«
Expand/Collapse
264 items tagged "data"
Related tags:
remote buffer overflow vulnerability [+],
microsoft data access [+],
emc [+],
data breach [+],
access [+],
data protector [+],
service [+],
null pointer [+],
microsoft data access components [+],
media operations [+],
txt [+],
sql injection [+],
session [+],
service vulnerability [+],
potential security vulnerability [+],
packard [+],
gnutls [+],
europe [+],
data server [+],
arbitrary code [+],
protector [+],
version 6 [+],
service hp [+],
proof of concept [+],
media [+],
enterprise environments [+],
drupal [+],
core [+],
client exec [+],
tele data [+],
tele [+],
poc [+],
notebook [+],
hacks [+],
google [+],
exploits [+],
exec cmd [+],
chaos communication congress [+],
center [+],
black hat [+],
arbitrary code execution [+],
zdi [+],
video [+],
trend [+],
theft [+],
security [+],
remote shell [+],
payload [+],
micro data [+],
micro [+],
manager [+],
igss [+],
hp ux [+],
exec [+],
dynamics [+],
data loss prevention [+],
data dynamics [+],
data breaches [+],
breaches [+],
breach [+],
analysis [+],
activebar [+],
zero day [+],
zero [+],
x versions [+],
web root [+],
traffic [+],
shell [+],
server versions [+],
security technologies [+],
remote [+],
oracle java [+],
oracle data [+],
oracle [+],
manager a [+],
lars weiler [+],
java [+],
initial approach [+],
information disclosure [+],
hp openview [+],
heap corruption [+],
foz [+],
exe [+],
encryption [+],
denial of service dos [+],
denial [+],
data access system [+],
cross site scripting [+],
cross [+],
contact [+],
configuration file [+],
buffer [+],
alpha [+],
activex data objects [+],
code execution [+],
windows [+],
vulnerabilities [+],
upload [+],
transparency [+],
tgz [+],
sparc versions [+],
server [+],
security vulnerabilities [+],
recovery [+],
reassures [+],
protection mechanisms [+],
protection laws [+],
peter franck [+],
personal data [+],
personal [+],
perl data [+],
perl [+],
nhs [+],
microsoft windows [+],
microsoft excel [+],
krakow [+],
insecure methods [+],
insecure method [+],
hackers [+],
formvalidator [+],
file upload [+],
express [+],
exec script [+],
excel data validation [+],
excel [+],
david hulton [+],
datafile [+],
data security [+],
data protection act [+],
data protection [+],
data encryption standard [+],
data access component [+],
audio [+],
arduino [+],
abstract data [+],
vulnerability [+],
protection [+],
york university [+],
york [+],
yale winds [+],
yale [+],
worm [+],
wireless radio [+],
windows security [+],
wind [+],
wifi [+],
wi fi [+],
whimsy [+],
website [+],
way [+],
voracious [+],
visa [+],
version [+],
verizon customers [+],
verizon [+],
user [+],
unspecified [+],
university [+],
unified [+],
twitter [+],
tsa [+],
travelodge [+],
time [+],
thieves [+],
thanh nguyen [+],
than criminals [+],
telecoms [+],
techniques [+],
target [+],
taking the lead [+],
survey respondents [+],
survey [+],
sun website [+],
sun [+],
sues [+],
store [+],
stolen [+],
steal [+],
state [+],
sql [+],
specialized data systems [+],
specialized [+],
sound [+],
social engineering [+],
snarfing [+],
slides [+],
site [+],
setup [+],
server performance [+],
server monitoring [+],
server edition [+],
sensitive [+],
sending [+],
seepage [+],
security practices [+],
scott moulton [+],
school [+],
sabotage [+],
rop [+],
root shell [+],
robert graham tags [+],
rf communications [+],
research [+],
reported [+],
red tape [+],
receiver [+],
realplayer [+],
rafael [+],
quarter [+],
protection regime [+],
protection chief [+],
protection authority [+],
proficy historian [+],
proficy [+],
probe [+],
prevention [+],
police [+],
playstation [+],
physical security [+],
photocopier [+],
overflow code [+],
online [+],
nerf football [+],
multitouch [+],
multiple [+],
mobiles [+],
mobile os [+],
moat [+],
mjb [+],
misc [+],
minisystem [+],
microsoft windows versions [+],
microcontrollers [+],
meter [+],
maynor [+],
massive data [+],
malicious users [+],
malaysia [+],
mail [+],
lux meter [+],
logbackuplocationstatus [+],
livecycle [+],
live [+],
little [+],
libsndfile [+],
leaked [+],
leak [+],
laws [+],
laser cutter [+],
kokes [+],
kernel drivers [+],
kernel code [+],
job [+],
irs [+],
irish data [+],
irish [+],
ip addresses [+],
ios [+],
internet users [+],
internet [+],
integer overflow [+],
insider data [+],
insider [+],
injection [+],
information disclosure vulnerability [+],
information [+],
inference [+],
inexpensive receiver [+],
ico top [+],
ico critical [+],
ico [+],
hotel [+],
honda [+],
hoi [+],
historian [+],
high speed data services [+],
high speed data [+],
