 1.50 aka...