jetlib.sec » Tags » text

Feeds

133445 items (0 unread) in 27 feeds

• 1337day (was: Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

48 items tagged "text"

Related tags: webkit [+], microsoft [+], hacks [+], txt [+], nodes [+], buffer overflow vulnerability [+], apple safari [+], wordpress [+], vulnerability research [+], vopium [+], visual [+], typed [+], text widget [+], text password [+], text javascript [+], text ads [+], stack buffer [+], s.s.t javascript [+], s.s.t [+], proof of concept [+], password [+], owncloud [+], objects [+], microsoft visual basic [+], memory corruption [+], leaks [+], keylogger [+], iphone [+], integer overflow [+], idevspot [+], disclosure [+], cross site scripting [+], critical vulnerability [+], code execution [+], clear [+], android [+], advanced [+], wordpad [+], word list [+], ultraedit [+], text message [+], text converter [+], sql injection [+], spam [+], sorted [+], python [+], progress [+], microsoft wordpad [+], message [+], list [+], ico says [+], hijacking [+], epidemic [+], elements [+], dll [+], cellphones [+], arduino [+], adventure [+], vulnerability [+], zork [+], xampp [+], webapps [+], vector representations [+], vector paths [+], vector [+], texts [+], text parameter [+], text nodes [+], text exchange [+], text based adventure games [+], text adventure games [+], teletype machine [+], teletype [+], sql [+], sms text [+], sms [+], sid [+], service vulnerability [+], sending a text message [+], send [+], safer use [+], ruby [+], remote buffer overflow [+], raided [+], premium rate [+], plain [+], passwords [+], nokia [+], nmap [+], niece nephew [+], newt text [+], newt [+], metasploit [+], message editor [+], manchester [+], machine translation [+], mac text [+], louis [+], linux [+], irrigation system [+], irrigation [+], integer [+], inkscape [+], hunt the wumpus [+], gsm module [+], free memory [+], forced [+], engraving fonts [+], editor dll [+], editing [+], denial of service [+], day [+], cnc [+], clampdown [+], box [+], biz [+], apple logging [+], apple [+], Area [+]

• May 11, 2012
• 8:34

  Owncloud 3.0.3 Clear Text Password Storage

   » ‎ Packet Storm Security Exploits
  Owncloud versions 3.0.3 and below suffer from a clear text ldap password disclosure vulnerability in owncloud.db.

  Tags:  owncloud password text text-password vulnerability disclosure  

• 8:34

  Owncloud 3.0.3 Clear Text Password Storage

   » ‎ Packet Storm Security Recent Files
  Owncloud versions 3.0.3 and below suffer from a clear text ldap password disclosure vulnerability in owncloud.db.

  Tags:  owncloud password text text-password vulnerability disclosure  

• 8:34

  Owncloud 3.0.3 Clear Text Password Storage

   » ‎ Packet Storm Security Misc. Files
  Owncloud versions 3.0.3 and below suffer from a clear text ldap password disclosure vulnerability in owncloud.db.

  Tags:  owncloud password text text-password vulnerability disclosure  

• May 07, 2012
• 12:48

  Apple Logging Passwords In Plain Text

   » ‎ Packet Storm Security Headlines
  Apple Logging Passwords In Plain Text

  Tags:  plain passwords text apple-logging apple  

• April 27, 2012
• 10:01

  Text adventures for Arduino starting with Hunt the Wumpus

   » ‎ Hack a Day
  Let’s be honest, you’re going to have trouble getting kids to play text-based adventure games these days. But this is one way to get them interested. This weekend you should get together with niece, nephew, son, or daughter and help them build their own hardware and program it with an adventure game. One last project [...]

  Tags:  arduino adventure text hunt-the-wumpus niece-nephew text-based-adventure-games hacks  

• April 15, 2012
• 9:07

  Playing Zork on the Arduino

   » ‎ Hack a Day
  If you’re looking for something to do on a boring Sunday afternoon, how about dusting off your Arduino and playing a text adventure? [Louis] wrote in to tell us about his project called AZIP, an app that will let you play classic 1980s text adventures on your Arduino. The famous Infocom text adventure games such [...]

