CVE-2013-2782

CVE-2013-2782 affects Schneider Electric Trio J-Series License Free Ethernet Radio firmware 3.6.0–3.6.3, where the AES encryption key is reused across different customer installations due to improper key generation. This weakens cryptographic protection and could allow remote attackers to access ...

Radio Thermostat Of America, Inc Lack Of Authentication

Trustwave SpiderLabs Security Advisory TWSL2013-022: No Authentication Vulnerability in Radio Thermostat of America, Inc Published: 08/01/13 Version: 1.0 Vendor: Radio Thermostat of America, Inc Product: CT80, CT50 Version affected: v1.4.64 and earlier Product description: The Radio Thermostat CT...

65 Sites Compromised in ZeroAccess Trojan Attacks

As many as 65 websites have been compromised in an attack that has snared another Washington, D.C.-area media website as well as a number of travel and leisure sites. While the sites aren’t topically related, they’re all hosting advertisements injected with malicious code hosted on...

Schneider Electric Trio J-Series Radio Encryption

OVERVIEW Schneider Electric has self-reported a hard-coded encryption key vulnerability in Schneider Electric’s J-Series Radios. Schneider Electric has produced a patch that mitigates this vulnerability and has published a customer security notification.Schneider Electric Cybersecurity...

Thousands of DHS Personnel Notified of Data Breach

The Department of Homeland Security this week began notifying up to tens of thousands of employees, contractors and others with a DHS security clearance that their personal data may be at risk. The notifications began on Monday, according to an online statement, after officials learned of a...

Hijacking plane's navigation system with an Android app, Researcher claimed

It is a terrifying prospect, a hack that allows an attacker to take control of plane navigation and cockpit systems has been revealed at a security conference in Europe. This was demonstrated by Hugo Teso, a researcher at security consultancy N.Runs in Germany who's also a commercial airline pilo...

Radio CMS 2.2 SQL Injection Vulnerability

Radio CMS version 2.2 suffers from a remote SQL injection vulnerability. + + Title: RadioCMS 2.2 + Author: RoosterXEKA + Greetz to: Isis,luz3r,slider + Contact: forum.xeksec.com + -- Vuln Code -- ... if $GET'playlistid' $playlistidget = 'playlistid'; ... if $playlistid != "" $query = "SELECT FROM...

Fedora Update for icecast FEDORA-2012-16147

Check for the Version of icecast OpenVAS Vulnerability Test Fedora Update for icecast FEDORA-2012-16147 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

[SECURITY] Fedora 18 Update: icecast-2.3.3-1.fc18

Icecast is a streaming media server which currently supports Ogg Vorbis and MP3 audio streams. It can be used to create an Internet radio station or a privately running jukebox and many things in between. It is very versatile in that new formats can be added relatively easily and supports open...

Intercepting Traffic of widerange frequencies with HackRF Radio

At the ToorCon hacker conference in San Diego Saturday, Ossmann and his research partner Jared Boone plan to unveil a beta version of the HackRF Jawbreaker, the latest model of the wireless Swiss-army knife tools known as software-defined radios. It grants any computer programmer the ability to...

HackRF Jawbreaker Could Bring Low-Cost Wireless Hacking to the Masses

Generations of hobbyists hardware hackers have spent countless hours messing with piles of radio gear, happily tinkering away in garages and basements looking for new ways to connect to people around the world. Now, a researcher has put together a new radio called HackRF that is a kind of...

Prime RADIO SQL Injection

Exploit Title: Prime RADIO SQLi Vulnerability Date: 09/02/2012 Author: Persia Security Group - Prince & mafia1990 Vendor Homepage: http://www.primeradio.com.au/ Version: All Version Google Dork: intext:prime radio site:.au Tested on: CentOS 5.7,Ubuntu,Debian...

Prime RADIO SQL Injection Vulnerability

Exploit for php platform in category web applications ============================================ Prime RADIO SQLi Vulnerability ============================================ Exploit Title: Prime RADIO SQLi Vulnerability Author: Persia Security Group - Prince & mafia1990 Date: 09/02/2012 Vendor o...

UBUNTU-CVE-2012-4297

Buffer overflow in the dissectgsmrlcmacdownlink function in epan/dissectors/packet-gsmrlcmac.c in the GSM RLC MAC dissector in Wireshark 1.6.x before 1.6.10 and 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a malformed packet...

Slacker Radio Application Information Disclosure

Binary data 6596.prm...

CVE-2012-1350

Cisco IOS 12.3 and 12.4 on Aironet access points allows remote attackers to cause a denial of service radio-interface input-queue hang via IAPP 0x3281 packets, aka Bug ID CSCtc12426...

e107 Radio Plan 2.06 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

e107 Plugin - Radio Plan Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

News Roundup: What The Experts Are Saying About The Flame Worm

UPDATE: Are the winds of cyber war blowing, or is the newly discovered Flame worm just a tempest in a teapot? Just days after it was disclosed to the public, the Flame worm is fanning the flames of controversy within the security world. Threatpost takes a look at what people are saying. Calling...

DEBIAN-CVE-2012-0043

Buffer overflow in the reassemblemessage function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.4.x before 1.4.11 and 1.6.x before 1.6.5 allows remote attackers to cause a denial of service application crash or possibly execute arbitrary code via a series of fragmented RLC...