Advanced Malware Analysis Training Session 10 – (Part 1) Reversing & Decrypting Communications of...
Here is the quick update on this month’s Local Security meet (SX/Null/G4H/owasp) and our advanced malware training session on (Part 1) Reversing &...
PHPDirector 0.30 Insecure Cookie Handling
PHPDirector version 0.30 suffers from an insecure cookie handling vulnerability that allows for privilege escalation.
Source: PHPDirector 0.30 Insecure Cookie Handling
Smart Communication Protocols and Algorithms 2011 Call For Papers
The Smart Communication Protocols and Algorithms (SCPA 2011) Call For Papers has been announced. It will take place December 5th through the 9th, 2011...
[webapps] – iGiveTest 2.1.0 SQL Injection Vulnerability
Source: - iGiveTest 2.1.0 SQL Injection Vulnerability
[papers] – [EZINE] (FuckTheSystem) FTS Zine 5
(FuckTheSystem) FTS Zine 5
Source: - (FuckTheSystem) FTS Zine 5
www.windows7download.com XSS
NetFuzzer has discovered a vulnerability in www.windows7download.com, which could be exploited by malicious people to conduct XSS attacks.
Source: www.windows7download.com XSS
ZDI-11-212: Adobe Shockwave KEY* Chunk Invalid Size Remote Code Execution Vulnerability
Posted by ZDI Disclosures on Jun 14ZDI-11-212: Adobe Shockwave KEY* Chunk Invalid Size Remote Code Execution Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-11-212
June 14, 2011
-- CVE ID:
CVE-2011-2111
-- CVSS:
7.5, (AV:N/AC:L/Au:N/C:P/I:P/A:P)
-- Affected...
[remote] – Ubiquiti AirOS <= 5.5.2 Remote POST-Auth Root Command Execution
Ubiquiti AirOS <= 5.5.2 Remote POST-Auth Root Command Execution
Source: - Ubiquiti AirOS <= 5.5.2 Remote POST-Auth Root Command Execution
[papers] – Hacking Embedded Devices For Fun & Profit
Source: - Hacking Embedded Devices For Fun & Profit
Zero Day Initiative Advisory 11-225
Zero Day Initiative Advisory 11-225 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Firefox. User interaction is required...