Perl Digest improper control of generation of code

Eval injection vulnerability in the Digest module before 1.17 for Perl allows context-dependent attackers to execute arbitrary commands via the new constructor...

FOCA 3.0 - Network Infrastructure Mapping Tool Free Release

FOCA 3.0 - Network Infrastructure Mapping Tool Free Release This new version has new fresh look and feel, and it is full of new features that you will love to discover. If you want to learn more about FOCA, and Get FOCA 3 PRO, then you can book for a seat in the next online training about FOCA. I...

The Mystery of Duqu: Part Two

Our investigation and research of Duqu malware continues. In our previous report, we made two points: there are more drivers than it was previously thought; it is possible that there are additional modules. Besides those key points, we concluded that unlike the massive Stuxnet infections, Duqu...

Chrome Stable Release

The Google Chrome team is happy to announce the arrival of Chrome 15.0.874.102 to the Stable Channel for Windows, Mac, Linux, and Chrome Frame. Chrome 15 contains some really great improvements including a new New Tab page. You can read about it more on the Google Chome blog. Security fixes and...

Aaron Barr's Strange Trip To (Occupy) Wall Street

It was an “Elvis Meets Nixon” kind of moment: former HBGary Federal CEO Aaron Barr sporting blue hair and posing in front of a van sporting the Wikileaks logo down at New York’s Zuccotti Park, home of the Occupy Wall Street protest. What was he doing there? It’s complicated. In an interview with...

Report: Obama Administration Considered Libyan Cyber-Offensive

The Obama Administration reportedly debated kicking off its latest war-effort in Libya with a cyber-offensive targeting the Qaddafi regime’s air-defense infrastructure, according to a report from the New York Times. The details of the Obama Administration’s plan remain classified, but the Times...

FBI shut down 18 Child Porn Websites

FBI shut down 18 Child Porn Websites A man was recently indicted on federal charges of running 18 Chinese-language child pornography websites out of his apartment in Flushing, New York. The websites were being advertised to Chinese-speaking individuals in China, in the U.S., and other countries...

FBI shut down 18 Child Porn Websites

FBI shut down 18 Child Porn Websites A man was recently indicted on federal charges of running 18 Chinese-language child pornography websites out of his apartment in Flushing, New York. The websites were being advertised to Chinese-speaking individuals in China, in the U.S., and other countries...

Biggest Identity Theft Bust Ever Nets 111 In New York

Authorities in New York have arrested more than 100 people accused of participating in an identity theft scam that generated $13 million in illicit profits fore crime gains in Europe, Asia, Africa and the Middle East, according to a statement from the District Attorney for Queens County. The...

OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release

OWASP Mantra - c0c0n 11 and AppSecLatam 11 Release The third beta of OWASP Mantra Security Toolkit has been released. One of the main features of this version is the multi-language support. Mantra now supports Hindi and Spanish, in addition to English. If you can give us a helping hand by...

linux/x86 Addnew Users 'root' /etc/passwd shell code 79 bytes

=============================================================== Linux X86 Addnew Users 'Ro0t' /etc/passwd shell code 79 bytes =============================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Nmap 5.61 TEST2 - IPv6 OS detection Added

Nmap 5.61 TEST2 - IPv6 OS detection Added Nmap Added IPv6 OS detection, CPE, 30 more scripts, and more features in latest release Nmap 5.61 TEST2. Change Log for Nmap 5.61TEST2 Added IPv6 OS detection system! The new system utilizes many tests similar to IPv4, and also some IPv6-specific ones tha...

Affinity New Media SQL Injection

Exploit Title: Affinity New Media SQL Injection Vulnerability Google Dork: intext:"Website design by Affinity" inurl:asp?id= Date: 28.09.2011 Author: m3rciL3Ss Service Link:http://www.affinitynewmedia.com/ Version: Category: webapps === POC === »...

FBI Arrests two Suspected LulzSec and Anonymous Hackers

FBI Arrests Suspected LulzSec and Anonymous Hackers Search warrants were also being executed in New Jersey, Minnesota and Montana. The FBI arrested two alleged members of the hacking collectives LulzSec and Anonymous on Thursday morning in San Francisco and Phoenix, According to Fox news. The...

THC-HYDRA v7.0 new version released for Download

THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...

THC-HYDRA v7.0 new version released for Download

THC-HYDRA v7.0 new version released for Download THC-HYDRA is a very fast network logon cracker which support many different services. This tool is a proof of concept code, to give researchers and security consultants the possibility to show how easy it would be to gain unauthorized access from...

Fedora 15 : hplip-3.11.7-2.fc15 (2011-11189)

This update fixes a temporary file vulnerability in the fax support of HPLIP when debugging is enabled. This update adds support for some new printers and fixes several issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

Fedora 14 : hplip-3.11.7-2.fc14 (2011-11199)

This update fixes a temporary file vulnerability in the fax support of HPLIP when debugging is enabled. This update adds support for some new printers and fixes several issues. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security...

BackBox Linux 2 released

BackBox Linux 2 released The BackBox team is proud to announce the release of BackBox. Linux 2.BackBox 2 features the following upstream components: Ubuntu 11.04, Linux Kernel 2.6.38 and Xfce 4.8. BackBox is an Ubuntu-based distribution developed to perform penetration tests and security...

ecryptfs: multiple flaws to mount/umount arbitrary locations and possibly disclose confidential information

The encrypted private-directory setup process in utils/ecryptfs-setup-private in ecryptfs-utils before 90 does not properly ensure that the passphrase file is created, which might allow local users to bypass intended access restrictions at a certain time in the new-user creation steps...