Design/Logic Flaw

Multiple unspecified vulnerabilities in Oracle E-Business Suite and Applications 11.5.10CU2 have unknown impact and attack vectors related to 1 Application Object Library APPS01, 2 Human Resources APPS03, 3 Payables APPS04, 4 Trading Community Architecture APPS05, and 5 Web Applications Desktop...

CVE-2006-6899

hidd in BlueZ bluez-utils before 2.25 allows remote attackers to obtain control of the 1 Mouse and 2 Keyboard Human Interface Device HID via a certain configuration of two HID PSM endpoints, operating as a server, aka HidAttack...

Hacker Mitnick teaches Social Engineering(social engineering) awareness-vulnerability warning-the black bar safety net

Security adviser as well as the famous hacker Kevin Mitnick noted that the staff be properly trained to be than a technology better able to avoid sensitive information by Social Engineering attack. “People previously used techniques to solve such problems, but Social Engineering can circumvent...

Social engineering information security against the new field-bug warning-the black bar safety net

Information security vulnerabilities are widespread, any one system are a potential security risk. In recent years, the use of means of social engineering, break through the information security defensive measures of an event, has shown a rise even spread of the trend, become the information...

OpenSSL SSL_get_shared_ciphers() vulnerable to buffer overflow

Overview A buffer overflow vulnerability in an OpenSSL library function could allow a remote attacker to execute code on an affected system. Description The OpenSSL toolkit implements the Secure Sockets Layer SSL versions 2 and 3 and Transport Layer Security TLS version 1 protocols as well as a...

CVE-2004-1085

Human Interface Toolbox HIToolBox for Apple Mac 0S X 10.3.6 allows local users to exit applications via the force-quit key combination, even when the system is running in kiosk mode...

[Full-Disclosure] Race conditions in security dialogs

I discovered arbitrary code execution holes in Mozilla, Internet Explorer, and Opera that involve human reaction time. One version of the attack works like this: the page contains a captcha displaying the word "only" and asks you to type the word to verify that you are a human. As soon as you typ...

Identix BioLogon 3

I released the following to CERT and then realized it was probably not the best place for this issue as the vulnerability is more local network and workstation than Internet. They have not responded within the last 5 days and so I'm forwarding the CERT submission form to SecurityFocus...

embedded-controllers.txt

Date: Fri, 11 Dec 1998 10:45:46 -0500 EST From: X-Force To: [email protected] Cc: X-Force Subject: ISSalert: ISS Security Advisory: ICMP Redirects Against Embedded Controllers -----BEGIN PGP SIGNED MESSAGE----- ISS Security Advisory December 10, 1998 ICMP Redirects Against Embedded Controllers WARNIN...