jetlib.sec

Feeds

248575 items (0 unread) in 27 feeds

• 0day.today (was: 1337day, Inj3ct0r, 1337db)
• OSVDB Vulnerabilities
• Exploit-DB
• SecurityFocus Vulnerabilities
• Bugtraq
• Full Disclosure
• XSSed
• Packet Storm Security Headlines
• Packet Storm Security Advisories
• Packet Storm Security Exploits
• Packet Storm Security Recent Files
• Packet Storm Security Tools
• Packet Storm Security Misc. Files
• Sophos security news
• Sophos product advisories
• Penetration Testing
• SecuriTeam
• BackTrack Linux Forums
• Threatpost
• SecDocs
• carnal0wnage.attackresearch.com
• Carnal0wnage
• Kernel Fun
• Darknet
• The Exploitant
• Hack a Day
• Wirevolution

Recent items

• December 15, 2018
• 22:00

  Shape Shifting Structures Work With Magnets

   » ‎ Hack a Day

  In The Dark Knight, Lucius Fox shows Bruce Wayne a neat bit of memory weave fabric. In its resting state, it is a light, flexible material, but when an electrical current is applied, it pops into a pre-programmed shape. That shape could be a tent or a bat-themed paraglider. Science has not caught up to Hollywood in this regard, but the concept has been demonstrated in a material which increases its rigidity up to 318% within one second when placed in a magnetic field. Those numbers do not mean a lot by themselves, but increasing rigidity in a reversible, …read more

  Tags:  printer hacks  

• 19:00

  Manhattan Mystery of Creepy Jingles and Random Noises Solved

   » ‎ Hack a Day

  Here’s a puzzler for you: If you’re phreaking something that’s not exactly a phone, are you still a phreak?

  That question probably never crossed the minds of New Yorkers who were acoustically assaulted on the normally peaceful sidewalks of Manhattan over the summer by creepy sounds emanating from streetside WiFi kiosks. The auditory attacks caused quite a stir locally, leading to wild theories that Russian hackers were behind it all. Luckily, the mystery has been solved, and it turns out to have been part prank, part protest, and part performance art piece.

  To understand the exploit, realize that New York …read more

  Tags:  phone hacks  

• 16:00

  Imploding Tiny 3D Prints

   » ‎ Hack a Day

  If you think about 3D printing, the ultimate goal would be to lay down specific atoms or molecule and build anything. Despite a few lab demonstrations at that scale, generally, it is easier to print in the macro scale than the micro. While it won’t get down to the molecule level, implosion fabrication is a new technique researchers hope will allow you to print large things and then shrink them. The paper describing the process appeared in Science. If you don’t want to pay your way through the paywall, you can read a summary on NewScientist or C&EN. Or you …read more

  Tags:  printer hacks  

• 13:00

  This 6502 Made From 74-Series Logic Can Run At 20 MHz

   » ‎ Hack a Day

  If you always wished you could get closer to the hardware with the 6502 in your classic microcomputer you’re in luck, because [Drass] has created a beautiful implementation of a 6502 using TTL logic chips. What makes it special is that it sits on a very neat set of PCBs, and due to its use of 74AC series logic it can run at much higher speeds than the original. A 20 MHz 6502 would have been revolutionary in the mid-1970s.

  Through a flying ribbon cable, it can plug directly into the 6502 socket on classic microcomputers, and the website shows …read more

  Tags:  classic hacks  

• 10:00

  Maze Generator Keeps Plotter (and Kids) Busy

   » ‎ Hack a Day

  We can tell that [Jon Howell] is our kind of guy. After updating his vintage 1985 Hewlett-Packard plotter with WiFi and the ability to load SVG files, he obviously needed to find a bunch of stuff to run off with it. Gotta justify those hacks somehow. So he doubled down and decided support a hack with another hack by writing a maze generator to keep his plotter well fed. He was kind enough to unleash his creation on an unsuspecting Internet as an open source project, and now we all can benefit from a couple of reams worth of mazes. …read more

  Tags:  Software hacks  

• 7:00

  Young Entrepreneurs Learn What Really Goes Into Making a Product

   » ‎ Hack a Day

  Just to be clear, the primary goal of the Papas Inventeurs (Inventor Dads) was to have the kids make something, have fun, and learn. In that light, they enjoyed a huge success. Four children designed, made, and sold laser-cut napkin rings from a booth at the Ottawa Maker Faire as a fun learning process (English translation, original link in French.) [pepelepoisson] documented the entire thing from beginning to end with plenty of photos. Things started at proof of concept, then design brainstorming, prototyping, manufacture, booth design, and finally sales. While adults were involved, every step was done by the kids …read more

  Tags:  art  

• 6:27

  Hacker Banner Ads Are Totally Wild

   » ‎ Packet Storm Security Headlines
  Hacker Banner Ads Are Totally Wild

  Tags:  headlinehackercybercrime  

• 6:27

  70% Of Americans Worried About Holiday Shopping Identity Theft

   » ‎ Packet Storm Security Headlines
  70% Of Americans Worried About Holiday Shopping Identity Theft

  Tags:  headlinebankcybercrimefraudidentity theft  

• 6:26

  Were Taylor Swift Fans Tracked At Her Gig?

