Samsung Knox Vulnerable to Data Intercept

An Israeli security researcher from the Ben-Gurion University of the Negev’s Cyber Security Labs claims to have uncovered a serious security flaw in Samsung Knox. Knox is a security- and privacy-centric platform built into certain Samsung devices running Android. The Knox architecture, tailored f...

Bypassing the latest version of the site Safety Dog 3. 1 upload-vulnerability warning-the black bar safety net

Test environment: windows 2 0 0 3 + iis 6.0 Test steps: 1. Site Safety Dog Defense state open ! 1 2. Burp intercept POST package after the modifications ! 2 3. Yes, you read that right, that is | 1 | 08sec. php spaces ---|--- ! 3! 4...

Bypass the site's security and Dog 3. 1 upload-vulnerability warning-the black bar safety net

This method is only tested in V3. 1 0 5 8 3 7 or less than V3. 1 0 5 8 3 7 the latest version V3. 1 0 6 1 0 3 ps: this method has been submitted to the security Dog security Emergency Response Center Bypass the site's security Dog V3. 1 0 6 1 0 3 way later will continue to publish out, please pay...

SEIL Series routers vulnerable in RADIUS authentication

Overview SEIL Series routers contain a vulnerability in RADIUS authentication. The PPP Access Concentrator PPPAC in SEIL Series routers provided by Internet Initiative Japan Inc. contains an issue when generating random numbers used for RADIUS authentication, which may result in the generated...

PRISM like Surveillance system in France to intercept billions of communications

The US isn't the only western country with an Digital eye i.e PRISM like surveillance program, designed to monitor internet and phone communications. French is leading member at European Parliament and they voted to launch an in-depth inquiry against the US's based PRISM surveillance project. The...

PRISM like Surveillance system in France to intercept billions of communications

The US isn't the only western country with an Digital eye i.e PRISM like surveillance program, designed to monitor internet and phone communications. French is leading member at European Parliament and they voted to launch an in-depth inquiry against the US's based PRISM surveillance project. The...

CVE-2013-1208: Undefined Security Weakness

The encryption functionality in Cisco NX-OS on the Nexus 1000V does not properly handle Virtual Supervisor Module VSM to Virtual Ethernet Module VEM communication, which allows remote attackers to intercept or modify network traffic by leveraging certain Layer 2 or Layer 3 access, aka Bug ID...

Israel preparing Cyber Iron Dome Shield

Israel's Prime Minister officially opened a new national program to train teenagers in the art of cyberwarfare. The program named "Magshimim Le'umit", is to prepare them for their future role in the military and intelligence community. Israel Prime Minister Binyamin Netanyahu said the country's...

German Police eavesdropping Facebook, Gmail, Skype Conversations

An eavesdropping tool allegedly used by the German government to intercept Skype calls is full of security problems and may violate a ruling by the country's constitutional court, according to a European hacker club. The information was released as part of a move towards financial transparency. T...

Spoofing and script injection through location.hash — Mozilla

Security researcher Mariusz Mlynski reported an issue with spoofing of the location property. In this issue, writes to location.hash can be used in concert with scripted history navigation to cause a specific website to be loaded into the history object. The baseURI can then be changed to this...

Slackware: Security Advisory (SSA:2009-040-01)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2012-2647: Exposure of Sensitive Information to an Unauthorized Actor

Yahoo! Toolbar 1.0.0.5 and earlier for Chrome and Safari allows remote attackers to modify the configured search URL, and intercept search terms, via a crafted web page...

Critical Bug Reported in Oracle Servers

There’s a critical remotely exploitable vulnerability in all of the current versions of the Oracle database server that can enable an attacker to intercept traffic and execute arbitrary commands on the server. The bug, which Oracle reported as fixed in the most recent Critical Patch Update, is on...

Browser Find toolbar phishing attack

Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...

Browser Find toolbar phishing attack

Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...

Researchers Crack Satellite Phone Ciphers

Researchers at a German university have broken the encryption of the two main standards used to protect calls from satellite phones, giving them the ability to intercept conversations that are meant to be private. The attacks on the GMR-1 and GMR-2 standards are thought to be the first such work...

Did Apple, RIM and Nokia Help The Indian Government Spy On The U.S.?

Documents purportedly lifted from Indian government servers contain explosive allegations: that leading Western firms including Apple Corp., Research in Motion and Nokia provided the government with secret access to mobile devices their mobile operating systems- access that the Indian government...

Design/Logic Flaw

The Server Administration Panel in Parallels Plesk Panel 10.2.0build1011110331.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies us...

CVE-2011-4849

The Control Panel in Parallels Plesk Panel 10.4.4build20111103.18 does not set the secure flag for a cookie in an https session, which makes it easier for remote attackers to capture this cookie by intercepting its transmission within an http session, as demonstrated by cookies used by help.php a...

Did the German Government Break The Law With Its Lawful Intercept Trojan?

The German government acknowledged on Tuesday that a trojan horse program used to perform lawful intercept is capable of far more than it was said to be. The confirmation comes after an analysis by hacking group The Chaos Computer Club CCC which alleged that the program may be in breach of the la...