Cyber crime Complaints in US Fell by 10% in 2010 !

The U.S. agency that tracks complaints of criminal activity on the Internet reported Thursday that fewer people complained about Internet fraud in 2010 than in the previous year. The Internet Crime Complaint Center IC3 runs a Web site where victims can report details of any cyberfraud. It shares...

Irfan Shakeel has found xss vulnerability in EESL and Harvard University's Website !

Irfan Shakeel has found xss vulnerability in EESL and Harvard University's Website ! Who is Irfan Shakeel ? Well , Irfan Shakeel ,is a telecommunication engineer from Pakistan, He is a White hat Hacker. He is working as a security researcher for a while. His blog at .The main objective of his...

White hat hack breaks Windows Phone Marketplace security !

Video shows how Windows Phone 7 apps can be easily swiped and stripped of DRM protections Once more, Microsoft finds itself in the unenviable position of having one of its security flaws shared with the world. WPCentral has posted a video made by a "'white hat' developer" that shows how cyber...

White House E-Card Scam Part of Larger Zeus-Related Attack

The simplistic spam campaign that hit around Christmas and purported to be a holiday greeting from the White House not only included a piece of Zeus-related malware that searches hard drives for documents and uploads them to a remote server, but also appears to be connected to a similar attack fr...

Google and Godaddy Head Coalition Against Rogue Pharmacies

Herbal Viagra peddlers beware: Google and GoDaddy are coordinating the establishment of a non-profit organization dedicated to curbing the spread of illegal online pharmaceutical companies. The two firms plan to share information and work together to educate consumers about the dangers of buying...

Irfan Shakeel has found xss vulnerability on Dailymotion.com and RFI on Google !

Irfan Shakeel has found xss vulnerability on Dailymotion.com RFI on Google ! Who is Irfan Shakeel ? Well , Irfan Shakeel ,student of telecommunication engineering from Pakistan, He is a White hat Hacker. He is working as a security researcher for a while. His blog at The main objective of his...

Oh wow ! WikiLeaks data stored in Cold War-era bunker in Sweden !

Confidential files of the website WikiLeaks have been stored into a nuclear bunker in Stockholm, Sweden early this week. In particular, WikiLeaks servers are moved to the "Pionen" White Mountains data center, 30 meters below the ground after being dumped by Amazon. According to the Norwegian news...

21-Year-Old Matt Bergin Shines in U.S. Cyber Challenge, Wins Second Place

Quick Summary Matt Bergin, a 21-year-old sales representative by day, spends his nights hacking into network systems. Recognized Talent: Bergin's skills led to an invitation to the U.S. Cyber Challenge, organized by the White House and U.S. Navy. Impressive Achievement: He secured 2nd place in th...

SecTor

Toronto, Ontario, Canada Billed as “Canada’s Premiere IT Security Conference” they might want to ask the CanSecWest folks about that, SecTor is an annual security confab that draws some of the top security researchers and IT professionals from the Great White North and the U.S. to Toronto for...

ChillyCMS 1.1.3 - Multiple Vulnerabilities

ChillyCMS 1.1.3 - Multiple Vulnerabilities www.BugReport.ir AmnPardaz Security Research Team Title: chillyCMS Multiple Vulnerabilities Vendor: http://frozenpepper.de/ Vulnerable Version: 1.1.3 Latest version till now Exploitation: Remote with browser Fix: N/A - Description: chillyCMS is a Content...

Cisco Packet Tracer 5.2 DLL Hijacking Exploit (wintab32.dll)

Exploit for windows platform in category local exploits ============================================================ Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll ============================================================ / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit...

This Week In Security: Black Hat, Spammers and Trusted Rootkits

The old saying that there’s nothing new under the sun is just as true in the security industry as it is anywhere else. Many new attacks are variants or tweaks of existing ones, new software fails in exactly the same way as old software and new technologies crop up to solve problems that are 30...

White House Cybersecurity Meeting Produces Cautious Optimism

The meeting convened Wednesday at the White House by the country’s top cybersecurity official, Howard Schmidt, which included more than 100 security experts from the private sector and various government agencies, didn’t end with Schmidt revealing any new programs or initiatives, but some of the...

libtiff: Array index error due improper handling of invalid ReferenceBlackWhite values

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

Baidu post bar explosion vulnerability, it can steal Lord a password-vulnerability warning-the black bar safety net

Vulnerability details: Baidu X. post allows to send the specified white list the URL of the FLASH, the white list is as follows: flashWhiteList:"a href="http://www.tudou.com/v/%22,%22http://www. tudou. com/player/playlist. swf?...

PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability ============================================================== Contact: bd0rkatschool-of-hack.net or...

Microsoft Releases Anti-XSS Web Protection Library

Microsoft has released an open-source Web Protection Library WPL to help developers protect web sites from cross-site scripting attacks. The WPL, which is a set of .NET assemblies, is being offered as part of a defense in depth strategy to add an extra layer to any validation or secure coding...

WebEssence 1.0.2 Cross Site Scripting / SQL Injection

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash

Exploit for windows platform in category dos / poc =========================================================================== eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC =========================================================================== Title: eDisplay...

Top Guns of U.S. Security To Speak at RSA

The Obama administration gets a chance to demonstrate its cybersecurity leadership as three top guns from the executive branch – Homeland Security Secretary Janet Napolitano, White House Cybersecurity Coordinator Howard Schmidt and FBI Director Robert Mueller – address the RSA conference in San...