   » ‎ Packet Storm Security Headlines
  Were Taylor Swift Fans Tracked At Her Gig?

  Tags:  headlinegovernmentprivacy  

• 6:26

  Ebola Outbreak Reaches City Of 1 Million Residents

   » ‎ Packet Storm Security Headlines
  Ebola Outbreak Reaches City Of 1 Million Residents

  Tags:  headlineafricascience  

• 6:26

  Electric Vehicle Charging Stations Open To IoT Attacks

   » ‎ Packet Storm Security Headlines
  Electric Vehicle Charging Stations Open To IoT Attacks

  Tags:  headlineflaw  

• 4:00

  Bust A Move Doesn’t Have To Be Such A Grind

   » ‎ Hack a Day

  PC gamers have the benefit of the mouse and keyboard, which are highly flexible when it comes to input devices for gaming. What’s more, the freedom of the platform means that it’s easy to whip up whatever mad controller you can dream of to best suit the games you’re playing. Enter [Tom Tilley] with the aptly-named Hipster Game Controller.

  Yes, this is a controller made out of a coffee grinder. The hand-crank setup makes it perfect for imitating the game board in that puzzle classic, Bust-A-Move. [Tom] interfaces the controller in a perfectly hacky way – the scroll wheel from …read more

  Tags:  games  

• 1:00

  Reflex Trainer Puts Athletes To The Test

   » ‎ Hack a Day

  Being a top athlete in this modern age is a full-time job. No longer do athletes simply practice at their nominated sport of choice. They undergo strength training, full nutritional programs, cardio, and even reflex training.

  Reflex training involves a series of nodes that an athlete must identify when lit up, and touch them to switch them off. By triggering them in a fast sequence, the athlete must work hard to both identify the lit node and then move to switch it off. TrainerLights is just such a system, built around the NodeMCU platform.

  The system consists of a minimum …read more

  Tags:  classic hacks  

• 0:00

  Vuln: Multiple Huawei Products CVE-2017-17167 Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Multiple Huawei Products CVE-2017-17167 Information Disclosure Vulnerability

  Tags:   

• December 14, 2018
• 22:00

  Build Your Own Anechoic Chamber

   » ‎ Hack a Day

  For professional-level sound recording, you’ll need professional-level equipment. Microphones and mixing gear are the obvious necessities, as well as a good computer with the right software on it. But once you have those things covered, you’ll also need a place to record. Without a good acoustic space, you’ll have all kinds of reflections and artefacts in your sound recordings, and if you can’t rent a studio you can always build your anechoic chamber.

  While it is possible to carpet the walls of a room or randomly glue egg crate foam to your walls, [Tech Ingredients] tests some homemade panels of …read more

  Tags:  how-to  

• 19:00

  A Lecture By A Fun Guy

   » ‎ Hack a Day

  Many people hear “fungus” and think of mushrooms. This is akin to hearing “trees” and thinking of apples. Fungus makes up 2% of earth’s total biomass or 10% of the non-plant biomass, and ranges from the deadly to the delicious. This lecture by [Justin Atkin] of [The Thought Emporium] is slightly shorter than a college class period but is like a whole semester’s worth of tidbits, and the lab section is about growing something (potentially) edible rather than a mere demonstration. The video can also be found below the break.

