jetlib.sec » Full Disclosure » February 7, 2012

Feeds

133098 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Full Disclosure

• February 07, 2012
• 

  [Announcement] ClubHack Magazine Issue 25, Feb 2012 Released

  Posted: February 7th, 2012, 9:25pm PST

  Tags:   

  Posted by Abhijeet Patil on Feb 07

  Dear All,
  
  ClubHack Magazine's Issue-25, Feb 2012 is released. The theme for this
  issue is Network Exploitation and Security.
  
  This issue covers following articles:-
  
  0x00 Tech Gyan - Exploiting Remote System without Being Online
  0x01 Tool Gyan - Cain and Abel: The Black Art of ARP Poisoning
  0x02 Mom's Guide - Firewall 101
  0x03 Legal Gyan - Liability of Intermediaries under the Information
  Technology Act
  0x04 Matriux Vibhag -...
  
• 

  Android Multiple Vulnerabilities

  Posted: February 7th, 2012, 8:44pm PST

  Tags:   

  Posted by IEhrepus on Feb 07

  Android Multiple Vulnerabilities
  
  Author: www.80vul.com [Email:5up3rh3i#gmail.com]
  Release Date: 2012/2/8
  References: http://www.80vul.com/android/android-0days.txt
  
  Ph4nt0m Webzine 0x06 has been
  released[http://www.80vul.com/webzine_0x06/],there
  three papers on the android application security about the development
  environment,browser security, inter-application communication.And published
  a lot of 0days:
  
  [0day-NO.0] android-webkit local...
  
• 

  Re: Exploit Pack - Hacking Microsoft Word and Excel

  Posted: February 7th, 2012, 12:06pm PST

  Tags:   

  Posted by Chuckyz Seed on Feb 07

  http://www.sendspace.com/file/f8pexd // insectpro
  
  when he rmd the other one, i just uploaded it again :-)
  and i wilm d so, until this product, is purely a waste of time. :)
  have a lovely fucking day assfaces!
  
• 

  Re: Vulnerability-lab.com XSS

  Posted: February 7th, 2012, 9:27am PST

  Tags:   

  Posted by Sanguinarious Rose on Feb 07

  His story seemed rather odd and BS to begin with so thanks for
  cleaning that up for much entertainment and ownage.
  
  Excellent day to you good sir.
  
• 

  HITB2011KUL - Is The Pen Still Mightier Than The Sword

  Posted: February 7th, 2012, 9:25am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  HITB2011KUL - Is The Pen Still Mightier Than The Sword
  
  Date:
  =====
  2012-01-18
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/385.wmv
  View: http://www.youtube.com/watch?v=9dsYY_Zl4sk
  
  VL-ID:
  =====
  385
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Conference
  
  Severity:
  =========
  Medium
  
  Details:
  ========
  Presentation Title Is the Pen Still Mightier...
  
• 

  HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS

  Posted: February 7th, 2012, 9:23am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  HITB2011KUL - Chip & PIN - Protocol Analysis EMV POS
  
  Date:
  =====
  2012-01-26
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/399.wmv
  View: http://www.youtube.com/watch?v=5zFlqMFWYhc
  
  VL-ID:
  =====
  399
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Conference
  
  Severity:
  =========
  Medium
  
  Details:
  ========
  The EMV global standard for electronic...
  
• 

  HITB2011KUL - Mobile Malware Analysis

  Posted: February 7th, 2012, 9:22am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  HITB2011KUL - Mobile Malware Analysis
  
  Date:
  =====
  2012-02-06
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/424.wmv
  View: http://www.youtube.com/watch?v=nVAuZ7jf7Sk
  
  VL-ID:
  =====
  424
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Conference
  
  Severity:
  =========
  High
  
  Details:
  ========
  Mobile malware is becoming a larger concern every day, as the...
  
