HITB Quartal Magazine - eZine Issue 006

Document Title: =============== HITB Quartal Magazine - eZine Issue 006 References: =========== Download: https://www.vulnerability-lab.com/resources/documents/204.pdf Original: https://magazine.hackinthebox.org/issues/HITB-Ezine-Issue-006.pdf Release Date: ============= 2011-06-16 Vulnerability...

Winamp 5.61 'in_midi' component heap overflow (crash only)

No description provided by source. Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafte...

Winamp 5.61 - in_midi Component heap Overflow (crash only)

Winamp 5.61 - inmidi Component heap Overflow crash only Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi fil...

Winamp 5.61 'in_midi' component heap overflow (crash only)

Exploit for windows platform in category dos / poc Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file wit...

Winamp 5.61 Heap Overflow

Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafted System Exclusive message type...

Winamp 5.61 - 'in_midi' Component heap Overflow (crash only)

Exploit Title: Winamp 'inmidi' component heap overflow Date: 05/14/2011 Author: Alexander Gavrun http://0x1byte.blogspot.com/ Software Link: http://www.winamp.com/ Version: 5.61 Tested on: Windows 7 Vulnerability occur while parsing midi file with special crafted System Exclusive message type...

Infiltrate 2011 - Information security Event !

Infiltrate is a deep technical security conference that will focus entirely on offensive technical issues. It will be the single-most important event for those who are focused on the technical aspects of offensive security issues. No policy or high-level presentations, just hard-core thought...

Get Free CEH V7 Training via EC-Council to 375 selected professionals around the world !

How to get FREE CEH V7 Training? EC-Council is going to be selecting 125 information security professionals from all over the world to be part of the inaugural CEH V7 launch for FREE ! That's right, you heard it right. It is Absolutely Free ! You can be one of the 125 Information Security...

aidSQL: A Tool to Find Vulnerable Spots in Web Sites !

aidSQL is a PHP application provided for detecting security holes in your websites. It is a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. Sample usage of aidsql: ./aidSQL --url=www.sample123.com We find it similar to nikto,...

Lolz ! I've won three million Euros from Bill Gates !

Excuse me for typing breathlessly, faithful Naked Security reader, but I have some incredible news to share. I have just been informed that I have won three million Euros from none other than the Bill Gates Foundation! I had no idea that the Bill and Melinda Gates Foundation, which normally fight...

UConn Co-op website hacked !

Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...

Millions of Honda/Acura owners affected by hacked Honda database !

The Japanese motor company, Honda, today issued an alert to U.S. customers concerning a security breach resulting from a hacked database. The database that was managed by a third-party marketing group contained confidential information, including names of car owners, personal e-mail addresses, an...

315 Websites hacked By Tunisian Hacker - The 077 ( HamDi HaCKer )

315 Websites hacked By Tunisian Hacker - The 077 HamDi HaCKer Websites Hacked : Full List here - Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Adaptive Security Analyzer IIS : A Tool to Protect Windows Based Web Servers !

Adaptive Security Analyzer IIS or the ASA IIS protects Windows-based web servers from known and unknown vulnerabilities like Directory Traversal, Buffer Overflow, Parser Evasion, High-bit Shellcode, Remote Data Services, In addition to the above, it also protects them from various types of intern...

Windows zero-day flaw bypasses UAC !

A new zero-day attack against Windows, capable of bypassing the User Access Control protections introduced in Windows Vista and designed to prevent malware from gaining administrative access without user authorisation, has been discovered in the wild. The proof-of-concept implementation of the...

Carriers Enhance Mobile Security to Combat Attacks and Breaches

Carriers, developers, and phone makers are rolling out new services and features to protect mobile devices from malicious attacks and data breaches. As people increasingly use smartphones for email, banking, and document access, the wireless industry is addressing mobile device security. Accordin...

FBI Investigates Gawker Media Hack Claimed by Gnosis

The FBI is investigating the massive hack of Gawker Media. Reports indicate that FBI agents met with Gawker Media CEO Nick Denton on Monday following the hacking incident, which was claimed by a group called Gnosis. The Gawker website was paralyzed, temporarily forcing the gossip site to stop...

Free phone Calls To Land-line And Cellphones Anywhere In the World

There have been many services offering free international VOIP calls and most of them rely upon ad-supported funding to get things going, most of such services have closed there doors but there are still a few left. One such service Evaphone allows users to enjoy free international PC-To-Phone...

Nmap for Android Phones !!

droidmap is an android application for root users that implements some functions of NMAP in a GUI in Android. This program comes with installer scripts for the installation of the required NMAP application that must be run to install the program to your phone. Please note that the installation...

The OWASP HTTP Post Tool ! Download Now

The OWASP HTTP Post Tool allows you to test your web applications to ensure its stability from HTTP GET and HTTP POST attacks. This tool was programmed by the author to over come the short comings of other HTTP attack tools such as Slowloris and PyLoris. In other words this QA tool was created to...