  Tags:  arduino adventure text louis text-adventure-games zork hacks  

• March 29, 2012
• 14:00

  [webapps / 0day] - Text Exchange Pro CSRF Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [webapps / 0day] - Text Exchange Pro CSRF Vulnerability

  Tags:  day text webapps text-exchange vulnerability  

• March 02, 2012
• 7:23

  Manchester Biz Raided In Text Message Spam Clampdown

   » ‎ Packet Storm Security Headlines
  Manchester Biz Raided In Text Message Spam Clampdown

  Tags:  biz text raided manchester clampdown text-message  

• January 20, 2012
• 21:18

  Vopium Clear Text Disclosure

   » ‎ Packet Storm Security Advisories
  Vopium for Android and iPhone leaks various data such as your password by passing it in the clear.

  Tags:  vopium clear text iphone android leaks  

• 21:18

  Vopium Clear Text Disclosure

   » ‎ Packet Storm Security Recent Files
  Vopium for Android and iPhone leaks various data such as your password by passing it in the clear.

  Tags:  vopium clear text iphone android leaks  

• 21:18

  Vopium Clear Text Disclosure

   » ‎ Packet Storm Security Misc. Files
  Vopium for Android and iPhone leaks various data such as your password by passing it in the clear.

  Tags:  vopium clear text iphone android leaks  

• January 04, 2012
• 13:20

  S.S.T Javascript Keylogger

   » ‎ Packet Storm Security Recent Files
  S.S.T (Save Typed Text) javascript proof of concept keylogging code.

  Tags:  keylogger typed text s.s.t-javascript s.s.t proof-of-concept text-javascript  

• 13:20

  S.S.T Javascript Keylogger

   » ‎ Packet Storm Security Tools
  S.S.T (Save Typed Text) javascript proof of concept keylogging code.

  Tags:  keylogger typed text s.s.t-javascript s.s.t proof-of-concept text-javascript  

• 13:20

  S.S.T Javascript Keylogger

   » ‎ Packet Storm Security Misc. Files
  S.S.T (Save Typed Text) javascript proof of concept keylogging code.

  Tags:  keylogger typed text s.s.t-javascript s.s.t proof-of-concept text-javascript  

• December 20, 2011
• 8:41

  Mobiles Forced To Send Premium-Rate Texts In New Attack

   » ‎ Packet Storm Security Headlines
  Mobiles Forced To Send Premium-Rate Texts In New Attack

  Tags:  forced text send premium-rate texts  

• December 08, 2011
• 17:11

  ICO Says It's Making Progress On Spam Text Epidemic

   » ‎ Packet Storm Security Headlines
  ICO Says It's Making Progress On Spam Text Epidemic

  Tags:  spam progress text ico-says epidemic  

• 8:28

  ICO Says It's Making Progress On Spam Text Epidemic

   » ‎ Packet Storm Security Headlines
  ICO Says It's Making Progress On Spam Text Epidemic

  Tags:  spam progress text ico-says epidemic  

• November 21, 2011
• 17:10

  WordPress Advanced Text Widget Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  The WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability.

  Tags:  wordpress text advanced text-widget cross-site-scripting vulnerability  

• 17:10

  WordPress Advanced Text Widget Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  The WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability.

  Tags:  wordpress text advanced text-widget cross-site-scripting vulnerability  

• 17:10

  WordPress Advanced Text Widget Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  The WordPress Advanced Text Widget plugin suffers from a cross site scripting vulnerability.

  Tags:  wordpress text advanced text-widget cross-site-scripting vulnerability  

• August 18, 2011
• 18:43

  Text To Sorted Word-List Creator

   » ‎ Packet Storm Security Recent Files
  Text to Sorted with no repeated elements Word-List creator in Python 3.

  Tags:  list sorted text word-list python elements  

• 18:43

  Text To Sorted Word-List Creator

   » ‎ Packet Storm Security Misc. Files
  Text to Sorted with no repeated elements Word-List creator in Python 3.

  Tags:  list sorted text word-list python elements  

• August 02, 2011
• 13:01

  Only losers text message on cellphones – this guy carries his own teletype for that

   » ‎ Hack a Day
  Yes, that’s an SMS text messaging device. [Mdziewie] decided that texting on a regular cellphone was too boring and decided to build himself an old-school SMS gateway. Here’s a translated link but the formatting of the forum post gets screwed up with the machine translation. The device he’s using is an ASR-33 Teletype machine, which [...]

