651 matches found
New Controls Needed to Improve Privacy
WASHINGTON, D.C.– As the speed of technological innovation has continued to increase in recent years, it has completely outpaced the ability of companies, consumers and regulators to keep up with the ways in which those changes affect online privacy, experts say, and in order to make real...
TinyPug Cross Site Request Forgery
============================================================================== » Note : Default Username Of Admin : Administrator ============================================================================== » Tinypug Remote Change Password Exploit...
Tinypug 0.9.5 - Cross-Site Request Forgery (Password Change)
Tinypug 0.9.5 - Cross-Site Request Forgery Password Change www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation...
CVE-2006-6404
INNOVATION Data Processing FDR/UPSTREAM 3.3.0 GA Oct 2003 allows remote attackers to cause a denial of service service outage via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred...
CVE-2006-6404
INNOVATION Data Processing FDR/UPSTREAM 3.3.0 GA Oct 2003 allows remote attackers to cause a denial of service service outage via a sequence of TCP SYN packets to many ports, as demonstrated using nmap. NOTE: the vendor's testing reportedly found that no denial of service occurred...
CVE-2006-6404
The CVE-2006-6404 entry concerns INNOVATION Data Processing FDR/UPSTREAM 3.3.0. A DoS vulnerability is described: remote attackers could cause service outages by sending a sequence of TCP SYN packets to many ports (demonstrated with nmap). The description notes vendor testing reportedly found no ...
Disruptive Innovation and the Future of Security
In this video from the Source Boston 2008 conference, Rich Mogull of Securosis and Chris Hoff discuss the phenomenon of disruptive innovation and what it means for the future of security...
CanSecWest: Caution, community at play
CanSecWest, in beautiful Vancouver BC, is one of my favorite conferences each year. It’s a cozy little security con that brings together security researchers from all parts of the security ecosystem. Like a PhNeutral or a BlueHat, one never quite knows what to expect out of a CanSecWest, but we d...
Economic crisis hitting security budgets hard
The economy is still terrible and will likely continue to get worse in the near term, and the picture is just as ugly for enterprise security staffs. Peter Kuper, a longtime investment banker and software analyst at Morgan Stanley, said security shops can expect to see their budgets be flat at be...
Unfixed XSS vulnerability at www.nordicinnovation.net
Security researcher C1c4Tr1Z, has submitted on 13/05/2008 a cross-site-scripting XSS vulnerability affecting www.nordicinnovation.net, which at the time of submission ranked 1217824 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It...
