Code injection

Unspecified vulnerability in the Health Sciences - Oracle Argus Safety component in Oracle Industry Applications 5.0, 5.0.1, 5.0.2, and 5.0.3 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Login and LDAP...

CVE-2010-3593

Technical details about CVE-2010-3593 are not publicly available in the provided documents. Monitor for updates from Oracle advisories and CVE/NVD entries for concrete information on impact and fixes.

GAO Warns Of Cyber Insecurity on Smart Grid

The U.S. Government’s watchdog, the Government Accountability Office GAO has warned that the rapid adoption of so-called “smart grid” infrastructure in the U.S. electric industry is going forward without adequate planning for cybersecurity and the combined physical and cyber attacks that are like...

Kerala cyber police closing in on software theft culprits !

Thiruvananthapuram, Jan 5 IANS The cyber wing of the Kerala Police Wednesday claimed it had got vital clues about the theft of software source codes and intellectual property data from a Kochi-based IT company. The investigation is progressing on the right track, V.K. Ajith Mohan of the police...

Ross Klein (Starwood Hotels and Resorts Worldwide)

Klein and Amar Lalvani were two top executives at the Starwood hotel chain when they were recruited by Starwood’s chief competitor, Hilton, to help it start a new line of “lifestyle” hotels to compete with Starwood’s popular “W” hotels. According to a lawsuit filed by Starwood, the two executives...

Cybersecurity Experts Create Program That Steals Text Messages !

Two cybersecurity researchers have just taught smartphones a lesson by developing a program that can eavesdrop and steal text messages from any phone on a GSM network – all in about 20 seconds. The Guardian reported that Karsten Nohl and Sylvain Munaut spent a year honing their technology, which...

Carriers Enhance Mobile Security to Combat Attacks and Breaches

Carriers, developers, and phone makers are rolling out new services and features to protect mobile devices from malicious attacks and data breaches. As people increasingly use smartphones for email, banking, and document access, the wireless industry is addressing mobile device security. Accordin...

Sightseeing Firm Overlooks Security, 110k Credit Card Numbers Stolen

CitySights owner Twin America says the credit card details of 110,000 customers were stolen in a Web based attack and suggests it wasn’t following Payment Card Industry guidelines for storing card data. The parent company of the CitySights sightseeing tours company, Twin America LLC, said in a...

Gatesoft Docusafe 4.1.0 - SQL Injection

Gatesoft Docusafe 4.1.0 - SQL Injection Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to:...

Gatesoft Docusafe 4.1.0 - SQL Injection

Author: R4dc0re Exploit Title: Gatesoft Docusafe Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://gatesoft.no/ Category:WebApp Version:4.1.0 Price:3500$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects and to re...

Gatesafe Docusafe 4.1.0 SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 3 3 3 3 7 /' \ /'\ /'\ /\ \ /\ /\ \ 7 1 /, /\L\ \ /\L\ \///'/' \ \ \ \ 1 3 //\ //\ Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail :...

Top 10 IT Security Trends for 2011

The crystal ball gazing has started early this year. Typically, tech prediction pieces emerge after Christmas, but the first 'security trends for 2011' missive has already dropped into my inbox. So, what does the somewhat premature Imperva Application Defense Center think will worry us the most o...

Cloud Security Alliance Releases New Toolkit

In an effort to better weigh the security of cloud-based infrastructures, the Cloud Security Alliance has released a new toolkit, the Governance, Risk Management and Compliance GRC Stack. Available as a free download on the organization’s website, the collection consists of three tools: CloudAudi...

97% of Cyber Crimes in Gurgaon Go Unreported, Say Police

Police in India report that 97 percent of cyber crimes remain unreported in Gurgaon, a city less than 20 miles from New Delhi. Industry representatives are now collaborating with law enforcement to tackle this issue, according to Times of India. Last week, the IT and business process outsourcing...

Day-Con

Dayton, Ohio When I say “Dayton,Ohio,” what image comes to mind? Hacking, right? If not, then you’ve never been to Day-Con, the annual Ohio-based hacker con now in its fourth year. This year’s Day-Con is scheduled for October 22nd and 23rd, with three days of training preceding the main conferenc...

Source Conferences

Boston, Massachusetts and Barcelona, Spain Somewhere between DEFCON and RSA, you find the Source Conferences. A relative newcomer to the security scene, these multi-track annual shows in Boston and Barcelona blend industry focused sessions from venture capitalists and executives with presentation...

By Paul Roberts

You could be excused for thinking that the world of security conferences was limited to industry shin-digs like the RSA show in San Francisco, and mega events like the Black Hat Briefings and Defcon conferences in Las Vegas. But, as the definition of “hacker” has expanded in the last decade, we’v...

Paul Roberts Joins Threatpost

In the year and a half since we first launched Threatpost, the site has grown very quickly, probably more quickly than any of us had even hoped it might. We’ve added a couple of regular podcasts, original videos, developed a stable of terrific regular contributors and recently launched our first...

Saint Corporation Cross Site Scripting / HTML Injection

SAINT Corporation XSS Defacement Vulnerability Management, Assessment, Penetration Testing SAINT Corporation provides network security tools to financial, government and educational institutions around the world SAINT customers. The SAINT® vulnerability assessment tools are recognized as industry...

Accomplease Leasing Software SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================== Accomplease Leasing Software SQL Injection Vulnerability ======================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0...