Linux kernel race condition with PTRACE_SETREGS (CVE-2013-0871)- may be worst...
Linux kernel stack corruption due to race condition with PTRACE_SETREGS-----------------------------------------------------------------------A race conditon in ptrace can lead to kernel stack...
View ArticleLarge Scale Compromises Leading to Traffic Distribution System
For the last few weeks we’ve been tracking a large scale decentralized Traffic Distribution System (TDS). It’s using hundreds of compromised sites as their first entry point. Anyone that visits the...
View Article[SECURITY] [DSA 2624-1] ffmpeg security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1- -------------------------------------------------------------------------Debian Security Advisory DSA-2624-1...
View Articlenew scripts/modules/exploits added to Nmap, OpenVAS, Metasploit, and Nessus...
This report describes any new scripts/modules/exploits added to Nmap,OpenVAS, Metasploit, and Nessus since yesterday.== Nessus plugins (4) ==64645...
View ArticleSI6 Networks IPv6 Toolkit v1.3 released!
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1Folks,We are pleased to release the SI6 Networks' IPv6 Toolkit v1.3: asecurity assessment and trouble-shooting toolkit for the IPv6 protocolsuite.The toolkit...
View ArticleO2 Shop 'View Bill Online' Phishing Scam
OutlineEmail purporting to be from UK based service provider O2, claims that recipients can open an attached file to view their bill online.Brief AnalysisThe message is not from O2. Instead the email...
View Article[IA47] Photodex ProShow Producer v5.0.3297 PXT File title Value Handling...
Inshell Security Advisoryhttp://www.inshell.net1. ADVISORY INFORMATION-----------------------Product: Photodex ProShow ProducerVendor URL: www.photodex.comType: Stack-based Buffer Overflow...
View ArticlePaypal XSS Vulns
Number of Vulnerabilities : 2___________________________________________________________________________________________--- Vulnerability # No-...
View Article[SECURITY] [DSA 2625-1] wireshark security update
-----BEGIN PGP SIGNED MESSAGE-----Hash: SHA1- -------------------------------------------------------------------------Debian Security Advisory DSA-2625-1...
View ArticleAutomation Federation Works with White House and US Government Agencies as...
The Automation Federation and its member organizations are honored to assist the Obama administration in establishing effective cybersecurity safeguards for America’s industrial automation and control...
View ArticleJava IDX Sample Files from Java Spearphishing Attack from SANS FOR508
Earlier this year, SANS created the most in-depth incident response training scenario that spans multiple systems in FOR508: Advanced Forensic Analysis and Incident Response. We discussed the entire...
View ArticleOWASP Top 10 2013 Release Candidate For Comment! The 10 Most Critical...
Welcome to the OWASP Top 10 2013! This update broadens one of categories from the 2010 version to be more inclusive of common, important vulnerabilities, and reorders some of the others based on...
View ArticleScripts Genie Gallery Personals (gallery.php, L param) - SQL Injection...
################################################################################## __ _ _ ____ / /___ _____ (_)_____________ ______(_)__...
View ArticleScripts Genie Domain Trader (catalog.php, id param) - SQL Injection...
################################################################################## __ _ _ ____ / /___ _____ (_)_____________ ______(_)__...
View ArticleScripts Genie Games Site Script (index.php, id param) - SQL Injection...
################################################################################## __ _ _ ____ / /___ _____ (_)_____________ ______(_)__...
View ArticleScripts Genie Top Sites (out.php, id param) - SQL Injection Vulnerability
################################################################################## __ _ _ ____ / /___ _____ (_)_____________ ______(_)__...
View Articlenew scripts/modules/exploits added to Nmap, OpenVAS, Metasploit, and Nessus...
This report describes any new scripts/modules/exploits added to Nmap,OpenVAS, Metasploit, and Nessus since yesterday.== Metasploit modules (1) ==r16460...
View ArticleVLC 2.0.5 (.bmp) Heap Overflow PoC
# Title : VLC 2.0.5 (.bmp) Heap Overflow PoC# Date: 2013-01-12# Software Link: www.videolan.org/vlc/# phone : +447024073406# Author: The Black Devils# Tested on: Windows XP SP2# Greeting To :All...
View ArticleUSB Sharp v1.3.4 iPad iPhone - Multiple Web Vulnerabilities
Title:======USB Sharp v1.3.4 iPad iPhone - Multiple Web VulnerabilitiesDate:=====2013-02-16References:===========http://www.vulnerability-lab.com/get_content.php?id=873VL-ID:=====873Common...
View ArticleApple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2
Title:======Apple iOS v6.1 (10B143) - Code Lock Bypass Vulnerability #2Date:=====2013-02-16References:===========http://www.vulnerability-lab.com/get_content.php?id=875...
View Article