  Tags:  sms teletype text teletype-machine machine-translation sms-text cellphones hacks  

• July 07, 2011
• 18:44

  Apple Safari Text Nodes Use-after-free Vulnerability

   » ‎ SecuriTeam
  Apple Safari contains a vulnerability caused by a use-after-free error in the WebKit library when processing certain text nodes.

  -

  Make your website safer. Use external penetration testing service. First report ready in one hour!

  Tags:  nodes vulnerability text apple-safari text-nodes safer-use  

• April 15, 2011
• 7:31

  Apple Safari Text Nodes Remote Use-After-Free

   » ‎ Packet Storm Security Advisories
  The VUPEN Vulnerability Research Team discovered a critical vulnerability in Apple Safari. The vulnerability is caused by a use-after-free error in the WebKit library when processing certain text nodes, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

  Tags:  nodes vulnerability text apple-safari vulnerability-research critical-vulnerability  

• 7:31

  Apple Safari Text Nodes Remote Use-After-Free

   » ‎ Packet Storm Security Recent Files
  The VUPEN Vulnerability Research Team discovered a critical vulnerability in Apple Safari. The vulnerability is caused by a use-after-free error in the WebKit library when processing certain text nodes, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

  Tags:  nodes vulnerability text apple-safari vulnerability-research critical-vulnerability  

• 7:31

  Apple Safari Text Nodes Remote Use-After-Free

   » ‎ Packet Storm Security Misc. Files
  The VUPEN Vulnerability Research Team discovered a critical vulnerability in Apple Safari. The vulnerability is caused by a use-after-free error in the WebKit library when processing certain text nodes, which could be exploited by remote attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page.

  Tags:  nodes vulnerability text apple-safari vulnerability-research critical-vulnerability  

• March 22, 2011
• 0:00

  Vuln: Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

  Tags:  visual microsoft text buffer-overflow-vulnerability stack-buffer microsoft-visual-basic  

• March 06, 2011
• 7:21

  Inkscape plugin for engraving fonts

   » ‎ Hack a Day
  [Windell] developed an Inkscape extension called Hershey Text that helps you process fonts into vector representations. If you’ve tried to 3D print, plot, or mill text in the past you may have run across the problem of generating vector paths that deal with the outline and fill of the text appropriately. The problem stems from [...]

  Tags:  inkscape vector text vector-representations engraving-fonts vector-paths cnc hacks  

• March 02, 2011
• 0:00

  Vuln: WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

  Tags:  webkit objects text integer-overflow code-execution vulnerability  

• February 12, 2011
• 9:28

  SMS controlled irrigation

   » ‎ Hack a Day
  [Mhkabir] built an irrigation system that communicates by text message. The concept is simple, sending a text message to the system will cause it to switch on the water pump. Many times we see text message manipulation via the Internet, or using a GSM module. But in this case an inexpensive cellphone is used as [...]

  Tags:  irrigation text message sending-a-text-message irrigation-system gsm-module cellphones hacks  

• January 25, 2011
• 0:00

  Vuln: WebKit Text Editing Use After Free Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WebKit Text Editing Use After Free Memory Corruption Vulnerability

  Tags:  editing webkit text memory-corruption free-memory vulnerability  

• 0:00

  Vuln: WebKit Large Text Area (CVE-2010-4198) Denial of Service Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WebKit Large Text Area (CVE-2010-4198) Denial of Service Vulnerability

  Tags:  webkit Area text service-vulnerability denial-of-service  

• January 07, 2011
• 0:00

  Vuln: WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

  Tags:  webkit objects text integer-overflow code-execution vulnerability  

• November 23, 2010
• 0:00

  Vuln: WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  WebKit 'Text' Objects Integer Overflow Remote Code Execution Vulnerability

  Tags:  webkit objects text integer-overflow code-execution vulnerability  

• October 01, 2010
• 14:00

  [local exploits] - Nokia Text Message Editor Dll Hijacking Exploit

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  [local exploits] - Nokia Text Message Editor Dll Hijacking Exploit

  Tags:  nokia message text editor-dll message-editor text-message  

• September 20, 2010
• 0:00

  Vuln: Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability

  Tags:  microsoft wordpad text microsoft-wordpad memory-corruption text-converter  

• September 17, 2010
• 0:00

  Vuln: Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft WordPad Text Converter Word 97 File Parsing Memory Corruption Vulnerability

  Tags:  microsoft wordpad text microsoft-wordpad memory-corruption text-converter  

• September 12, 2010
• 20:00

  ultraedit-dllhijack.txt

   » ‎ Packet Storm Security Recent Files
  UltraEdit Text Editor version 16.10.0.1036 suffers from an insecure DLL hijacking vulnerability.