• 

  HITB2011KUL - Post Memory Corruption Analysis

  Posted: February 7th, 2012, 9:21am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  HITB2011KUL - Post Memory Corruption Analysis
  
  Date:
  =====
  2012-01-26
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/398.wmv
  View: http://www.youtube.com/watch?v=kOgarD9KCbg
  
  VL-ID:
  =====
  398
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Conference
  
  Severity:
  =========
  High
  
  Details:
  ========
  In this presentation, we introduce a new exploitation...
  
• 

  Video => Google Service Reward #1 - ClickJacking Vulnerability

  Posted: February 7th, 2012, 9:19am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Google Service Reward #1 - ClickJacking Vulnerability
  
  Date:
  =====
  2012-02-07
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/416.wmv
  View: http://www.youtube.com/watch?v=6N0YS9cTRHw
  
  VL-ID:
  =====
  416
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Offensiv
  
  Severity:
  =========
  High
  
  Details:
  ========
  The video shows the live exploitation session of...
  
• 

  Video => Cyberoam Central Console v2.x - File Include Vulnerability

  Posted: February 7th, 2012, 9:18am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Cyberoam Central Console v2.x - File Include Vulnerability
  
  Date:
  =====
  2012-02-05
  
  References:
  ===========
  Download: http://www.vulnerability-lab.com/resources/videos/411.wmv
  View: http://www.youtube.com/watch?v=pGJy2XNugy8
  
  VL-ID:
  =====
  411
  
  Status:
  ========
  Published
  
  Exploitation-Technique:
  =======================
  Offensiv
  
  Severity:
  =========
  High
  
  Details:
  ========
  The video shows a live exploitation session by...
  
• 

  Dinama SMS Service - Persistent Web Vulnerability

  Posted: February 7th, 2012, 9:16am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Dinama SMS Service - Persistent Web Vulnerability
  
  Date:
  =====
  2012-02-05
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=417
  
  VL-ID:
  =====
  417
  
  Introduction:
  =============
  Las soluciones de medios interactivos de DINAMA habilitan la comunicación bidireccional entre los
  medios y su público o audiencia.
  
  (Copy of the Vendor Homepage:http://www.dinama.com/)
  
  Abstract:
  =========
  A Vulnerability Lab...
  
• 

  Facebook Game Store - SQL Injection Vulnerability

  Posted: February 7th, 2012, 8:41am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Facebook Game Store - SQL Injection Vulnerability
  
  Date:
  =====
  2012-02-04
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=408
  
  VL-ID:
  =====
  408
  
  Introduction:
  =============
  The application is currently included and viewable by all facebook users.
  The service is an external 3rd party application sponsored by the Facebook Game Store Development Team.
  
  (Copy from the Vendors Homepage:...
  
• 

  eFronts Community++ v3.6.10 - Cross Site Vulnerability

  Posted: February 7th, 2012, 8:39am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  eFronts Community++ v3.6.10 - Cross Site Vulnerability
  
  Date:
  =====
  2012-02-07
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=423
  
  VL-ID:
  =====
  423
  
  Introduction:
  =============
  Tailored with larger organizations in mind, eFront Community ++ offers solutions for the management of companies most
  valued asset - the people. Based on a coherent approach to human capital management which keeps the workforce...
  
• 

  VolksBank Online Banking - Multiple Web Vulnerabilities

  Posted: February 7th, 2012, 8:38am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  VolksBank Online Banking - Multiple Web Vulnerabilities
  
  Date:
  =====
  2012-02-07
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=172
  
  VL-ID:
  =====
  172
  
  Introduction:
  =============
  Die Volksbank AG trifft eine Reihe von Sicherheitsvorkehrungen, die einen wirksamen Schutz gegen Angriffe
  bei der Übertragung der Daten oder der Verarbeitung auf dem Bankenserver bieten. Treffen auch Sie Vorkehrungen
  zum...
  
• 

  Re: Exploit Pack - Hacking Microsoft Word and Excel

  Posted: February 7th, 2012, 6:16am PST

  Tags:   

  Posted by Valdis . Kletnieks on Feb 07

  On Mon, 06 Feb 2012 05:40:52 MST, ctruncer () christophertruncer com said:
  
  procmail is your friend.
  
