Cyclope Internet Filtering Proxy Cross Site Scripting

!/usr/bin/python Title: Cyclope Internet Filtering Proxy - Stored XSS Vuln. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date Found: Oct 20th 2011 Tested on: Windows XP SP3 Professional /...

Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS (Poc)

Exploit for windows platform in category dos / poc !/usr/bin/python Title: Cyclope Internet Filtering Proxy 4.0 - CEPMServer.exe DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Software link: http://www.cyclope-series.com/download/index.aspx?p=2 Date...

Skype Software Vulnerabilities - 0 Day Exploitation 2011

Document Title: =============== Skype Software Vulnerabilities - 0 Day Exploitation 2011 References: =========== Document: http://www.vulnerability-lab.com/resources/documents/293.pdf Speaker: http://conference.hitb.org/hitbsecconf2011kul/?pageid=1757 Conference Mirror:...

Skype Software Vulnerabilities - 0 Day Exploitation 2011

Document Title: =============== Skype Software Vulnerabilities - 0 Day Exploitation 2011 References: =========== Document: https://www.vulnerability-lab.com/resources/documents/293.pdf Speaker: https://conference.hitb.org/hitbsecconf2011kul/?pageid=1757 Conference Mirror:...

The George Washington Institue for Sustainability hacked by Cocain TeaM

The George Washington Institue for Sustainability hacked by Cocain TeaM The George Washington Institue for Sustainability website got hacked and defaced by Cocain TeaM hackers. Mirror of hack available on Zone-H. The George Washington University is located four blocks from the White House and was...

Inline attachment downloads vulnerable to XSS by setting tweaked HTML content type

Please see CONFDEV-9069 https://jira.atlassian.com/browse/CONFDEV-9069 for the current issue addressed at fixing attachment XSS vulnerabilities. --- TLDR: white-list mime-types which can be served "inline" and don't let the user set arbitrary mime-types. I have been having a good laugh sorry...

Inline attachment downloads vulnerable to XSS by setting tweaked HTML content type

Please see CONFDEV-9069 https://jira.atlassian.com/browse/CONFDEV-9069 for the current issue addressed at fixing attachment XSS vulnerabilities. --- TLDR: white-list mime-types which can be served "inline" and don't let the user set arbitrary mime-types. I have been having a good laugh sorry...

Former Microsoft Executive Named New Chief of Information Technology

Former Microsoft executive Steven VanRoekel will succeed current Chief of Information Technology officer Vivek Kundra, the White House announced Thursday, according to a report in The New York Times. VanRoekel worked for Microsoft for 15 years before assuming the managing director position at the...

Nodesforum 1.059 remote file inclusion defect and repair-vulnerability warning-the black bar safety net

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / Windows Vista...

Nodesforum 1.059 Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

nodesforum 1.059 - Remote File Inclusion

Exploit Title: nodesforum 1.059 Remote File Inclusion Vulnerability Google Dork: inurl: powered by Nodesforum Date: 6/23/2011 Author: bd0rk bd0rkathackermail.com Software-Download: http://home.nodesforum.com/download?file=nodesforum1.059withbbcode1.004.zip Tested on: Ubuntu-Linux / WinVista...

High-Profile Attacks Drive Renewed Push For Breach Notification Law

With each new day bringing news of another intrusion at a high-profile company or government agency, lawmakers are considering a number of legislative responses to the problem, including a potential bill that would require companies to report breaches within 48 hours and establish penalties for...

Obama Cybersecurity Chief: Other Nations Key To Securing Cyberspace

This is the first part of a two-part Threatpost interview with Howard Schmidt, White House cybersecurity coordinator, about the challenges of international cooperation, the proliferation of cybercrime and what can be done to address those issues. Look for part two tomorrow. The Obama administrati...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA- 5.5.1294-i386-DVD.iso Discovery Date: 27/05/2011 Remote: Yes Author Site Email:...

Chinese hackers having aim to Spying on U.S. Govt

Chinese hackers having aim to Spying on U.S. Govt It's the second time Google has blamed a major computer hacking scheme on China . On 1st of June we have Reported that : Chinese Hacker Cracks Hundreds of Gmail Accounts of U.S. & Asia. This time Google says unknown hackers from Jinan, China, a ci...

Dennis Fisher and Paul Roberts on the Sony Data Breach and National Cybersecurity

Dennis Fisher and Paul Roberts talk about the data breach of the Sony PlayStation Network, Sony’s response to the attack and whether the recent legislation proposed by the White House and its new cyberspace strategy will have any effect. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Data Breach Notification Bill Included in New White House Proposal

The White House on Thursday proposed a new federal data breach notification law in an attempt to clarify a mish-mash of laws already on record. The notification comes as part of a much-delayed cybersecurity legislative proposal unveiled on Capitol Hill this week. The sweeping reform comes nearly...

White House Unveils Cybersecurity Legislative Agenda

The White House proposed Thursday reforming the Federal Information Security Management Act by formalizing the Department of Homeland Security role in managing cybersecurity for the federal government's civilian computers and networks. What the Obama administration does not propose is the...

White House Cyber-Security Strategy Could Guard Health Care Payments !

The National Strategy for Trusted Identities in Cyberspace aims to help consumers pay for services such as health care more securely and avoid identity theft. Recent guidelines issued by the White House on cyber-security could provide an impetus for secure online bill paying in health care,...

BoutikOne SQL Injection

| || \ / \ / \ | | / \ / \ | | | | / \ | \ ||| | \ \ / / \ \ / \ || / / \ \ / / | ||| || / / \ \ | | \ \ | | | |/ / / / \ \ | | | | / / \ \ / / | | | | | | / / \ \ | |/ / | | |/ / / | | \ \ | | | | | |/ / | | \ \ / / | | | | / / | | \ \ |/ | | | | \ \ | | || | || || | | || | || | | | | | | || | |...