Cisco Packet Tracer 5.2 DLL Hijacking Exploit (wintab32.dll)

Exploit for windows platform in category local exploits ============================================================ Cisco Packet Tracer 5.2 DLL Hijacking Exploit wintab32.dll ============================================================ / Title: Cisco Packet Tracer 5.2 DLL Hijacking Exploit...

This Week In Security: Black Hat, Spammers and Trusted Rootkits

The old saying that there’s nothing new under the sun is just as true in the security industry as it is anywhere else. Many new attacks are variants or tweaks of existing ones, new software fails in exactly the same way as old software and new technologies crop up to solve problems that are 30...

White House Cybersecurity Meeting Produces Cautious Optimism

The meeting convened Wednesday at the White House by the country’s top cybersecurity official, Howard Schmidt, which included more than 100 security experts from the private sector and various government agencies, didn’t end with Schmidt revealing any new programs or initiatives, but some of the...

libtiff: Array index error due improper handling of invalid ReferenceBlackWhite values

The TIFFYCbCrtoRGB function in LibTIFF 3.9.0 and 3.9.2, as used in ImageMagick, does not properly handle invalid ReferenceBlackWhite values, which allows remote attackers to cause a denial of service application crash via a crafted TIFF image that triggers an array index error, related to...

Baidu post bar explosion vulnerability, it can steal Lord a password-vulnerability warning-the black bar safety net

Vulnerability details: Baidu X. post allows to send the specified white list the URL of the FLASH, the white list is as follows: flashWhiteList:"a href="http://www.tudou.com/v/%22,%22http://www. tudou. com/player/playlist. swf?...

PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ============================================================== PHprojekt Module CMS 0.6.1 Remote File Inclusion Vulnerability ============================================================== Contact: bd0rkatschool-of-hack.net or...

Microsoft Releases Anti-XSS Web Protection Library

Microsoft has released an open-source Web Protection Library WPL to help developers protect web sites from cross-site scripting attacks. The WPL, which is a set of .NET assemblies, is being offered as part of a defense in depth strategy to add an extra layer to any validation or secure coding...

WebEssence 1.0.2 Cross Site Scripting / SQL Injection

WebEssence 1.0.2 Multiple Vulnerabilities Bugs found by whitesheep, R00TATI and epicfail for Debug|Track session @ Backtrack|italia community conference www.backtrack.it XSS PoC: http://localhost/webessence/webessence/oembed.php?url=http://google.com&id=alert'Backtrack|it'; In "url" variable is...

eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash

Exploit for windows platform in category dos / poc =========================================================================== eDisplay Personal FTP server 1.0.0 Multiple Post-Authentication Crash PoC =========================================================================== Title: eDisplay...

Top Guns of U.S. Security To Speak at RSA

The Obama administration gets a chance to demonstrate its cybersecurity leadership as three top guns from the executive branch – Homeland Security Secretary Janet Napolitano, White House Cybersecurity Coordinator Howard Schmidt and FBI Director Robert Mueller – address the RSA conference in San...

An Interview With Howard Schmidt

Howard Schmidt has been involved in just about every aspect of the security industry during his career. After stints in the Air Force and at Microsoft, he served as a cybersecurity adviser to George W. Bush. Now, after heading back to the private sector for several years, he’s been appointed to...

DocuWiki version 2009-12-25 suffers from directory traversal listing and modification vulnerabilitie

No description provided by source. Reported: 13-01-2010 Patched: 13-01-2010 Released: 14-01-2010 Vulnerable version : http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25.tgz Patched version: http://www.splitbrain.org/media/projects/dokuwiki/dokuwiki-2009-12-25b.tgz Author:...

Microsoft HTML Help Compiler (hhc.exe) BOF POC

No description provided by source. Microsoft’s HTML Help Compiler hhc.exe is free tool to build Microsoft Compiled HTML Help .chm files. It is included within HTML Help Workshop and Visual Studio. The executable, hhc.exe, does not properly check the length of user-supplied command line arguments...

PHP Uploader Downloader v2.0 Upload Shell Vulnerability

Exploit for unknown platform in category web applications ======================================================= PHP Uploader Downloader v2.0 Upload Shell Vulnerability =======================================================...

Some Advice for Howard Schmidt

It’s been little more than 24 hours since President Obama named Howard Schmidt his White House Cybersecurity Coordinator, but it didn’t take nearly that long for just about everyone with any interest in security to line up on one side or the other of the “he has no chance/he’ll save the Internet”...

New Cybersecurity Coordinator Howard Schmidt

Howard A. Schmidt, the former CSO of Microsoft and former security adviser to President George W. Bush, was named White House Cybersecurity Coordinator on Tuesday...

Proof of Concept Pen Testing Tools Coming

A researcher is working on tools for penetration testers that’s a first step toward ultimately integrating and correlating data among different types of penetration-testing products. Josh Abraham, a.k.a. “Jabra,” will release some proof-of-concept tools at the OWASP AppSec Conference in Washingto...

SpamAssassin Malformed Email Header Denial Of Service (CVE-2005-1266)

SpamAssassin is an open source Email filtering product developed using Perl. The product supports a number of filtering methods such as header fields and body phrase identification, white and black list rules. The product is also embedded in numerous commercial anti-spam products from a broad ran...

Senator Joe Lieberman Wants Head of Cyber Security to Reside in White House

Independent Sen. Joe Lieberman of Conneticut is set to propose a bill that would make the lead security post for the U.S. government a Presidential nominee approved by the Senate and accountable to Congress. This is in sharp contrast to the proposed hierarchy laid out by the ranking Republican...

Researcher Banished For Showing How to Hack PayPal

PayPal suspended the account of a white-hat hacker on Tuesday, a day after someone used his research into website authentication to publish a counterfeit certificate for the online payment processor. “Under the Acceptable Use Policy, PayPal may not be used to send or receive payments for items th...