high [+],
hiding [+],
heads [+],
hat europe [+],
harlan carvey [+],
hand grenade [+],
hacktivists [+],
hacking [+],
hacker [+],
hack in the box [+],
grenade [+],
greg [+],
google search results [+],
giants [+],
gallery [+],
fragmented [+],
forum [+],
football [+],
flow [+],
flake [+],
fingered [+],
fines [+],
feds probe [+],
exposed [+],
execution [+],
european data protection [+],
european [+],
eu commission [+],
esteban martnez [+],
error correction [+],
encryption systems [+],
emergency data [+],
emergency [+],
email [+],
electronic compass [+],
ebay [+],
e mail addresses [+],
dmitry sklyarov [+],
diy [+],
disgruntled [+],
digital [+],
deslock [+],
dbserver [+],
day [+],
david maynor [+],
david litchfield [+],
databases [+],
database sql [+],
data thieves [+],
data source name [+],
data recovery [+],
data leakage [+],
data flow analysis [+],
data execution prevention [+],
data base [+],
data analyst [+],
customer data [+],
customer [+],
cubes [+],
criminals [+],
council data [+],
council [+],
continue [+],
confirms [+],
compromises [+],
compliance problem [+],
command execution [+],
collection [+],
clusters [+],
closed doors [+],
citigroup [+],
chilly reception [+],
chilly [+],
cesar cerrudo [+],
cell [+],
carvey [+],
businessman [+],
bugtraq [+],
brian wilson tags [+],
botnet [+],
bill gets [+],
bike lights [+],
ben kokes [+],
beanstalk [+],
bank of america [+],
bang [+],
audio feedback [+],
attackers [+],
attacker [+],
aslr [+],
america [+],
ambitious [+],
adobe livecycle [+],
adobe [+],
admits [+],
addresses [+],
abu dhabi [+],
Wireless [+],
Hardware [+],
French [+],
10 million [+],
storage [+],
openview [+],
denial of service [+],
safer use [+],
buffer overflow vulnerability [+],
storage data [+],
microsoft [+],
remote buffer overflow [+],
client [+],
directory traversal vulnerability [+],
watchdog,
thief,
swiss,
self,
scrutiny,
script data,
script,
remote access,
obsess,
muzik,
mps,
mp3 muzik,
mod,
metacart,
losses,
laws to,
hsbc,
government data,
government,
file,
face,
dominate,
destructing,
decrypt,
data requests,
confidential data,
confidential,
change,
card data,
card,
becoming,
base
-
-
15:11
»
SecDocs
Authors:
Lars Weiler Tags:
sniffer Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Network traffic grows faster than monitoring and analysis tools can handle. During the last two years a couple of appliances hit the market which help in finding the “bits of interest”. Recently installed strategies and solutions for carriers, banks or lawful interception organizations will be discussed as examples. Quite every laptop nowadays is capable of handling Gigabit traffic. But doing a network analysis will hit the boundaries of CPU load quite quickly. Now, with 10GbE lines as the usual speed of carrier's and company's backbone, traffic monitoring and analysis became more and more painful. Even the biggest and most expensive analysis appliances on the market are barely capable of a real time traffic monitoring for more than 8Gbit/s. That's were a couple of vendors showed up and created devices which can handle multiple 10GbE lines at the same time. They call them “Active Distributed Traffic Capture Systems” or “Intelligent Data Access Networking Switches” – in short “Data Access Systems”. The primary use is for the aggregation and distribution of traffic. But all of the Data Access Systems are also capable of filtering traffic with the help of FPGA or CPLD techniques. So a carrier, bank or lawful interception organization can aggregate the data from many physical lines into one Data Access System, enter some filters with the help of a browser GUI, and distribute the resulting traffic to the analysis machines. It's easy to monitor 100 lines of 10GbE traffic. For competitive reasons, those vendors started to invent new features for a better or easier analysis of the data on the analysis devices. These include ingress port tagging, time stamping with nanosecond accuracy, slicing of packets and recalculation of checksums in realtime, blanking bits in packets, or even layer 7 filtering for e-mail and instant messenger addresses with full flow capturing. The interesting part for the usage is to create an infrastructure where even without data retention and a long term analysis specific users or just their communication with possible ”interesting“ data for intelligence agencies can be triggered and captured in real time. So, the process of the analysis can be quickened to quite no time. It's safe to say, that the flagship appliance by a vendor has been designed by request