  Let’s start with the lab where we learn to grow …read more

  Tags:  chemistry hacks  

• 17:28

  Special Counsel Slams Michael Flynn's Criticism Of FBI Interview

   » ‎ Packet Storm Security Headlines
  Special Counsel Slams Michael Flynn's Criticism Of FBI Interview

  Tags:  headlinegovernmentusafbi  

• 17:26

  Facebook Could Face Billion Dollar Fine For Data Breaches

   » ‎ Packet Storm Security Headlines
  Facebook Could Face Billion Dollar Fine For Data Breaches

  Tags:  headlinegovernmentprivacydata lossfacebooksocial  

• 17:24

  Sextortion Gang Found To Be Behind Email Bomb Threat Spree

   » ‎ Packet Storm Security Headlines
  Sextortion Gang Found To Be Behind Email Bomb Threat Spree

  Tags:  headlinemalwarecybercrimeterror  

• 17:24

  Facebook Exposed Up To 6.8 Million Users' Private Photos

   » ‎ Packet Storm Security Headlines
  Facebook Exposed Up To 6.8 Million Users' Private Photos

  Tags:  headlineprivacydata lossflawfacebooksocial  

• 16:00

  Lessons Learned From A 1-Day RTL-SDR Enclosure Project

   » ‎ Hack a Day

  [ByTechLab] needed an enclosure for his R820T2 based RTL-SDR, which sports an SMA connector. Resolving to design and 3D print one in less than a day, he learned a few things about practical design for 3D printing and shared them online along with his CAD files.

  The RTL-SDR is a family of economical software defined radio receivers, and [ByTechLab]’s’ enclosure (CAD files available on GrabCAD and STL on Thingiverse) is specific to his model. However, the lessons he learned are applicable to enclosure design in general, and a few of them specifically apply to 3D printing.

  He started by making …read more

  Tags:  printer hacks  

• 15:29

  Facebook And Google Reviews System For Businesses 1.1 Code Execution

   » ‎ Packet Storm Security Exploits
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a code execution vulnerability.

  Tags:   

• 15:29

  Facebook And Google Reviews System For Businesses 1.1 Code Execution

   » ‎ Packet Storm Security Recent Files
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a code execution vulnerability.

  Tags:   

• 15:29

  Facebook And Google Reviews System For Businesses 1.1 Code Execution

   » ‎ Packet Storm Security Misc. Files
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a code execution vulnerability.

  Tags:   

• 15:28

  Facebook And Google Reviews System For Businesses 1.1 SQL Injection

   » ‎ Packet Storm Security Exploits
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a remote SQL injection vulnerability.

  Tags:   

• 15:28

  Facebook And Google Reviews System For Businesses 1.1 SQL Injection

   » ‎ Packet Storm Security Recent Files
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a remote SQL injection vulnerability.

  Tags:   

• 15:28

  Facebook And Google Reviews System For Businesses 1.1 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Facebook And Google Reviews System For Businesses version 1.1 suffers from a remote SQL injection vulnerability.

  Tags:   

• 15:22

  GNU inetutils 1.9.4 telnet.c Overflows

   » ‎ Packet Storm Security Exploits
  GNU inetutils versions 1.9.4 and below are vulnerable to a stack overflow vulnerability in the client-side environment variable handling which can be exploited to escape restricted shells on embedded devices. Most modern browsers no longer support telnet:// handlers, but in instances where URI handlers are enabled to the inetutils telnet client this issue maybe remotely triggerable. A stack-based overflow is present in the handling of environment variables when connecting telnet.c to remote telnet servers through oversized DISPLAY arguments. A heap-overflow is also present which can be triggered in a different code path due to supplying oversized environment variables during client connection code.

  Tags:   

• 15:22

  GNU inetutils 1.9.4 telnet.c Overflows

   » ‎ Packet Storm Security Recent Files
  GNU inetutils versions 1.9.4 and below are vulnerable to a stack overflow vulnerability in the client-side environment variable handling which can be exploited to escape restricted shells on embedded devices. Most modern browsers no longer support telnet:// handlers, but in instances where URI handlers are enabled to the inetutils telnet client this issue maybe remotely triggerable. A stack-based overflow is present in the handling of environment variables when connecting telnet.c to remote telnet servers through oversized DISPLAY arguments. A heap-overflow is also present which can be triggered in a different code path due to supplying oversized environment variables during client connection code.

  Tags:   

• 15:22

  GNU inetutils 1.9.4 telnet.c Overflows

   » ‎ Packet Storm Security Misc. Files
  GNU inetutils versions 1.9.4 and below are vulnerable to a stack overflow vulnerability in the client-side environment variable handling which can be exploited to escape restricted shells on embedded devices. Most modern browsers no longer support telnet:// handlers, but in instances where URI handlers are enabled to the inetutils telnet client this issue maybe remotely triggerable. A stack-based overflow is present in the handling of environment variables when connecting telnet.c to remote telnet servers through oversized DISPLAY arguments. A heap-overflow is also present which can be triggered in a different code path due to supplying oversized environment variables during client connection code.

