Alex Howard on Compliance, Breach Notification and the Rockefeller Bill

Dennis Fisher talks with Alex Howard, associate editor of Searchcompliance.com, about the burden compliance places on security staffs, the growing tide of breach notification laws and the misunderstandings surrounding the Rockefeller bill and the Internet kill switch. Download Subscribe to the...

China steps up fight against cybercrime

From CSO Robert McMillan In the face of increased attacks by its citzens against Chinese networks, China is stepping up the severity and enforcement of its computer crime laws. China often is cited as one of the major havens for hackers and malware authors, but as this IDG News Service report...

Unfixed XSS vulnerability at www.kronofogden.se

Security researcher DellNull, has submitted on 15/05/2009 a cross-site-scripting XSS vulnerability affecting www.kronofogden.se, which at the time of submission ranked 159295 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 03/07/2009. It is...

Radical steps are needed to fix Internet security

The Internet as we know it today was designed to be a place where people could go about their business, whatever it happened to be, anonymously and without interference from other users. This model worked reasonably well for a long time, but it’s become painfully clear in recent months that some...

BBC botnet buy: What were they thinking?

By Roel Schouwenberg As Dancho Danchev pointed out, the BBC leased itself a botnet zdnet.com. I couldn’t quite believe it when I read it. The BBC, arguably one of the very best TV producers in the world, surely should have known better? There are so many things wrong about this that I hardly know...

SSF Server Detection

Binary data 4422.prm...

ris-xss.txt

Hi folks, Description: RIS is a public accessable web application to search/browse Austrian laws, provided by the Government of Austria. It is vulnerable for XSS via a malformed search query. POC: http://www.ris.bka.gv.at/taweb-cgi/taweb?q=%3Cscript%3Ealert1;%3C/script%3E&x=r&v=lroo&o=&db3=LROO...

CVE-2006-6893

Removed by vendor...

CVE-2006-6893

Tor allows remote attackers to discover the IP address of a hidden service by accessing this service at a high rate, thereby changing the server's CPU temperature and consequently changing the pattern of time values visible through 1 ICMP timestamps, 2 TCP sequence numbers, and 3 TCP timestamps, ...

Omni-NFS Server 5.2 (nfsd.exe) Remote Stack Overflow Exploit (meta)

No description provided by source. vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the...

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

No description provided by source. vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of th...

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow (Metasploit)

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow Metasploit vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to us...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...

Sambar security quest

This issue is old originally discovered in January, 2003 published by iDefense1 and fixed by Vendor2 in September, 2003 but still interesting if you tired of endless crossite scriptings, buffer overflows and SQL injections and would like to play security game. Intro: Probably you heard about...

Update for Windows Server 2003 (KB2756822)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2012. After you install this item, you may have to restart your computer...

Update for Windows Server 2003 x64 Edition (KB979306)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2010. After you install this item, you may have to restart your computer...

Update for Windows Vista for x64-based Systems (KB981793)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2010. After you install this item, you may have to restart your computer...

Update for Windows Server 2003 for Itanium-based Systems (KB981793)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2010. After you install this item, you may have to restart your computer...

Update for Windows XP x64 Edition (KB979306)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2010. After you install this item, you may have to restart your computer...

Update for Windows Vista (KB976098)

Install this update to resolve issues caused by revised daylight saving time and time zone laws in several countries. This update enables your computer to automatically adjust the computer clock on the correct date in 2009. After you install this item, you may have to restart your computer...