MOPS-2010-014: PHP ZEND_BW_XOR Opcode Interruption Address Information Leak Vulnerability

MOPS-2010-014: PHP ZENDBWXOR Opcode Interruption Address Information Leak Vulnerability May 8th, 2010 PHP’s ZENDBWXOR opcode can be abused for address information leak attacks by an userspace error handler interruption attack. Affected versions Affected is PHP 5.2 = 5.2.13 Affected is PHP 5.3 =...

Solaris Update for JDS 3 125332-08

Check for the Version of JDS 3 OpenVAS Vulnerability Test Solaris Update for JDS 3 125332-08 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

PBX Phone System v2.x - Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ PBX Phone System v2.x - Multiple Vulnerabilities ================================================ PenTest Information: ==================== Global-Evolution Security Team remove discover...

Guardian Jobs Site Hacked, Data Stolen

In what is being described as a “deliberate and sophisticated crime,” the Guardian newspaper in the U.K. says the careers section of its Web site was hacked, exposing sensitive data belonging to about half a million users. According to a note posted online by the Guardian: The police remain anxio...

Microsoft Malware Data Shows Trojans Rampant in USA

One week after the release of its Microsoft Security Essentials utility, Microsoft is sharing some very useful data on malware infections globally. In the first week alone, the tool counted four million detections on 535,752 distinct machines, with ID-theft related Trojans sitting atop the detect...

Security feature bypass

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

New SMS Hacking Tool Coming at Black Hat

From DarkReading Kelly Jackson Higgins Texting just keeps getting riskier: Researchers at next month’s Black Hat USA in Las Vegas will demonstrate newly discovered threats to mobile phone users, as well as release a new iPhone application that tests phones for security flaws. “We set out to creat...

How to make money online without really trying

Jeremiah Grossman and Trey Ford of WhiteHat Security explain low-tech and no-tech schemes for making money online in this TechWebTV video from Black Hat USA 2008...

The cybersecurity mess on the White House front steps

If President Obama thinks fixing the broken U.S. economy is a challenge, and ending the ground wars in the Middle East a conundrum, wait until he gets around to tackling cybersecurity. Obama must reverse the abject lack of any sort of meaningful coordinated defense against intensifying and...

Fedora Update for fedora-release FEDORA-2008-7748

Check for the Version of fedora-release OpenVAS Vulnerability Test Fedora Update for fedora-release FEDORA-2008-7748 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Unfixed XSS vulnerability at www.dymax-usa.com

Security researcher 3kb3ruqan, has submitted on 17/05/2008 a cross-site-scripting XSS vulnerability affecting www.dymax-usa.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/05/2008. It is currentl...

Unfixed XSS vulnerability at www.encore-usa.com

Security researcher SeeD, has submitted on 27/04/2008 a cross-site-scripting XSS vulnerability affecting www.encore-usa.com, which at the time of submission ranked 111247 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/06/2008. It is current...

Unfixed XSS vulnerability at www.tricomusa.net

Security researcher celciuz, has submitted on 17/02/2008 a cross-site-scripting XSS vulnerability affecting www.tricomusa.net, which at the time of submission ranked 1651261 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 19/03/2008. It is...

Unfixed XSS vulnerability at chivas.usa.mlsnet.com

Security researcher general, has submitted on 02/05/2008 a cross-site-scripting XSS vulnerability affecting chivas.usa.mlsnet.com, which at the time of submission ranked 8001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 20/06/2008. It is...

Cisco Security Advisory: IOS Heap-based Overflow Vulnerability in System Timers

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: ======================== IOS Heap-based Overflow Vulnerability in System Timers ====================================================== Document ID: 68064 Revision 1.0 For Public Release 2005 November 2 1600 UTC GMT -...