Unfixed XSS vulnerability at guides.lib.uiowa.edu

Security researcher Sony, has submitted on 06/02/2012 a cross-site-scripting XSS vulnerability affecting guides.lib.uiowa.edu, which at the time of submission ranked 11674 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at libguides.uwlax.edu

Security researcher Sony, has submitted on 06/02/2012 a cross-site-scripting XSS vulnerability affecting libguides.uwlax.edu, which at the time of submission ranked 114707 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at libguides.metro.org

Security researcher Sony, has submitted on 06/02/2012 a cross-site-scripting XSS vulnerability affecting libguides.metro.org, which at the time of submission ranked 435245 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at www.i-am-bored.com

Security researcher Sony, has submitted on 06/01/2012 a cross-site-scripting XSS vulnerability affecting www.i-am-bored.com, which at the time of submission ranked 6673 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

Sony VAIO Wireless Manager ActiveX控件'WifiMan.dll'缓冲区溢出漏洞

Bugtraq ID: 53735 CVE ID：CVE-2012-0985 Sony VAIO Wireless Manager是索尼笔记本上安装的无线管理程序。 Sony VAIO Wireless Manager ActiveX控件存在缓冲区溢出，攻击者可以利用漏洞以应用程序上下文执行任意代码。 漏洞是由于WifiMan.dll库中的SetTmpProfileOption和ConnectToNetwork方法没有正确检查字符串参数长度引起的，攻击者可以构建恶意WEB页，诱使用户解析来触发。 0 Sony VAIO Wireless Manager 4.0.0.0 厂商解决方案 So...

Sony VAIO Wireless Manager ActiveX security vulnerabilities

Few different buffer overflows...

Sony VAIO Wireless Manager 4.0.0.0 - Buffer Overflow

Sony VAIO Wireless Manager 4.0.0.0 - Buffer Overflow Advisory ID: HTB23063 Product: Wireless Manager Sony VAIO Vendor: Sony Computers Vulnerable Versions: 4.0.0.0 and probably prior Tested Version: 4.0.0.0 Vendor Notification: 7 December 2011 Vendor Patch: 20 January 2012 Public Disclosure: 30 Ma...

2 Buffer Overflows in Wireless Manager Sony VAIO

Advisory ID: HTB23063 Product: Wireless Manager Sony VAIO Vendor: Sony Computers Vulnerable Versions: 4.0.0.0 and probably prior Tested Version: 4.0.0.0 Vendor Notification: 7 December 2011 Vendor Patch: 20 January 2012 Public Disclosure: 30 May 2012 Vulnerability Type: Buffer Overflow CVE...

Sony VAIO Wireless Manager 4.0.0.0 - Buffer Overflow

Advisory ID: HTB23063 Product: Wireless Manager Sony VAIO Vendor: Sony Computers Vulnerable Versions: 4.0.0.0 and probably prior Tested Version: 4.0.0.0 Vendor Notification: 7 December 2011 Vendor Patch: 20 January 2012 Public Disclosure: 30 May 2012 Vulnerability Type: Buffer Overflow CVE...

Sony VAIO Wireless Manager 4.0.0.0 Buffer Overflows

Exploit for hardware platform in category dos / poc Product: Wireless Manager Sony VAIO Vendor: Sony Computers Vulnerable Versions: 4.0.0.0 and probably prior Tested Version: 4.0.0.0 Vendor Notification: 7 December 2011 Vendor Patch: 20 January 2012 Public Disclosure: 30 May 2012 Vulnerability...

Wireless Manager Sony VAIO 4.0.0.0 Buffer Overflows

Advisory ID: HTB23063 Product: Wireless Manager Sony VAIO Vendor: Sony Computers Vulnerable Versions: 4.0.0.0 and probably prior Tested Version: 4.0.0.0 Vendor Notification: 7 December 2011 Vendor Patch: 20 January 2012 Public Disclosure: 30 May 2012 Vulnerability Type: Buffer Overflow CVE...

Slideshow: Fair Game: 12 Months, 10 Eye-Popping Hacks Targeting Some Of the Globe's Biggest Gaming Firms

VIEW SLIDESHOW Fair Game: 12 Months, 10 Eye-Popping Hacks Targeting Some Of the Globe’s Biggest Gaming Firms The past year has seen a sharp increase in attacks aimed at online gaming platforms and game makers. In fact, there was a point last summer, in the wake of Sony’s Playstation Network outag...

April 2011 – Sony PSN

Executives at Sony probably didn’t anticipate that a lawsuit against technology whiz kid George Hotz would end up backfiring as spectacularly as it did. The missing ingredient? The hacktivist group Anonymous, which adopted Hotz as a cause célèbre and retaliated with an attack on Sony’s Play Stati...

Sony Engineers Met With PS3 Hacker - Geohot

Sony Engineers Met With PS3 Hacker - Geohot George Hotz aka "Geohot" first made a name for himself in the PS scene when he not only managed to hack a PlayStation 3, but then proceeded to publish a guide that shared with others how to do it as well. In an effort to improve their security measures,...

Car Maker Nissan Admits To Virus Infection, Loss of Employee Accounts

Car maker Nissan became the latest high profile firm to acknowledge being hacked. The company issued a statement last week saying that it detected a virus infection on its network that resulted int he theft of employee login credentials from a company data store. The intrusion was detected on Apr...

Half Of Massachusetts Residents Victims Of Data Breach In Last Four Years

Data from the Massachusetts Office of Consumer Affairs & Business Regulation OCABR shows that 3.2 million residents – almost half the population of the state- have been the victim of a data breach in the last four years. The report finds that 1,833 breaches have been reported to the State by a wi...

HelpDen Cross Site Scripting

Exploit Title: HelpDen Cross Site Scripting Date: 15.04.2012 Author: Sony Software Link: http://www.helpden.com/ Google Dorks:inurl:.helpden.com/leavemessage.php?code Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

CVE-2012-2210

The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service configuration outage or device crash via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116...

Design/Logic Flaw

The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service configuration outage or device crash via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116...

CVE-2012-2210

The CVE-2012-2210 entry describes a remote Denial of Service against Sony Bravia TV model KDL-32CX525 via a flood of TCP SYN packets (e.g., using hping). The root cause is a SYN flood condition that allows an attacker to cause configuration outage or device crash; exploited remotely without authe...