of US intelligence agencies. Of course, those devices have to be managed by administrators. For the ease of usage every vendor moved from a CLI based configuration interface to a shiny web GUI – with a couple of flaws. It is easy to break into the system or read out the configuration without access. This lecture will discuss the possibilities of today's data analysis with the help of these Data Access Systems. An overview of the features will help to understand that data analysis devices are not anymore the limiting factor in deep packet inspection of a huge amount of traffic. Examples will show what already has been set up and what is possible by companies and organizations – and which traffic they might monitor yet. During the last three years the speaker installed those appliances from different vendors at customers across Europe, gained deep knowledge of their usage, established a strong contact to the technicians and chief officers both at the vendors and customers side, and found out a lot about the hardware and software by reverse engineering.
-
14:48
»
SecDocs
Authors:
Lars Weiler Tags:
sniffer Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Network traffic grows faster than monitoring and analysis tools can handle. During the last two years a couple of appliances hit the market which help in finding the “bits of interest”. Recently installed strategies and solutions for carriers, banks or lawful interception organizations will be discussed as examples. Quite every laptop nowadays is capable of handling Gigabit traffic. But doing a network analysis will hit the boundaries of CPU load quite quickly. Now, with 10GbE lines as the usual speed of carrier's and company's backbone, traffic monitoring and analysis became more and more painful. Even the biggest and most expensive analysis appliances on the market are barely capable of a real time traffic monitoring for more than 8Gbit/s. That's were a couple of vendors showed up and created devices which can handle multiple 10GbE lines at the same time. They call them “Active Distributed Traffic Capture Systems” or “Intelligent Data Access Networking Switches” – in short “Data Access Systems”. The primary use is for the aggregation and distribution of traffic. But all of the Data Access Systems are also capable of filtering traffic with the help of FPGA or CPLD techniques. So a carrier, bank or lawful interception organization can aggregate the data from many physical lines into one Data Access System, enter some filters with the help of a browser GUI, and distribute the resulting traffic to the analysis machines. It's easy to monitor 100 lines of 10GbE traffic. For competitive reasons, those vendors started to invent new features for a better or easier analysis of the data on the analysis devices. These include ingress port tagging, time stamping with nanosecond accuracy, slicing of packets and recalculation of checksums in realtime, blanking bits in packets, or even layer 7 filtering for e-mail and instant messenger addresses with full flow capturing. The interesting part for the usage is to create an infrastructure where even without data retention and a long term analysis specific users or just their communication with possible ”interesting“ data for intelligence agencies can be triggered and captured in real time. So, the process of the analysis can be quickened to quite no time. It's safe to say, that the flagship appliance by a vendor has been designed by request of US intelligence agencies. Of course, those devices have to be managed by administrators. For the ease of usage every vendor moved from a CLI based configuration interface to a shiny web GUI – with a couple of flaws. It is easy to break into the system or read out the configuration without access. This lecture will discuss the possibilities of today's data analysis with the help of these Data Access Systems. An overview of the features will help to understand that data analysis devices are not anymore the limiting factor in deep packet inspection of a huge amount of traffic. Examples will show what already has been set up and what is possible by companies and organizations – and which traffic they might monitor yet. During the last three years the speaker installed those appliances from different vendors at customers across Europe, gained deep knowledge of their usage, established a strong contact to the technicians and chief officers both at the vendors and customers side, and found out a lot about the hardware and software by reverse engineering.
