Japan Keeps PlayStation Network Dark, Citing Security Concerns

Sony’s PlayStation Network began a gradual restoration process on Saturday following a hack that brought about nearly a month of downtime. But in Sony’s home country of Japan, an official says the government will keep the network dark until it is convinced that the company has taken adequate step...

Cyber Attacks Hit Nearly 40 South Korean websites !

According to a new report, 40 South Korean websites came under a cyber crime attack by a computer virus, including the presidential Blue House, South Korea's biggest bank , a major online auction house, the Foreign Ministry, the two largest search engines in the country and Korean military websit...

India Orders Security Certification for Government Websites After CBI Hack

India has mandated that all government ministries and departments secure their websites with proper certification. This directive follows the hacking of the Central Bureau of Investigation CBI website by a group calling themselves the "Pakistani Cyber Army." The National Informatics Centre has be...

IBM Rational Quality Manager and Test Lab Manager Policy Bypass

IBM Rational Quality Manager and Test Lab Manager enables quality assurance teams to track all aspects of the quality assurance effort. The central artifact in the tool is a dynamic test plan that contains all information pertaining to the quality assurance effort, such as goals, schedules,...

Bonsai Information Security - OS Command Injection in Cacti <= 0.8.7e

OS Command Injection in Cacti ============================= http://www.bonsai-sec.com/en/research/vulnerability.php ============================= 1. Advisory Information Advisory ID: BONSAI-2010-0105 Date published: 2010-04-21 Vendors contacted: Cacti Release mode: Coordinated release 2...

Affinity Health Warns 409K Customers of Breach

Affinity Health Plan, a New York managed care service, is notifying more than 400,000 current and former customers employees that their personal data might have been leaked through the loss of an unerased digital copier hard drive. Read the full article. Dark Reading...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

CVE-2010-0863

CVE-2010-0863 concerns an unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component of Oracle Industry Product Suite 12.2. The available documents identify the affected product/component and indicate the issue could affect integrity via unknown vectors related to Online Hel...

CVE-2010-0863

Unspecified vulnerability in the Retail - Oracle Retail Plan In-Season component in Oracle Industry Product Suite 12.2 allows remote attackers to affect integrity via unknown vectors related to Online Help...

RSA 2010: Howard Schmidt Lays Out U.S. Security

The nation’s new cybersecurity czar in a Town Hall meeting session here today mapped out his top priorities in the post and provided a glimpse at how the Obama administration may handle security issues with other countries. National cybersecurity coordinator Howard Schmidt also announced that the...

Team SHATTER Security Advisory: Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Team SHATTER Security Advisory Buffer Overflow in Resource Manager of Oracle Database - Plan name parameter August 27, 2009 Risk Level: Medium Affected versions: Oracle Database Server version 9iR1 and 9iR2 Remote exploitable: Yes Authentication to...

Rich Mogull on Mac security, the Cybersecurity Czar and Project Quant

Dennis Fisher talks with Securosis founder Rich Mogull about Mac security, Obama’s cybersecurity plan and his Project Quantpatch-management work with Microsoft. Download Subscribe to the Digital Underground podcast on Podcast audio courtesy of sykboy65...

CVE-2008-3946

The finger client in HP TCP/IP Services for OpenVMS 5.x allows local users to read arbitrary files via a link corresponding to a 1 .plan or 2 .project file...

Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit

No description provided by source. !-- Sejoong Namo ActiveSquare 6 NamoInstaller.dll install Method Exploit Written by http://www.Plan-S.cn Tested on Windows XP SP2fully patched Korean, IE6, NamoInstaller.dll version 3,0,0,1 -- html head html head titleNamo Web Editor NamoInstaller.dll install...

CVE-2002-2274

Affected software: akfingerd 0.5 (and earlier per linked records). Vulnerable component: the .plan file handling in akfingerd, exploited via a symlink attack that lets local users read arbitrary files as the akfingerd user (nobody). Impact: local read access to arbitrary files; CVSS notes show lo...

CVE-2002-2274

akfingerd 0.5 allows local users to read arbitrary files as the akfingerd user nobody via a symlink attack on the .plan file...

Local File Include Vulnerabilities in YaBB <= 2.1(all version)

Local File Include Vulnerabilities Problem: Local File Include Vulnerabilities Product: YaBB = 2.1all version Web page:http://www.yabbforum.com/ Credit:Maciej krasza Kukla @mail:[email protected] homepage:www.krasza.int.pl 1.Description "YaBB is a leading free forum software package that rivals an...

CVE-2007-1189

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...

CVE-2007-1189

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...

Integer overflow

Integer overflow in the envwrite function in the Alcatel-Lucent Bell Labs Plan 9 kernel allows local users to overwrite certain memory addresses with kernel memory via a large n argument, as demonstrated by 1 modifying the iseve function to gain privileges and 2 making the devpermcheck function...