After the Walkman

For a company that almost single-handedly created the consumer electronics industry with blockbusters like the Walkman, Sony has had its share of strategic and public relations face plants in the last decade, with IT security being just one flash point. From its infamous digital rights management...

Windows 8 to run on smartphone chips !

In his keynote speech at the Consumer Electronics Show CES in Las Vegas, Microsoft CEO Steve Ballmer revealed that Windows 8, the next version of Microsoft's desktop operating system, will be able to run on much smaller mobile devices like phones. He revealed that Windows 8 will support...

With Autos At CES, Are Vehicle Hacks Far Behind?

Sometimes news events just come together in a way that opens a window – even if its a kind of cloudy window – onto the future. So it was this week, as stories about a coming generation of wired automobiles collided with some thought-provoking reports on the vulnerability of said cars to tradition...

Researchers Expose Security Flaw in Internet-Ready HDTVs

Researchers at Mocana, a security technology firm in San Francisco, recently demonstrated the ease with which they could hack into a popular Internet-ready HDTV model. They exploited a vulnerability in the software that displays websites on the TV, allowing them to control the information sent to...

Microsoft to Support ARM Chips in Upcoming Windows Version

Microsoft Corp., feeling pressure from popular products like Apple Inc.'s iPad, is developing a new operating system that marks a departure from the company's traditional reliance on Intel Corp.'s chip technology. This information comes from sources familiar with Microsoft's plans. Next month,...

Gatesoft Docusafe Sql Injection Vulnerablity

Exploit for asp platform in category web applications ============================================ Gatesoft Docusafe Sql Injection Vulnerablity ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ ...

Gatesoft Docusafe 4.1.0 - SQL Injection

Gatesoft Docusafe 4.1.0 - SQL Injection Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to:...

Gatesafe Docusafe 4.1.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...

CVE-2008-5383

Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .ewb file...

Stack overflow

Stack-based buffer overflow in National Instruments Electronics Workbench allows user-assisted attackers to cause a denial of service application crash and possibly execute arbitrary code via a crafted .ewb file...

CVE-2008-5383

CVE-2008-5383 affects National Instruments Electronics Workbench through a stack-based buffer overflow in the application when processing a crafted .ewb file. The vulnerability enables user-assisted attackers to cause a denial of service (application crash) and may allow arbitrary code execution....

ewb-overflow.txt

!/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

Electronics Workbench (EWB File) Local Stack Overflow PoC

Exploit for unknown platform in category dos / poc ========================================================= Electronics Workbench EWB File Local Stack Overflow PoC ========================================================= !/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO...

Electronics Workbench - .ewb Local Stack Overflow (PoC)

Electronics Workbench - .ewb Local Stack Overflow PoC !/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O ...

Electronics Workbench (EWB File) Local Stack Overflow PoC

No description provided by source. !/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO...

Electronics Workbench - '.ewb' Local Stack Overflow (PoC)

!/usr/local/bin/perl OOO OOO OO OOO O O O O O O O O O O O O OO OO OOOOO OOOOO OOO OO OOOOOO O O OO OO OOOOO O O OO O O O O O OO O O O O O OO O O O O O O O O O OOOOOOO O O O O O O OOOOOOO O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O O OOO OOO OOO OOOOOO OOOOO OOOOO OOOOOO OOO OOO OO...

CVE-2008-4874

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Design/Logic Flaw

The web component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 has a back door "service" account with "service" as its password, which makes it easier for remote attackers to obtain access...

Directory traversal

Directory traversal vulnerability in the web server in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote authenticated users to read arbitrary files via a .. dot dot in a GET request. NOTE: this can be leveraged with CVE-2008-4874 for unauthenticated access ...

Cross site scripting

Cross-site scripting XSS vulnerability in the web server component in Philips Electronics VOIP841 DECT Phone with firmware 1.0.4.50 and 1.0.4.80 allows remote attackers to inject arbitrary web script or HTML via the request URL, which is not properly handled in a 404 web error page...