Demo of the Carrier IQ Agent on Android

Security researcher Trevor Eckhart discovered that many Android devices come pre-loaded with a piece of software made by Carrier IQ. In this video, he demonstrates how the software works and what it’s capable of monitoring. It’s since been revealed that versions of the app may have been on other...

OpenSSH < 1.2.2 sshd Local TCP Redirection Connection Masking Weakness

According to its banner, the version of OpenSSH running on the remote host allows local users without shell access to redirect TCP connections with the IDENT 'root@localhost'. A local attacker could use this incorrect IDENT to bypass monitoring/logging. C Tenable, Inc. include"compat.inc"; if...

[PT-2011-30] Disclosure of sensitive information in D-Link DIR-300 Router

---------------------------------------------------------------------- PT-2011-30 Positive Technologies Security Advisory Disclosure of sensitive information in D-Link DIR-300 Router ---------------------------------------------------------------------- ---Vulnerable software Router management...

How Facebook Ticker exposing your information and behavior without your knowledge

How Facebook Ticker exposing your information and behavior without your knowledge Nelson Novaes Neto , a Brazilian independent Security and Behavior Research have analyze a privacy issue in FacebookTicker that allows any person chasing you without your knowledge or consent . He explain that this ...

Design/Logic Flaw

Multiple untrusted search path vulnerabilities in 1 db2rspgn and 2 kbbacf1 in IBM DB2 Express Edition 9.7, as used in the IBM Tivoli Monitoring for Databases: DB2 Agent, allow local users to gain privileges via a Trojan horse libkbb.so in the current working directory, related to the DTRPATH ELF...

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K A new Tool "Artillery" - for Linux Protection has been Released by ReL1K Founder DerbyCon, Creator of the Social-Engineer Toolkit. It's written in Python and completely open-source. Artillery is a combination of a honeypot, file...

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K

Artillery 0.1 alpha - New tool for Linux Protection byReL1K A new Tool "Artillery " - for Linux Protection has been Released by ReL1K Founder DerbyCon, Creator of the Social-Engineer Toolkit. It's written in Python and completely open-source. Artillery is a combination of a honeypot, file...

Cisco Unified Operations Manager Detection

Cisco Unified Operations Manager, part of the Cisco Unified Communications Management Suite, was detected on the remote web server. Unified Operations Manager is used to perform real-time monitoring. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid56484;...

Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability

Description Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions. Technologies Affected Avaya Aur...

Microsoft Forefront Unified Access Gateway 'MicrosoftClient.Jar' Remote Code Execution Vulnerability

Description Microsoft Forefront Unified Access Gateway is prone to a remote code-execution vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the logged-in user. Technologies Affected Microsoft Forefront Unified Access Gateway 2010 Microsoft...

GLSA-201110-02 : Wireshark: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201110-02 Wireshark: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Wireshark. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could send specially crafted...

ICIMP 2012 Call For Papers

INVITATION: ================= Please, consider to contribute to and/or forward to the appropriate groups the following opportunity to submit and publish original scientific results to ICIMP 2012. The submission deadline is set to January 5, 2012. In addition, authors of selected papers will be...

ganglia-info NSE Script

Retrieves system information OS version, available memory, etc. from a listening Ganglia Monitoring Daemon or Ganglia Meta Daemon. Ganglia is a scalable distributed monitoring system for high-performance computing systems such as clusters and Grids. The information retrieved includes HDD size,...

[SECURITY] Fedora 16 Update: zabbix-1.8.7-2.fc16

ZABBIX is software that monitors numerous parameters of a network and the health and integrity of servers. ZABBIX uses a flexible notification mechanism that allows users to configure e-mail based alerts for virtually any event. This allows a fast reaction to server problems. ZABBIX offers...

A web site security detection system of an EOP 0Day-vulnerability warning-the black bar safety net

Following last night found a website security monitoring system in the presence of a tasteless 0Day after, and just through pure manual way to discover its presence at an EOP 0Day the. This is my study of vulnerabilities for the first time since without the aid of the Fuzz of the case to find the...

ServersCheck Monitoring 8.8.6 Session Hijacking / XSRF

Title: ====== ServersCheck Monitoring v8.8.6 - Multiple Web Vulnerabilities Date: ===== 2011-09-27 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=93 VL-ID: ===== 93 Introduction: ============= ServersCheck is a Belgian based and privately owned technology company found...

ServersCheck Monitoring Software 8.8.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/49793/info ServersCheck Monitoring Software is prone to multiple remote input-validation vulnerabilities, including: 1. Multiple HTML-injection vulnerabilities 2. Multiple cross-site scripting vulnerabilities 3. A cross-site request forgery vulnerability ...

ServersCheck Monitoring Software 8.8.x - Multiple Vulnerabilities

ServersCheck Monitoring Software 8.8.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/49793/info ServersCheck Monitoring Software is prone to multiple remote input-validation vulnerabilities, including: 1. Multiple HTML-injection vulnerabilities 2. Multiple cross-site...

ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities

Document Title: =============== ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=93 FULL: Discl. Date OSVDB ID CVE ID Creditees Title 2011-09-27 76035 Benjamin Kunz Mejri ServersCheck Monitoring...

ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities

Document Title: =============== ServersCheck Monitoring 8.8.10 - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=93 FULL: Discl. Date OSVDB ID CVE ID Creditees Title 2011-09-27 76035 Benjamin Kunz Mejri ServersCheck Monitoring...