Huawei Officials Looking Into Claims of Flaws in Some Routers

Officials at Huawei Technologies say that they’re looking into claims by security researchers made at DEF CON last week that there are a handful of serious security vulnerabilities in some of the company’s routers. Saying it employs “rigorous security strategies and policies” Huawei is trying to...

Stable Channel Release

The Chrome team is excited to announce the release of Chrome 21 to the Stable Channel. 21.0.1180.57for Mac and Linux. 21.0.1180.60 for Windowsand Chrome Frame. Chrome 21 contains a number of new features including a new API forhigh-quality video and audio communication.More detailed updates are...

FDA: Software Failures Responsible for 24% Of All Medical Device Recalls

Software failures were behind 24 percent of all the medical device recalls in 2011, according to data from the U.S. Food and Drug Administration, which said it is gearing up its labs to spend more time analyzing the quality and security of software-based medical instruments and equipment. The FDA...

[SECURITY] Fedora 17 Update: mumble-1.2.3-7.fc17.1

Mumble provides low-latency, high-quality voice communication for gamers. It includes game linking, so voice from other players comes from the direction of their characters, and has echo cancellation so that the sound from your loudspeakers won't be audible to other players...

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

Total Quality Machines (productdetail.php) SQL Injection Vulnerabilities

Title : Total Quality Machines productdetail.php SQL Injection Vulnerabilities Discovered By: CrAzY CrAcKeR Home : Null Email : [email protected] date : 14/4/2012 d0rk:- "Total Quality Machines" +-+-+-+-+-+-+-+-+-+-+ --+CrAzY CrAcKeR+-- +-+-+-+-+-+-+-+-+-+-+ Example:- -...

Google Warns 20,000 Webmasters About 'Weird Redirects'

The head of Google’s Web spam team says that the company has pushed warning messages to some 20,000 Web site owners that their sites may be compromised and are performing “weird” redirections, possibly to malicious Web sites. Matt Cutts used a Twitter message on Tuesday to announce that the compa...

Total Quality Machines SQL Injection

Title : Total Quality Machines productdetail.php SQL Injection Vulnerabilities Discovered By: CrAzY CrAcKeR Home : Null Email : [email protected] date : 14/4/2012 d0rk:- "Total Quality Machines" +-+-+-+-+-+-+-+-+-+-+ --+CrAzY CrAcKeR+-- +-+-+-+-+-+-+-+-+-+-+ Example:- -...

TestLink 1.9.3 SQL Injection

------------------ Information ------------------ Name: SQL Injection Vulnerabilities in TestLink Software tested: TL v1.8.5b & checked in v1.9.3 prior version may be affected Vendor Homepage: http://www.teamst.org Vendor Notification: 27 January 2012 Vendor Patch: 4 February 2012 Public...

[SECURITY] Fedora 15 Update: libvpx-1.0.0-1.fc15

libvpx provides the VP8 SDK, which allows you to integrate your applications with the VP8 video codec, a high quality, royalty free, open source codec deployed on millions of computers and devices worldwide...

Skype for Windows 5.x 未明安全漏洞

Skype是一款流行的P2P VoIP软件，可提供高质量的语音通讯服务 Skype存在一个未明错误，目前没有详细漏洞细节提供 0 Skype for Windows 5.x 厂商解决方案 Skype for Windows 5.8.0.154已经修复此漏洞，建议用户下载使用： http://www.skype.com/...

[SECURITY] Fedora 16 Update: gstreamer-plugins-bad-free-0.10.22-2.fc16.2

GStreamer is a streaming media framework, based on graphs of elements which operate on media data. This package contains plug-ins that aren't tested well enough, or the code is not of good enough quality...

SA-CONTRIB-2012-010 - stickynote - Multiple vulnerabilities

CVE: CVE-2012-1636 This module enables you to add textual notes in a block to perform quality assurance of your site. Previously it did not sufficiently protect against Cross Site Scripting XSS or Cross Site Request Forgery CSRF. This vulnerability is mitigated by the fact that an attacker must...

tomcat: Multiple weaknesses in HTTP DIGEST authentication

The HTTP Digest Access Authentication implementation in Apache Tomcat 5.5.x before 5.5.34, 6.x before 6.0.33, and 7.x before 7.0.12 does not check qop values, which might allow remote attackers to bypass intended integrity-protection requirements via a qop=auth value, a different vulnerability th...

ExploitHub Offering Bounties – And Residuals – for Exploits

NSS Labs’ announced today that their penetration-testing site, Exploithub, will be offering bounties to researchers for developing exploits for12 high-value vulnerabilities. Exploithub is putting up $4,400 for working exploits against what the company describes as a “dirty dozen” of client-side...

(0Day) Witness Systems eQuality Unify Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Witness Systems eQuality Suite. This application is bundled with Nortel Contact Recording and Quality Monitoring Suite. Authentication is not required to exploit this vulnerability. The flaw exists...

MS11-064: Vulnerabilities in TCP/IP Stack Could Allow Denial of Service (2563894) (uncredentialed check)

The TCP/IP stack in use on the remote Windows host is potentially affected by a denial of service vulnerability. By sending a request with a specially crafted URL, an unauthenticated, remote attacker may be able to cause the affected host to stop responding and automatically reboot if it is servi...

PHPWIND最新版本SQL注入漏洞

简要描述： phpwind在实现占位符SQL过程中，代码质量出现了一个小黑点。 详细说明： 在 phpwind/lib/utility/querybuilder.class.php parseStatement函数内 在/phpwind/actions/ajax/leaveword.php 的一个引用处 Line 78行 $db-updatepwQuery::buildClause"UPDATE :pwtable SET leaveword=" . S::sqlEscape$atccontent . " $sqladd WHERE pid=:pid AND tid=:tid",...

Net Quality Web Design SQL Injection

Exploit Title : Net Quality Web Design Sql injection + Date : 11 July 2011 + Author : Anas + Category : WebApps + d0rk : "Site by Net Quality Web Design Nottingham inurl:prod.php?prod=" + Facebook : http://www.facebook.com/profile.php?id=100000442288288 + Tested on : Windows Xp SP3...

Fingerprinting the author of the ZeuS Botnet !

The source code of the ZeuS Botnet is now available for Download. Derek Jones the author this article imagine there are a few organizations who would like to talk to the authors of this code. All developers have coding habits, that is they usually have a particular way of writing each coding...