Report Says Engineer Designed Google Street View with Payload Data Gathering in Mind

Google says it released the full FCC report on Street View consumer privacy allegations to hopefully put the matter to rest. But revelations that the code might have been created with surreptitious data gathering in mind is likely to keep the issue very much alive. An article in today’s Los Angel...

Researcher Causes Endless Restart Loop on Samsung TVs

Italian security researcher Luigi Auriemma was trying to play a trick on his brother when he accidentally discovered two vulnerabilities in all current versions of Samsung TVs and Blu-Ray systems that could allow an attacker to gain remote access to those devices. Auriemma claims that the...

IPhone TreasonSMS - HTML Inject & File Include Vulnerability

Title: ====== IPhone TreasonSMS - HTML Inject & File Include Vulnerability Date: ===== 2012-04-23 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=154 VL-ID: ===== 154 Introduction: ============= treasonSMS allows you to send SMS from your desktop computer. It turns your...

Vulnerabilities in Samsung TV (remote controller protocol)

Luigi Auriemma Application: Samsung devices with support for remote controllers http://www.samsung.com Versions: current Platforms: the vulnerable protocol is used on both TV and blue-ray devices so both of them should be vulnerable my tests were performed only on a D6000 TV with the latest...

Samsung D6000 TV - Multiple Vulnerabilities

Samsung D6000 TV - Multiple Vulnerabilities Luigi Auriemma Application: Samsung devices with support for remote controllers http://www.samsung.com Versions: current Platforms: the vulnerable protocol is used on both TV and blue-ray devices so both of them should be vulnerable my tests were...

Critics Continue Pushing for Bigger Probe into Google Street View Practices

Privacy advocates continue urging for a wider federal investigation into Google Street View practices following Google’s $25,000 fine for stonewalling federal officials during an earlier probe of Wi-Fi snooping allegations. The Federal Communications Commission late last week gave the Internet...

Cyberoam UTM 10.01.2 build 059 File Include Vulnerabilities

Exploit for multiple platform in category web applications Title: ====== Cyberoam UTM v10.01.2 build 059 - File Include Vulnerabilities Introduction: ============= Cyberoam Unified Threat Management appliances offer comprehensive security to organizations, ranging from large enterprises to small...

Mobile Terminal Application for Intermittent Connectivity: Mosh

Remote terminal application that allows roaming, supports intermittent connectivity, and provides intelligent local echo and line editing of user keystrokes. This is a replacement for SSH. It’s more robust and responsive, especially over Wi-Fi, cellular, and long-distance inks. Mosh is free...

[ANNOUNCE] Apache Traffic Server releases for security incident CVE-2012-0256

Everyone, Below is our announcement for the security issue reported to us from Codenomicon, via CERT-FI. All previous versions of Apache Traffic Server are vulnerable, and we urge users to upgrade to either v3.0.4 or v3.1.3 immediately. Both releases are available from our download site at...

Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities

+--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author : Ivano Binetti http://www.ivanobinetti.com Vendor site :...

Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities

Sitecom WLM-2501 - Multiple Cross-Site Request Forgery Vulnerabilities +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : Sitecom WLM-2501 new Multiple CSRF Vulnerabilities Date : 22-03-2012 Author :...

Apache Traffic Server -- heap overflow vulnerability

CERT-FI reports: A heap overflow vulnerability has been found in the HTTP Hypertext Transfer Protocol protocol handling of Apache Traffic Server. The vulnerability allows an attacker to cause a denial of service or potentially to execute his own code by sending a specially modified HTTP message t...

2012 Most Vulnerable Cities At Risk Of Cyber Crime

2012 Most Vulnerable Cities At Risk Of Cyber Crime Norton's study showed the city was one of the ten worst for hacking. Each city was ranked by the prevalence of PCs and smartphones in addition to social media use with risk factors like unsecured Wi-Fi hotspots and malware attempts. Manchester wa...

BlackBerry PlayBook Tablet Samba文件共享远程代码执行漏洞

BUGTRAQ ID: 52103 Playbook是一款由黑莓手机厂商RIM研制的平板电脑。它突出游戏、媒体发布和协作功能。 BlackBerry PlayBook在畸形Samba服务的实现上存在远程代码执行漏洞，攻击者可通过Wi-Fi网络或物理接触USB连接计算机利用此漏洞以管理者权限执行任意代码，造成完全控制受影响计算机。 0 BlackBerry PlayBook Tablet Software 1.0.8.6067 BlackBerry PlayBook Tablet Software 1.0.5.2304 BlackBerry PlayBook Tablet Software...

AoF and CSRF vulnerabilities in D-Link DAP 1150

Hello 3APA3A! I want to warn you about new security vulnerabilities in D-Link DAP 1150 Wi-Fi Access Point and Router. These are Abuse of Functionality and Cross-Site Request Forgery vulnerabilities. This is my third advisory from series of advisories about vulnerabilities in D-Link products. Abus...

CVE-2011-4872

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

Design/Logic Flaw

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

CVE-2011-4872

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

CVE-2011-4872

The CVE-2011-4872 issue affects multiple HTC Android devices (e.g., Desire HD FRG83D/GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation lines, EVO lines). A remote attacker with android.permission.ACCESS_WIFI_STATE can call WifiConfiguration.toString() to reveal 802.1X...

Wi-Fi network scanner: inSSIDer

inSSIDer is the best free Wi-Fi network scanner for Windows 7, Vista and XP The free inSSIDer software utility for Windows, iOS, and Android is one of the most useful and easy-to-interpret wireless networking tools I’ve encountered. InSSIDer displays information about the wireless networks in...