  Tags:  txt ultraedit text hijacking vulnerability dll  

• 20:00

  ultraedit-dllhijack.txt

   » ‎ Packet Storm Security Advisories
  UltraEdit Text Editor version 16.10.0.1036 suffers from an insecure DLL hijacking vulnerability.

  Tags:  txt ultraedit text hijacking vulnerability dll  

• June 07, 2010
• 19:01

  idevspottextads-sql.txt

   » ‎ Packet Storm Security Recent Files
  iDevSpot Text Ads version 2.08 suffers from a remote SQL injection vulnerability.

  Tags:  txt idevspot text sql-injection text-ads vulnerability  

• 19:00

  idevspottextads-sql.txt

   » ‎ Packet Storm Security Exploits
  iDevSpot Text Ads version 2.08 suffers from a remote SQL injection vulnerability.

  Tags:  txt idevspot text sql-injection text-ads vulnerability  

• June 06, 2010
• 1:00

  idevspot Text ads 2.08 SQL Injection Vulnerability

   » ‎ 1337day (was: Inj3ct0r, 1337db)
  idevspot Text ads 2.08 SQL Injection Vulnerability

  Tags:  idevspot sql text text-ads vulnerability  

• June 02, 2010
• 0:00

  Vuln: Newt Text Box Content Processing Remote Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Newt Text Box Content Processing Remote Buffer Overflow Vulnerability

  Tags:  box newt text buffer-overflow-vulnerability remote-buffer-overflow newt-text  

• May 18, 2010
• 0:00

  Vuln: Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

  Tags:  visual microsoft text buffer-overflow-vulnerability stack-buffer microsoft-visual-basic  

• May 11, 2010
• 0:00

  Vuln: Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Microsoft Visual Basic for Applications Text Parsing Stack Buffer Overflow Vulnerability

  Tags:  visual microsoft text buffer-overflow-vulnerability stack-buffer microsoft-visual-basic  

• January 29, 2010
• 0:00

  Vuln: XAMPP for Linux 'text' Parameter Multiple Cross-Site Scripting Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  XAMPP for Linux 'text' Parameter Multiple Cross-Site Scripting Vulnerabilities

  Tags:  xampp text linux text-parameter  

• January 22, 2010
• 6:45

  Ruby, Nmap XML, and Databases

   » ‎ Carnal0wnage
  So I had a requirement to take some output from nmap scans, shove it into a database and then be able to run some queries on that data.
  
  Wait, isn't there something that already does that?!
  
  Actually PBNJ and nmap_xml2sql.pl will do this but uses (eeeek!) perl to do it. I wanted to do it in Ruby.
  
  Your options for Ruby & Nmap parsing are:
  
  -rubynmap http://rubynmap.sourceforge.net/
  -ruby-nmap http://ruby-nmap.rubyforge.org/
  -metasploit has its own nmap xml parser
  -writing your own
  
  I started with rubynmap for my parsing gem.
  (Note: use the svn version. the version # hasn't changed but the svn version works alot better)
  
  I stole the schema from nmap_xml2sql and added a few things and a scripts table for nmap scripts output and tried shoving that into a sqlite3 database.
  

  TABLE nmap (
                 sid INTEGER PRIMARY KEY AUTOINCREMENT,
                 version TEXT,
                 xmlversion TEXT,
                 args TEXT,
                 types TEXT,
                 starttime INTEGER,
                 startstr TEXT,
                 endtime INTEGER,
                 endstr TEXT,
                 numservices INTEGER)
  
  TABLE hosts (
                 sid INTEGER,
                 hid INTEGER PRIMARY KEY AUTOINCREMENT,
                 ip4 TEXT,
                 ip4num INTEGER,
                 hostname TEXT,
                 status TEXT,
                 tcpcount INTEGER,
                 udpcount INTEGER,
                 mac TEXT,
                 vendor TEXT,
                 ip6 TEXT,
                 distance INTEGER,
                 uptime TEXT,
                 upstr TEXT)
  

