461 matches found
Voters Test New Crytographic Voting System in Maryland
The state of Maryland tested a new cryptographic voting system on Election day that allowed users to confirm their votes online, as well as allow anyone to independently audit the system. Scantegrity is an optical-scan, open-source system that uses a combination of paper ballots and unique...
Bypassing DBMS_ASSERT in certain situations
DBMSASSERT can be used to prevent PL/SQL injection. In certain cases it can be bypassed. This is documented in a paper I wrote in July 2008 but am only publishing now: http://www.databasesecurity.com/oracle/Bypassing-DBMSASSERT.pdf Cheers, David Litchfield NGSSoftware Ltd...
Cloud security needs its rainmaker
From Information Week George Hulme The Cloud Security Alliance CSA made its inaugural splash at last week’s RSA Security Conference 2009 in San Francisco. The group kicked off an ambitious white paper cloudsecurityalliance.org that attempts to define everything from the architecture of cloud...
Linux/mips - port bind 4919 - 276 bytes
No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include "stdio.h" char...
Adobe Reader util.printf() JavaScript Function Stack Overflow Exploit
No description provided by source. Adobe Reader 'util.printf' JavaScript Function Stack Buffer Overflow Exploit author: Elazar http://sebug.net/paper/poc/2008-APSB08-19.pdf...
Founder of the Desai paper authorization submission system vulnerabilities-vulnerability warning-the black bar safety net
Founder of the Desai paper authorization submission system Its description: http://baike.baidu.com/view/785813.htm That is a forum upload system. Many universities are using this system. In the following we will use the system vulnerabilities to invade Peking University. This exploits the basic...
linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes
No description provided by source. / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char...
linux/mips (Linksys WRT54G/GL) execve shellcode 60 bytes
No description provided by source. / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail dot com / include stdio.h char shellcode = "\x50\x73\x06\x24" /...
linux/mips - Linksys WRT54G/GL port bind shellcode 276 bytes
linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux port listener 276 bytes shellcode - execve"/bin/sh","/bin/sh",; - port 0x1337 4919 - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix...
linux/mips (Linksys WRT54G/GL) port bind shellcode 276 bytes
Exploit for linux/mips platform in category shellcode ============================================================ linux/mips Linksys WRT54G/GL port bind shellcode 276 bytes ============================================================ / - MIPS little-endian - linux port listener 276 bytes shellco...
linux/mips - Linksys WRT54G/GL execve shellcode 60 bytes
linux/mips Linksys WRT54G/GL execve shellcode 60 bytes. Shellcode exploit for linuxmips platform / - MIPS little-endian - linux execve 60 bytes shellcode - execve"/bin/sh","/bin/sh",; - tested on Linksys WRT54G/GL DD-WRT Linux - based on scut paper Writing MIPS/Irix shellcode vaicebine at gmail d...
Unfixed XSS vulnerability at paper-x.com
Security researcher PhYtOn, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting paper-x.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is currently unfixed...
Unfixed XSS vulnerability at www.koehlerpaper.com
Security researcher By Encore, has submitted on 12/06/2007 a cross-site-scripting XSS vulnerability affecting www.koehlerpaper.com, which at the time of submission ranked 3159567 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 12/06/2007. It is...
Unfixed XSS vulnerability at www.washingtoncitypaper.com
Security researcher unkn0wn @ toxcrew.com, has submitted on 26/10/2007 a cross-site-scripting XSS vulnerability affecting www.washingtoncitypaper.com, which at the time of submission ranked 73787 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on...
Design flaw in AS3 socket handling allows port probing
Design flaw in AS3 socket handling allows port probing Summary Due to a design flaw in ActionScript 3 socket handling, compiled Flash movies are able to scan for open TCP ports on any host reachable from the host running the SWF, bypassing the Flash Player Security Sandbox Model and without the...
Command Injection in XML Digital Signatures
iSEC Partners Security Advisory - 12 Jul 2007 XML Digital Signature Command Injection http://www.isecpartners.com -------------------------------------------- XML Digital Signature Command Injection Vulnerability Vendor: Sun Microsystems, Inc. Vendor URL: http://sun.com Versions affected: JSR 105...
CYBSEC Release: SAP Security - Paper & Tool release
I am proud to announce the release of a White-paper and an open-source tool, both addressing security of SAP R/3 systems. The paper describes vulnerabilities discovered in the SAP RFC interface implementation and library, as well as some attacks that can be performed over SAP systems. The tool,...
DEBIAN-CVE-2006-5864
Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the 1 DocumentMedia, 2...