-
14:46
»
SecDocs
Authors:
Lars Weiler Tags:
sniffer Event:
Chaos Communication Congress 27th (27C3) 2010 Abstract: Network traffic grows faster than monitoring and analysis tools can handle. During the last two years a couple of appliances hit the market which help in finding the “bits of interest”. Recently installed strategies and solutions for carriers, banks or lawful interception organizations will be discussed as examples. Quite every laptop nowadays is capable of handling Gigabit traffic. But doing a network analysis will hit the boundaries of CPU load quite quickly. Now, with 10GbE lines as the usual speed of carrier's and company's backbone, traffic monitoring and analysis became more and more painful. Even the biggest and most expensive analysis appliances on the market are barely capable of a real time traffic monitoring for more than 8Gbit/s. That's were a couple of vendors showed up and created devices which can handle multiple 10GbE lines at the same time. They call them “Active Distributed Traffic Capture Systems” or “Intelligent Data Access Networking Switches” – in short “Data Access Systems”. The primary use is for the aggregation and distribution of traffic. But all of the Data Access Systems are also capable of filtering traffic with the help of FPGA or CPLD techniques. So a carrier, bank or lawful interception organization can aggregate the data from many physical lines into one Data Access System, enter some filters with the help of a browser GUI, and distribute the resulting traffic to the analysis machines. It's easy to monitor 100 lines of 10GbE traffic. For competitive reasons, those vendors started to invent new features for a better or easier analysis of the data on the analysis devices. These include ingress port tagging, time stamping with nanosecond accuracy, slicing of packets and recalculation of checksums in realtime, blanking bits in packets, or even layer 7 filtering for e-mail and instant messenger addresses with full flow capturing. The interesting part for the usage is to create an infrastructure where even without data retention and a long term analysis specific users or just their communication with possible ”interesting“ data for intelligence agencies can be triggered and captured in real time. So, the process of the analysis can be quickened to quite no time. It's safe to say, that the flagship appliance by a vendor has been designed by request of US intelligence agencies. Of course, those devices have to be managed by administrators. For the ease of usage every vendor moved from a CLI based configuration interface to a shiny web GUI – with a couple of flaws. It is easy to break into the system or read out the configuration without access. This lecture will discuss the possibilities of today's data analysis with the help of these Data Access Systems. An overview of the features will help to understand that data analysis devices are not anymore the limiting factor in deep packet inspection of a huge amount of traffic. Examples will show what already has been set up and what is possible by companies and organizations – and which traffic they might monitor yet. During the last three years the speaker installed those appliances from different vendors at customers across Europe, gained deep knowledge of their usage, established a strong contact to the technicians and chief officers both at the vendors and customers side, and found out a lot about the hardware and software by reverse engineering.
-
-
12:22
»
Packet Storm Security Advisories
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
12:22
»
Packet Storm Security Recent Files
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
12:22
»
Packet Storm Security Misc. Files
Team SHATTER Security Advisory - Oracle Data Server versions 10gR1, 10gR2 (10.2.0.5 and previous patchsets) and 11gR1 (11.1.0.7 and previous patchsets) suffer from incomplete protection of locked accounts.
-
5:12
»
Packet Storm Security Advisories
EMC Data Protection Advisor (DPA) contains vulnerabilities that can potentially be exploited by malicious users to cause denial of service.
-
-
15:07
»
Packet Storm Security Exploits
This exploit abuses a vulnerability in the HP Data Protector service. This flaw allows an unauthenticated attacker to take advantage of the EXEC_CMD command and traverse back to /bin/sh, this allows arbitrary remote code execution under the context of root.
