Ubuntu 12.04 LTS : horizon vulnerability (USN-1565-1)

Thomas Biege discovered that the Horizon authentication mechanism did not validate the next parameter. An attacker could use this to construct a link to legitimate OpenStack web dashboard that redirected the user to a malicious website after authentication. Note that Tenable Network Security has...

FTC Finalizes Facebook Settlement over Privacy

The U.S. Federal Trade Commission today announced it had finalized its settlement with Facebook, which is now subject to biennial privacy audits for the next 20 years and requires its nearly 1 billion users opt in to any future privacy policy changes. The settlement announcement follows news that...

CentOS Update for postfix CESA-2011:0843 centos5 x86_64

Check for the Version of postfix OpenVAS Vulnerability Test CentOS Update for postfix CESA-2011:0843 centos5 x8664 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

AST-2012-006: Remote Crash Vulnerability in SIP Channel Driver

Asterisk Project Security Advisory - AST-2012-006 Product Asterisk Summary Remote Crash Vulnerability in SIP Channel Driver Nature of Advisory Remote Crash Susceptibility Remote Authenticated Sessions Severity Moderate Exploits Known No Reported On April 16, 2012 Reported By Thomas Arimont Posted...

CRUNCH TV SHOW - Live Stream & Security Videos

Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...

CRUNCH TV SHOW - Live Stream & Security Videos

Document Title: =============== CRUNCH TV SHOW - Live Stream & Security Videos References: =========== Download: http://www.vulnerability-lab.com/resources/videos/508.mov View: http://www.youtube.com/watch?v=G9ECcxvB0dQ Release Date: ============= 2012-04-10 Vulnerability Laboratory ID VL-ID:...

THOMAS (The Library Of Congress) Cross Site Scripting

Exploit Title: THOMAS The Library of CongressCross Site Scripting Google Dork: - Date: 26/3/2012 1:35 AM Malaysia Author: Ryuzaki Lawlet Blog: http://justryuz.blogspot.com Tested on: Linux OSHIRIX CVE : XSS Vulnerable Vulnerable : http://thomas.loc.gov/cgi-bin/query/z?c112= Live Preview Sites:...

Pfile 1.02 Cross Site Scripting / SQL Injection

=============================== pfile1.02 Mullti Vulnerability =============================== Vendor: http://www.powie.de/wp-content/uploads/pfile1.02.zip Date: 2012-1-27 Author : indoushka Exploit By indoushka ------------- dork : pFile 1.02 © Thomas Schmidt, 2003 -- Thomas Ehrhardt, 2002-2011 ...

Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities

Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We lo...

Aaron Barr's Strange Trip To (Occupy) Wall Street

It was an “Elvis Meets Nixon” kind of moment: former HBGary Federal CEO Aaron Barr sporting blue hair and posing in front of a van sporting the Wikileaks logo down at New York’s Zuccotti Park, home of the Occupy Wall Street protest. What was he doing there? It’s complicated. In an interview with...

Tecwyn Thomas SQL Injection

|=----=----=----=----=----=--------=| | | | /\ /\ \ /\ /\ \ | | //\ /\ \ \L\ \ \ \ \ Turki$ hackers | | \ \ \ \ \ '\ \ \ | | \ \ \ \ \ \L\ \ \ \ \ \ | | \ \ \ / \ \ \ | | // // //// | | | | | |=----=----=----=----=----=--------=|...

CentOS Update for postfix CESA-2011:0843 centos5 i386

Check for the Version of postfix OpenVAS Vulnerability Test CentOS Update for postfix CESA-2011:0843 centos5 i386 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

SA-CONTRIB-2011-033 - iWebkit - Cross Site Scripting

iWebKit is a web toolkit designed to create iPhone and iPod touch compatible websites and webapps. iWebkit does not properly sanitize menu links when displayed, allowing a malicious user to embed scripts in menu items, thus creating a cross site scripting XSS vulnerability that may lead to an...

postfix security update

CentOS Errata and Security Advisory CESA-2011:0843 Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CV...

Moderate: Red Hat Security Advisory: postfix security update

Updated postfix packages that fix one security issue are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...

Pentagon tightens computer security in wake of WikiLeaks breach !

Top defense and intelligence officials reiterated their commitment to information-sharing at a Senate hearing Thursday, even as they outlined new safeguards to prevent a repeat of the WikiLeaks breach that has led to the release of thousands of classified military reports and diplomatic cables. T...

Google Buys Security Firm Zynamics

Google has acquired a small German security start-up called Zynamics, which is well-known in the security industry for its reverse-engineering and analysis tools. Zynamics announced the deal on its corporate blog on Tuesday, saying little other than that the company had been acquired by Google. T...

Moderate: Red Hat Security Advisory: Red Hat Network Satellite Server security update

Updated packages that fix two security issues are now available for Red Hat Network Satellite Server 5.4. The Red Hat Security Response Team has rated this update as having moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

GLSA-201001-04 : VirtualBox: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201001-04 VirtualBox: Multiple vulnerabilities Thomas Biege of SUSE discovered multiple vulnerabilities: A shell metacharacter injection in popen CVE-2009-3692 and a possible buffer overflow in strncpy in the VBoxNetAdpCtl...

ZDI-10-013: Microsoft Internet Explorer Table Layout Reuse Remote Code Execution Vulnerability

ZDI-10-013: Microsoft Internet Explorer Table Layout Reuse Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-10-013 January 21, 2010 -- CVE ID: CVE-2010-0245 -- Affected Vendors: Microsoft -- Affected Products: Microsoft Internet Explorer 8 Microsoft Internet...