Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords Apple supplier Foxconn has reportedly been hacked, exposing the usernames and passwords of the company's clients and employees. Hacker group SwaggSec just released a dump of Foxconn internal information, including a...

CVE-2012-0804

Heap-based buffer overflow in the proxyconnect function in src/client.c in CVS 1.11 and 1.12 allows remote HTTP proxy servers to cause a denial of service crash and possibly execute arbitrary code via a crafted HTTP response...

Apache HTTP Server mod_proxy Reverse Proxy HTTP 0.9 Information Disclosure

The version of Apache HTTP Server running on the remote host has an information disclosure vulnerability. When configured as a reverse proxy, improper use of the RewriteRule and ProxyPassMatch directives could cause the web server to proxy requests to arbitrary hosts. This could allow a remote...

Sun Microsystems (Print) - Cross Site Scripting Vulnerabilities

Sun Microsystems Print - Cross Site Scripting Vulnerabilities Today Ucha Gobejishvili longrifle0x a Pentester from Georgia reported 3 More important Cross Site Scripting Vulnerabilities in Sun Microsystem's and Java Printer Webpages. Java's Vulnerable Link : Click Here Sun's Vulnerable Link 1 :...

Loic JavaScript Distributed Denial of Service

A denial of service vulnerability has been reported in all web servers. The vulnerability is due to the server's inability to handle multiple incoming requests within a short period of time. Remote attackers may exploit this issue by rapidly sending a large number of HTTP requests to the server...

Sphinx Mobile Web Server <= 3.1.2.47 Multiple XSS Vulnerabilities - Active Check

Sphinx Mobile Web Server is prone to persistent cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Attackers Moving Zeus Servers to Former Soviet Union TLD

The groups of attackers that employ the Zeus toolkit for their scams and malware campaigns have long used sites in the .ru Russian TLD as homes for their botnet controllers. Security researchers and law enforcement agencies have had a difficult time making headway in getting these domains taken...

CVE-2011-4354

crypto/bn/bnnist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving ECDH or ECDHE cipher suites, uses an incorrect modular reduction algorithm in its implementation of the P-256 and P-384 NIST elliptic curves, which allows...

broadcast-dhcp6-discover NSE Script

Sends a DHCPv6 request Solicit to the DHCPv6 multicast address, parses the response, then extracts and prints the address along with any options returned by the server. The script requires Nmap to be run in privileged mode as it binds the socket to a privileged port udp/546. See also:...

Fedora Update for rubygem-rack FEDORA-2012-0233

Check for the Version of rubygem-rack OpenVAS Vulnerability Test Fedora Update for rubygem-rack FEDORA-2012-0233 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Multiple Cross Site Scripting ( #XSS ) Vulnerabilities in Forbes

Multiple Cross Site Scripting XSS Vulnerabilities in Forbes Ucha Gobejishvili longrifle0x , A Georgian Security Researcher Discover two Cross Site Scripting XSS Vulnerabilities on the Official website of Forbes, an American publishing and media company. Cross-Site Scripting occurs when an attacke...

SOPA in US and Censorship in India: A cocktail to destroy Internet Freedom !

SOPA in US and Censorship in India : A cocktail to destroy Internet Freedom ! As US senators mull over the SOPAStopping Online Piracy Act and PIPAProtecting Intellectual Property Act bills, the world stands witness to a historic moment. Almost all big IT companies like Google, Wikipedia, Facebook...

[SECURITY] Fedora 15 Update: rubygem-rack-1.1.0-4.fc15

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

[SECURITY] Fedora 16 Update: rubygem-rack-1.3.0-2.fc16

Rack provides a common API for connecting web frameworks, web servers and layers of software in between...

Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile

The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...

White House Wades into Piracy Legislation Debate

Officials with the Obama administration said the White House will not support anti-piracy bills that endanger cybersecurity or freedom of expression on the Web. In a post Saturday on the White House blog, three top technology officials for the administration – Victoria Espinel, intellectual...

WebDAV PHP Upload

This module exploits WebDAV which also has PHP enabled, such as found on XAMPP servers. It can use do by using any supplied credentials to upload via WebDAV, a PHP payload and then execute it. Module Options msf use exploit/multi/http/webdav/uploadphp msf undefineduploadphp show actions...

XAMPP - WebDAV PHP Upload (Metasploit)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'XAMPP WebDAV...

Mandriva Update for apache MDVSA-2012:003 (apache)

Check for the Version of apache OpenVAS Vulnerability Test Mandriva Update for apache MDVSA-2012:003 apache Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

Debian DSA-2380-1 : foomatic-filters - shell command injection

It was discovered that the foomatic-filters, a support package for setting up printers, allowed authenticated users to submit crafted print jobs which would execute shell commands on the print servers. CVE-2011-2697 was assigned to the vulnerability in the Perl implementation included in lenny, a...