stoneware webnetwork6 - Multiple Vulnerabilities

stoneware webnetwork6 - Multiple Vulnerabilities Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork...

stoneware webnetwork6 - Multiple Vulnerabilities

Stoneware WebNetwork6 Vulnerability Assessment CVE-2012-0285 – XSS CVE-2012-0286 - CSRF Conducted by: Leland Public Schools Stoneware Customer Jacob Holcomb Network Engineer for LPS Conducted for: Leland Public Schools Purchaser of WebNetwork product. Test was to assure cloud security Stoneware...

Mozilla Fixes Firefox 9 Crash Issue With Update

Mozilla followed up its Firefox 9 release earlier this week with an update aimed at swatting a bug causing browsers to crash. The fix was issued Wednesday with Firefox 9.0.1, and addresses the issue for users across Mac, Windows and Linux, though Mac users were reportedly affected the most. The...

FTC Criticizes ICANN Plan to Expand Domain Names

The Federal Trade Commission FTC is taking aim at a plan by the Internet Corporation for Assigned Names and Numbers ICANN to increase the number of domains on the Web. On Dec. 16, the FTC sent a letter to ICANN claiming that expanding the number of generic top-level domains gTLDs would open users...

Hackers Install Siri on iPhone 4

Over the weekend, a pair of hackers successfully installed Apple’s previously iPhone 4S-exclusive voice assistant service, Siri, onto an iPhone 4 and fourth-generation iPod Touch. The hack works on jailbroken iOS devices. Steve Troughton-Smith and Grant Paul announced the hack via Twitter late...

Researchers To Demonstrate Tor Network Hijack Method

Researchers at the Hackers To Hackers Conference in Brazil will detail a method of hijacking the TOR anonymity network, potentially putting its users at risk, while The Tor Project accuses one of the researchers of irresponsible disclosure. The presentation combines work done by Eric Filiol of th...

Social Media Use Tied to Increase in Malware Infections

With the use of social media platforms such as Twitter, Facebook and Google+ becoming more and more prevalent in the enterprise, companies are having to come to grips with additional security concerns that they bring with them. But, according to the results of a new survey of IT and security...

Biggest ISP in Kuwait Qualitynet Side-Server Database Leaked

Biggest ISP in Kuwait Qualitynet Side-Server Database Leaked AnonKuwait claim to hack the Biggest ISP in Kuwait "Qualitynet " and leaked 14MB of data in sql format server-side database. Penetration of one of Qualitynet servers working for Ministry of Education having a database containing high...

8 China Website Government Defaced By Bekasi0d0nk (Indonesian Hacker)

8 China Website Government Defaced By Bekasi0d0nk Indonesian Hacker Bekasi0d0nk an Indonesian Hacker deface and Hack 8 China Government websites. Hacked sites list : https://www.bzcg.gov.cn/66.html https://www.ahgjj.gov.cn/66.html https://sggl.gov.cn/66.html https://www.bzcg.gov.cn/66.html...

Android Passwords are stored in plain text on Disk

Android Passwords are stored in plain text on Disk A Android user complain that , All passwords are stored in plane text on Disk via a message on discussion board of Android. He said "The password for email accounts is stored into the SQLite DB which in turn stores it on the phone's file system i...

Stevens Institute of Technology database leaked by p0keu for #Antisec

Stevens Institute of Technology database leaked byp0keu for Antisec Stevens Institute of Technology database leaked by Anonymous - p0keu for Antisec on pastebin, the leaks are a MySQL database and a cms database, usernames/passwords, this leak comes from the same source as the 4 random leaks and...

U.S. Playing Catch Up in Security for Contactless Devices

AMHERST, MASS.– The U.S. may boast the world’s largest economy, richest technology companies and a lion’s share of its top research universities. But when it comes to the subject of security of RFID Radio Frequency ID and other contactless technologies, America is still playing catch-up. The U.S....

Experts Converge at RFIDsec to Discuss NFC Security Implications

RFID security problems have been biting at the ankles of users and companies that deploy the technology for several years now, but they’ve been mostly on the fringes of mainstream security concerns. But now, as the technology becomes more widespread and pervasive, that is beginning to change...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection

source: https://www.securityfocus.com/bid/48233/info WebFileExplorer is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

PlayStation Network Full Restoration by End of Week, Except in Japan

More than a month after suffering an “external intrusion” that shut down the PlayStation Network PSN, Sony announced today that it will fully restore PSN services by the end of the week in most countries. However, PSN users in Sony’s native Japan will have to wait, as the Japanese government awai...

Japan Keeps PlayStation Network Dark, Citing Security Concerns

Sony’s PlayStation Network began a gradual restoration process on Saturday following a hack that brought about nearly a month of downtime. But in Sony’s home country of Japan, an official says the government will keep the network dark until it is convinced that the company has taken adequate step...

Dozens of SCADA Exploits, Proof-of-concept Code Published

Exploits for scores of vulnerabilities in supervisory control and data acquisition software SCADA were made public on Monday, according to a report by The Register. 34 holes were published on Seclists.org’s Bugtraq mailing list for programs by Siemens, Iconics, 7-Technologies, Datac and Control...

Nokia under scanner of Indian Intelligence Agency for its Push Email service and SMS !

Department of Telecommunication DOT has been asked by The Intelligence Bureau IB0 to stop the messaging services of Nokia in India until they can be monitored. Once again security concerns have clouded Intelligence department's mind and the incident is not first of its kind. Earlier too similar...

Panda predicts malware creation and cyberwars will be key features of 2011 security landscape !

In its 2011 IT security predictions, Panda Security is predicting that a further rising tide of malware, along with an online cyberwar plus cyberprotests, will be the order of the day as the year progresses. According to Luis Corrons, Panda's technical director, during 2010 we have seen a...