• 

  Re: Exploit Pack - Hacking Microsoft Word and Excel

  Posted: February 7th, 2012, 5:52am PST

  Tags:   

  Posted by Samuel Hassine on Feb 07

  Please stop spam!
  
  Le 06/02/2012 04:25, noreply () exploitpack com a écrit :
  
• 

  Re: Exploit Pack - Hacking Microsoft Word and Excel

  Posted: February 7th, 2012, 5:51am PST

  Tags:   

  Posted by Julius Kivimäki on Feb 07

  And down goes exploitpack.com
  
  2012/2/6 <ctruncer () christophertruncer com>
  
• 

  Re: Vulnerability-lab.com XSS

  Posted: February 7th, 2012, 5:49am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  i recomment your desinformation with 2 short links ...
  
  article: http://www.vulnerability-lab.com/dev/?p=382
  news: http://www.vulnerability-lab.com/news/get_news.php?id=74
  
  ... we will not respond to this crap anymore ... false envy.
  
  by ;)
  
• 

  Electronic Arts - Cross Site Scripting Vulnerability

  Posted: February 7th, 2012, 5:48am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Electronic Arts - Cross Site Scripting Vulnerability
  
  Date:
  =====
  2012-02-06
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=367
  
  VL-ID:
  =====
  367
  
  Introduction:
  =============
  Electronic Arts, Inc. (EA) (NASDAQ: EA) is a major American developer, marketer, publisher and distributor of video
  games.
  Founded and incorporated on May 28, 1982 by Trip Hawkins, the company was a pioneer of the early home...
  
• 

  Sun Microsystems (Print) - Cross Site Scripting Vulnerability

  Posted: February 7th, 2012, 5:46am PST

  Tags:   

  Posted by research () vulnerability-lab com on Feb 07

  Title:
  ======
  Sun Microsystems (Print) - Cross Site Scripting Vulnerability
  
  Date:
  =====
  2012-02-01
  
  References:
  ===========
  http://www.vulnerability-lab.com/get_content.php?id=404
  
  VL-ID:
  =====
  404
  
  Introduction:
  =============
  Sun Microsystems, Inc. was a company that sold computers, computer components, computer software, and information
  technology services. Sun was founded on February 24, 1982. At its height, Sun headquarters were in Santa...
  
• 

  SQL Injection Vulnerability in Batavi 1.1.2

  Posted: February 7th, 2012, 5:44am PST

  Tags:   

  Posted by Netsparker Advisories on Feb 07

  Information
  --------------------
  Name :  SQL Injection Vulnerability in Batavi
  Software :  Batavi 1.1.2 and possibly below.
  Vendor Homepage :  http://www.batavi.org
  Vulnerability Type :  SQL Injection
  Severity :  Critical
  Researcher :  Onur Yılmaz
  Advisory Reference :  NS-12-003
  
  Description
  --------------------
  Batavi is an open source e-commerce platform.
  
  Details
  --------------------
  Batavi is affected by a SQL Injection vulnerability...
  
• 

  CVE-2012-0803: Apache CXF does not validate UsernameToken policies correctly

  Posted: February 7th, 2012, 4:20am PST

  Tags:   

  Posted by Colm O hEigeartaigh on Feb 07

  CVE-2012-0803: Apache CXF does not validate UsernameToken policies correctly
  
  Severity: Important
  
  Vendor: The Apache Software Foundation
  
  Versions Affected: Apache CXF 2.4.5 and 2.5.1
  
  Description: CXF does not validate a WS-Security UsernameToken received as part
  of the security header of a SOAP request against a WS-SP UsernameToken policy.
  
  A malicious client could send a request to the endpoint with no UsernameToken,
  and the UsernameToken...
  
• 

  [SECURITY] [DSA 2403-2] php5 security update

  Posted: February 7th, 2012, 4:19am PST

  Tags:   

  Posted by Thijs Kinkhorst on Feb 07

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-2403-2 security () debian org
  http://www.debian.org/security/ Thijs Kinkhorst
  February 06, 2012 http://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : php5
  Vulnerability : code injection
  Problem type :...