  ----SNIP----

  This "works" but sqlite3 doesn't seem to actually support foreign keys. So while I was correctly assigning a SID value in nmap that value wasn't linking up in hosts and the HID value in subsequent tables. If I'm wrong here please let me know if this works for you as written. For me in populates with nulls and I don't see how its linking back to the tables.
  

  cg@ihatesql:~$ sqlite3 nmap
  SQLite version 3.6.21
  sqlite> .dump nmap
  CREATE TABLE nmap (
                  sid INTEGER PRIMARY KEY AUTOINCREMENT,
                  nmapversion TEXT,
                  xmlversion TEXT,
                  args TEXT,
                  types TEXT,
                  starttime INTEGER,
                  startstr TEXT,
                  endtime INTEGER,
                  endstr TEXT,
                  numservices INTEGER);
  INSERT INTO "nmap" VALUES(1,'4.90RC1','1.03','nmap -A -oX test.xml 209.20.85.250','connect',1262181807,'Wed Dec 30 09:03:27 2009',1262181814,'Wed Dec 30 09:03:34 2009',1000);
  COMMIT;
  
  sqlite> .dump hosts
  CREATE TABLE hosts (
                  sid INTEGER ,
                  hid INTEGER PRIMARY KEY AUTOINCREMENT,
                  ip4num INTEGER,  
                  hostname TEXT,
                  status TEXT,           
                  mac TEXT,
                  vendor TEXT,
                  ip6 TEXT,   
                  distance INTEGER,
                  uptime TEXT,
                  starttime INTEGER,
                  endtime INTEGER,
          );
  INSERT INTO "hosts" VALUES(NULL,1,'209.20.85.250','209-20-85-250.slicehost.net','up','','','','','',1262181807,1262181814);
  COMMIT;
  

  so we can see that the SID and HID are correctly auto incrementing but the SID didn't make it into the hosts table
  
  **Actually sqlite3 as of 3.6.19 supports foreign keys...by adding a
  FOREIGN KEY(sid) REFERENCES nmap(sid) to the hosts table and so on. And by declaring PRAGMA foreign_keys = ON.
  
  BUT I still couldn't get it to work.
  
  doing a db.execute("PRAGMA foreign_keys = ON") wasn't working for me. I received no errors but doing a dump on the table would list the foreign key support as OFF :-( maybe its a gem issue?
  
  So to cheat I added ip4num, ip6, hostname to tables i knew I'd be querying a lot like ports and scripts.
  

  
        CREATE TABLE ports (
                    hid INTEGER,
                    ip4num INTEGER,
                    ip6 TEXT,
                    port INTEGER,
                    state TEXT,
                    reason TEXT,
                    name TEXT,
                    tunnel TEXT,
                    product TEXT,
                    version TEXT,
                    extra TEXT,
                    confidence INTEGER,
                    method TEXT,
                    proto TEXT,
                    owner TEXT,   
                    rpcnum TEXT,
                    fingerprint TEXT,
            FOREIGN KEY(hid) REFERENCES hosts(hid)
            )
  

  
  That way, querying for open ports or specific versions of a service were possible and I could still get an IP associated with that. A bit harder to pull all that information together but still there and a select * from ports; or select ip4num from ports where port = 1521; would return quick results.
  
  So code or it didn't happen...
  
  nmap-parse takes an nmap xml file and spits out some of the results
  http://carnal0wnage.attackresearch.com/sites/default/files/nmap-parse.txt
  
  rubynmapsqlite3 takes an nmapfile and database name (optional), creates or connects to the database, populates the tables if it needs to, parses the nmap xml and puts it into its appropriate tables.
  http://carnal0wnage.attackresearch.com/sites/default/files/nmapsqlite3.txt
  
  ruby-nmap-parse uses the ruby-nmap gem to parse nmap xml files
  http://carnal0wnage.attackresearch.com/sites/default/files/ruby-nmap-parse.txt
  
  caveats:
  -my ruby coding sucks.
  -my SQL coding sucks worse.
  -code is released in "works for me" status
  -send diffs not complaints :-) unless you go crazy with it, in which case just send me a link to your code
  
  Next up pushing that data into a postgres database instead of sqlite3.

  Tags:  nmap text integer sid ruby mac-text metasploit