-
15:07
»
Packet Storm Security Recent Files
This exploit abuses a vulnerability in the HP Data Protector service. This flaw allows an unauthenticated attacker to take advantage of the EXEC_CMD command and traverse back to /bin/sh, this allows arbitrary remote code execution under the context of root.
-
15:07
»
Packet Storm Security Misc. Files
This exploit abuses a vulnerability in the HP Data Protector service. This flaw allows an unauthenticated attacker to take advantage of the EXEC_CMD command and traverse back to /bin/sh, this allows arbitrary remote code execution under the context of root.
-
-
11:01
»
Hack a Day
If you’re tired of underhanded deals going down behind closed doors maybe you need to start carrying around this transparency grenade. The enclosure is modeled after a Soviet-era F1 Hand Grenade. But it’s not filled with explosives and won’t send deadly shrapnel around the room. Instead, when the pin is pulled it starts recording audio [...]
-
-
21:41
»
SecDocs
Authors:
Andrey Belenko Dmitry Sklyarov Tags:
forensic iPhone Event:
Black Hat Abu Dhabi 2011 Abstract: iOS 5 is the latest and most advanced mobile OS from Apple. Besides tweaking UI and UX, Apple has made some changes to Data Protection mechanisms that were introduced in iOS 4. Those changes provide better security for users, but they also impose additional hurdles for mobile phone forensic process. This talk will provide detailed discussion of iOS Data Protection, focusing on both technical description of defenses and on circumventing certain protections to provide forensic access to the data stored on the iOS devices. iOS versions from iOS 3 (iPhoneOS 3) to iOS 5 will be covered.
-
-
15:34
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
17:14
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
17:14
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
17:09
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
16:54
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
16:54
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Notebook Extension.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
12:10
»
Hack a Day
[Minisystem] has a thing for dynamo powered bike lights. He wanted to measure how well his latest is working, but just logging the current flow through the LEDs wasn’t enough for him. He picked up a cheap Lux meter and hacked into the circuit to log measurements while he rides. He started by cracking open [...]
-
-
8:31
»
Packet Storm Security Exploits
HP Data Protector Media Operations versions 6.20 and below suffer from a directory traversal vulnerability. Proof of concept included.
-
-
18:04
»
SecuriTeam
Potential security vulnerabilities has been identified with HP OpenView Storage Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
18:04
»
SecuriTeam
Potential security vulnerabilities have been identified with HP OpenView Storage Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
17:04
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
16:59
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
16:59
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
19:09
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
19:09
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
18:29
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
23:32
»
Packet Storm Security Advisories
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
23:32
»
Packet Storm Security Recent Files
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
23:32
»
Packet Storm Security Misc. Files
A vulnerability exists in EMC Data Protection Advisor versions prior to 5.8.1 in which sensitive information may be exposed in clear text in the configuration file.
-
-
19:14
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP OpenView Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
7:52
»
Packet Storm Security Recent Files
Whitepaper called Defeating Data Execution Prevention and ASLR in Windows XP SP3. Data prevention Execution (DEP) and Address space layout randomization (ASLR) are two protection mechanisms integrated in Windows operating system to make more complicated the task of exploiting software. This document show how these two features can be bypassed using different techniques.
-
-
23:15
»
Packet Storm Security Exploits
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. A vulnerability in HP Data Protector could allow a remote attacker to execute arbitrary code. The vulnerability is triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector.
-
23:15
»
Packet Storm Security Recent Files
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. A vulnerability in HP Data Protector could allow a remote attacker to execute arbitrary code. The vulnerability is triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector.
-
23:15
»
Packet Storm Security Misc. Files
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. A vulnerability in HP Data Protector could allow a remote attacker to execute arbitrary code. The vulnerability is triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector.
-
23:08
»
Packet Storm Security Exploits
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. Multiple vulnerabilities have been found in HP Data Protector that could allow a remote attacker to execute arbitrary code and lead to denial of service conditions. The vulnerabilities are triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector. The request has several parameters, including an opcode. By sending requests with specially crafted parameters, the different bugs can be triggered.
