6659 matches found
Government, Private Sector Must Have a 'Need to Share' Mindset on Threats
SAN FRANCISCO–The security of both government and private enterprise systems going forward relies on the ability of those two parties to share threat, attack and compromise information on a real-time basis, former Department of Homeland Security secretary Tom Ridge said. Without that cooperation,...
Threat Outbreak Alert: Fake Image Sharing Email Messages on April 8, 2014
Medium Alert ID: 33700 First Published: 2014 April 8 18:55 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain an image for the recipient. The text in the email message attempts to convince the recipient to open the attachme...
Mylar - Platform for building secure web applications
Web applications rely on servers to store and process confidential information. However, anyone who gains access to the server e.g., an attacker, a curious administrator, or a government can obtain all of the data stored there. Mylar protects data confidentiality even when an attacker gets full...
Why Full Disclosure Still Matters
When the venerable Full Disclosure security mailing list shut down abruptly last month, many in the security community were surprised. But a lot of people, even those who had been members of the list for a long time, greeted the news with a shrug. Twitter, blogs and other outlets had obviated the...
nbtscan - NETBIOS nameserver scanner
This is a command-line tool that scans for open NETBIOS nameservers on a local or remote TCP/IP network, and this is a first step in finding of open shares. It is based on the functionality of the standard Windows tool nbtstat, but it operates on a range of addresses instead of just one. I wrote...
ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities
Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...
PhotoWIFI Lite 1.0 iOS - Multiple Vulnerabilities
Document Title: =============== PhotoWIFI Lite v1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1239 Release Date: ============= 2014-03-27 Vulnerability Laboratory ID VL-ID: ==================================== 123...
Threat Outbreak Alert: Fake Picture Sharing Email Messages on March 27, 2014
Medium Alert ID: 33536 First Published: 2014 March 27 15:28 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient t...
New Platform Protects Data From Arbitrary Server Compromises
Researchers are in the midst of rolling out a secure new platform for building web applications that can protect confidential data from being stolen in the event attackers gain full access to servers. The platform, Mylar, is the result of a project spearheaded by students at the Massachusetts...
ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities
ePhone Disk 1.0.2 iOS - Multiple Vulnerabilities Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID...
ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities
Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...
ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities
Document Title: =============== ePhone Disk v1.0.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1230 Release Date: ============= 2014-03-25 Vulnerability Laboratory ID VL-ID: ==================================== 1230...
French intelligence agency gets complete access to Orange Telecom Data
Another leak from Edward Snowden files, but this time not about the NSA, rather the documents revealed that France's central intelligence agency, the DGSE has complete and unconditional access to all of telecom giant Orange’s data, not just metadata. Yes! It is the same Orange company who...
[OpenedFilesView] View opened/locked files in your system (sharing violation issues)
OpenedFilesView displays the list of all opened files on your system. For each opened file, additional information is displayed: handle value, read/write/delete access, file position, the process that opened the file, and more... Optionally, you can also close one or more opened files, or close t...
Threat Outbreak Alert: Fake Photo Sharing Email Messages on March 18, 2014
Medium Alert ID: 33399 First Published: 2014 March 18 19:19 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a picture for the recipient. The text in the email message attempts to convince the recipient to open the...
Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities
Document Title: =============== Wireless Drive v1.1.0 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1229 Release Date: ============= 2014-03-18 Vulnerability Laboratory ID VL-ID: ====================================...
BarracudaDrive多个跨站脚本漏洞
BarracudaDrive运用了网页界面的模式,让我们能轻松的与朋友分享文件。 1通过'/Forum/manage/ForumManager.lsp?nForumId=1'中'sForumName', 'sDescription'参数传递的输入在返回用户前没有正确验证，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。 2通过'/Forum/manage/hangman.lsp?nId=1'中'sHint', 'sWord'参数传递的输入在返回用户前没有正确验证，攻击者可以利用漏洞在受影响站点上下文的用户浏览器会话中执行任意HTML和脚本代码。...
Cross site request forgery (csrf)
The RANDbytes function in libssh before 0.6.3, when forking is enabled, does not properly reset the state of the OpenSSL pseudo-random number generator PRNG, which causes the state to be shared between children processes and allows local users to obtain sensitive information by leveraging a pid...
Threat Outbreak Alert: Fake Personal Photo Sharing Email Messages on March 6, 2014
Medium Alert ID: 33226 First Published: 2014 March 6 15:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a personal photo for the recipient. The text in the email message attempts to convince the recipient to open the...
Bluetooth Photo Share Pro 2.0 Local File Inclusion / File Upload
Document Title: =============== Bluetooth Photo Share Pro v2.0 iOS - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1218 Release Date: ============= 2014-02-27 Vulnerability Laboratory ID VL-ID:...