-
23:08
»
Packet Storm Security Recent Files
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. Multiple vulnerabilities have been found in HP Data Protector that could allow a remote attacker to execute arbitrary code and lead to denial of service conditions. The vulnerabilities are triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector. The request has several parameters, including an opcode. By sending requests with specially crafted parameters, the different bugs can be triggered.
-
23:08
»
Packet Storm Security Misc. Files
Core Security Technologies Advisory - HP Data Protector is an automated backup and recovery software for single-server to enterprise environments. Multiple vulnerabilities have been found in HP Data Protector that could allow a remote attacker to execute arbitrary code and lead to denial of service conditions. The vulnerabilities are triggered by sending a request to port 5555 of a host running the "data protector inet" service, part of HP Data Protector. The request has several parameters, including an opcode. By sending requests with specially crafted parameters, the different bugs can be triggered.
-
-
14:10
»
Packet Storm Security Advisories
Zero Day Initiative Advisory 11-199 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java parses soundbank files. When a soundbank file contains compressed data it is first decompressed and then Java will parse the decompressed data. Java will read the 'channels' and 'frames' properties from the decompressed data and uses those to calculate a buffer size to store data. An integer wrap can occur during this calculation resulting in the creation of a buffer that is too small to hold all the data. This can result in remote code execution under the context of the current user.
-
14:10
»
Packet Storm Security Recent Files
Zero Day Initiative Advisory 11-199 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java parses soundbank files. When a soundbank file contains compressed data it is first decompressed and then Java will parse the decompressed data. Java will read the 'channels' and 'frames' properties from the decompressed data and uses those to calculate a buffer size to store data. An integer wrap can occur during this calculation resulting in the creation of a buffer that is too small to hold all the data. This can result in remote code execution under the context of the current user.
-
14:10
»
Packet Storm Security Misc. Files
Zero Day Initiative Advisory 11-199 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java parses soundbank files. When a soundbank file contains compressed data it is first decompressed and then Java will parse the decompressed data. Java will read the 'channels' and 'frames' properties from the decompressed data and uses those to calculate a buffer size to store data. An integer wrap can occur during this calculation resulting in the creation of a buffer that is too small to hold all the data. This can result in remote code execution under the context of the current user.
-
-
12:44
»
SecuriTeam
A vulnerability has been discovered in one of Data Encryption Systems DESLock+ kernel drivers.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
1:00
»
Packet Storm Security Exploits
A directory traversal vulnerability in Tele Data Contact Management Server can be exploited to read files outside of the web root.
-
-
6:29
»
Packet Storm Security Exploits
This Metasploit module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets (opcode 0x0D) via port 12401 (igssdataserver.exe), and then sending an EXE packet (opcode 0x0A) to port 12397 (dc.exe), which will cause dc.exe to run that payload with a CreateProcessA() function as a new thread.
-
6:29
»
Packet Storm Security Recent Files
This Metasploit module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets (opcode 0x0D) via port 12401 (igssdataserver.exe), and then sending an EXE packet (opcode 0x0A) to port 12397 (dc.exe), which will cause dc.exe to run that payload with a CreateProcessA() function as a new thread.
-
6:29
»
Packet Storm Security Misc. Files
This Metasploit module exploits multiple vulnerabilities found on IGSS 9's Data Server and Data Collector services. The initial approach is first by transferring our binary with Write packets (opcode 0x0D) via port 12401 (igssdataserver.exe), and then sending an EXE packet (opcode 0x0A) to port 12397 (dc.exe), which will cause dc.exe to run that payload with a CreateProcessA() function as a new thread.
-
13:30
»
Hack a Day
[Greg] built himself a small indicator dial with his laser cutter, and wanted to use it for visualizing server performance and load information. Before he started using it for server monitoring however, he thought he should test out his data parsing skills on a simpler data set. Pachube has a wealth of information that can [...]
-
-
19:50
»
SecuriTeam
This vulnerability allows an attacker to execute remote code on vulnerable installations of Hewlett-Packard Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
19:50
»
SecuriTeam
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
19:50
»
SecuriTeam
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
19:49
»
SecuriTeam
This vulnerability allows an attacker to execute remote code on vulnerable installations of the Hewlett-Packard Data Protector client.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
20:10
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of HP Data Protector Cell Manager.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
10:50
»
Packet Storm Security Recent Files
EMC Data Protection Advisor Collector for Solaris SPARC contains a potential security vulnerability that can be exploited to execute malicious code with elevated privileges on the affected system. EMC Data Protection Advisor Collector for Solaris SPARC versions 5.7 earlier than build 5833 and 5.7.1 earlier than build 5833 are affected.
-
10:50
»
Packet Storm Security Misc. Files
EMC Data Protection Advisor Collector for Solaris SPARC contains a potential security vulnerability that can be exploited to execute malicious code with elevated privileges on the affected system. EMC Data Protection Advisor Collector for Solaris SPARC versions 5.7 earlier than build 5833 and 5.7.1 earlier than build 5833 are affected.
-
-
17:50
»
SecuriTeam
A potential security vulnerability has been identified with HP OpenView Storage Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:05
»
SecuriTeam
A potential security vulnerability has been identified with HP OpenView Storage Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
11:25
»
SecuriTeam
RealPlayer contains a vulnerability in Sound Data within media files which could be exploited by remote attackers.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
21:46
»
SecuriTeam
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Microsoft Data Access Components.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
7:35
»
Hack a Day
[Ben Kokes] threw together a hardware package to capture data from a football. In the center of a Nerf football he made room for an accelerometer, gyroscope, and an electronic compass. All three can capture 3-axis data and, along with the LEDs ringing the circumference, they’ve controlled by an XMEGA192 microcontroller. This makes us think [...]
-
-
12:53
»
SecuriTeam
This vulnerability allows remote attackers to trigger a denial of service condition on vulnerable installations of Hewlett-Packard Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
12:53
»
SecuriTeam
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Hewlett-Packard Data Protector.
-
Make your website safer. Use external penetration testing service. First report ready in one hour!
-
-
13:00
»
Hack a Day
[Rafael] built a system that uses radio frequency for communications. The code he was using with the inexpensive receiver/transmitter pairs already had some error correction but from time to time an entire message would be missed by the receiver. He set out to make these RF communications more robust. A little more than a year [...]
-
11:00
»
Hack a Day
This setup helps to represent data in a meaningful way to for visually impaired people. It uses a combination of physical objects to represent data clusters, and audio feedback when manipulating those objects. In the video after the break you’ll see that the cubes can orient themselves to represent data clusters. The table top acts [...]
-
-
13:01
»
Packet Storm Security Recent Files
HP Security Bulletin - A potential security vulnerability has been identified with HP Data Protector Express 3.x and 4.x and HP Data Protector Express Single Server Edition (SSE) 3.x and 4.x running on supported Microsoft Windows, Linux, and NetWare versions. The vulnerability could be exploited locally to create a Denial of Service (DoS) or to execute arbitrary code.
-
13:00
»
Packet Storm Security Advisories
HP Security Bulletin - A potential security vulnerability has been identified with HP Data Protector Express 3.x and 4.x and HP Data Protector Express Single Server Edition (SSE) 3.x and 4.x running on supported Microsoft Windows, Linux, and NetWare versions. The vulnerability could be exploited locally to create a Denial of Service (DoS) or to execute arbitrary code.
-
12:00
»
Packet Storm Security Advisories
HP Security Bulletin - A potential security vulnerability has been identified with HP Data Protector Express 3.x and 4.x and HP Data Protector Express Single Server Edition (SSE) 3.x and 4.x running on supported Microsoft Windows versions. The vulnerability could be exploited locally to create a Denial of Service (DoS) or to execute arbitrary code.
-
-
9:01
»
SecurityFocus Vulnerabilities
[security bulletin] HPSBMA02576 SSRT090231 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Local Denial of Service (DoS), Execution of Arbitrary Code
-
8:00
»
SecurityFocus Vulnerabilities
[security bulletin] HPSBMA02516 SSRT090232 rev.1 - HP Data Protector Express and HP Data Protector Express Single Server Edition (SSE), Local
-
-
0:00
»
SecurityFocus Vulnerabilities
libsndfile Audio Data Multiple Denial Of Service Vulnerabilities