  Tags:   

• 15:21

  Mikrotik RouterOS Telnet Arbitrary Root File Creation

   » ‎ Packet Storm Security Exploits
  An exploitable arbitrary file creation weakness has been identified in Mikrotik RouterOS that can be leveraged by a malicious attacker to exploit all known versions of Mikrotik RouterOS. The RouterOS contains a telnet client based on GNU inetutils with modifications to remove shell subsystem. However an attacker can leverage the "set tracefile" option to write an arbitrary file into any "rw" area of the filesystem, escaping the restricted shell to gain access to a "ash" busybox shell on some versions. The file is created with root privileges regardless of the RouterOS defined group.

  Tags:   

• 15:21

  Mikrotik RouterOS Telnet Arbitrary Root File Creation

   » ‎ Packet Storm Security Recent Files
  An exploitable arbitrary file creation weakness has been identified in Mikrotik RouterOS that can be leveraged by a malicious attacker to exploit all known versions of Mikrotik RouterOS. The RouterOS contains a telnet client based on GNU inetutils with modifications to remove shell subsystem. However an attacker can leverage the "set tracefile" option to write an arbitrary file into any "rw" area of the filesystem, escaping the restricted shell to gain access to a "ash" busybox shell on some versions. The file is created with root privileges regardless of the RouterOS defined group.

  Tags:   

• 15:21

  Mikrotik RouterOS Telnet Arbitrary Root File Creation

   » ‎ Packet Storm Security Misc. Files
  An exploitable arbitrary file creation weakness has been identified in Mikrotik RouterOS that can be leveraged by a malicious attacker to exploit all known versions of Mikrotik RouterOS. The RouterOS contains a telnet client based on GNU inetutils with modifications to remove shell subsystem. However an attacker can leverage the "set tracefile" option to write an arbitrary file into any "rw" area of the filesystem, escaping the restricted shell to gain access to a "ash" busybox shell on some versions. The file is created with root privileges regardless of the RouterOS defined group.

  Tags:   

• 15:18

  YSTS 2019 Call For Papers

   » ‎ Packet Storm Security Recent Files
  The 2019 edition of YSTS (You Shot The Sheriff) has announced its call for papers. It will be held in Sao Paulo, Brazil on May 27th, 2019.

  Tags:   

• 15:18

  YSTS 2019 Call For Papers

   » ‎ Packet Storm Security Misc. Files
  The 2019 edition of YSTS (You Shot The Sheriff) has announced its call for papers. It will be held in Sao Paulo, Brazil on May 27th, 2019.

  Tags:   

• 13:00

  Vintage Plotter Turned Fruit Spectrometer

   » ‎ Hack a Day

  Fruit can be a tricky thing: if you buy it ripe you’ll be racing against time to eat the pieces before they turn into a mushy mess, but if you buy the ones which are a bit before their prime it’s not always easy to tell when they’re ready to eat. Do you smell it? Squeeze it? Toss it on the counter to see if it bounces? In the end you forget about them and they go bad anyway. That’s why here at Hackaday we sustain ourselves with only collected rainwater and thermo-stabilized military rations.

  But thankfully Cornell students [Christina …read more

  Tags:  Hardware  

• 12:22

  Huawei Router HG532e Command Execution

   » ‎ Packet Storm Security Exploits
  Huawei Router HG532e command execution exploit.

  Tags:   

• 12:22

  Huawei Router HG532e Command Execution

   » ‎ Packet Storm Security Recent Files
  Huawei Router HG532e command execution exploit.

  Tags:   

• 12:22

  Huawei Router HG532e Command Execution

   » ‎ Packet Storm Security Misc. Files
  Huawei Router HG532e command execution exploit.

  Tags:   

• 11:32

  Angry IP Scanner 3.5.3 Denial Of Service

   » ‎ Packet Storm Security Exploits
  Angry IP Scanner version 3.5.3 denial of service proof of concept exploit.

  Tags:   

• 11:32

  Angry IP Scanner 3.5.3 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  Angry IP Scanner version 3.5.3 denial of service proof of concept exploit.

  Tags:   

• 11:32

  Angry IP Scanner 3.5.3 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  Angry IP Scanner version 3.5.3 denial of service proof of concept exploit.

  Tags:   

• 11:30

  Arduino-Powered Rocket Test Stand

   » ‎ Hack a Day

  If you’re into amateur rocketry, you pretty quickly outgrow the dinky little Estes motors that they sell in the toy stores. Many hobbyists move on to building their own homebrew solid rocket motors and experimenting with propellant mixtures, but it’s difficult to know if you’re on the right track unless you have a way to quantify the thrust you’re getting. [ElementalMaker] decided he’d finally hit the point where he needed to put together a low-cost test stand for his motors, and luckily for us decided to document the process and the results.

  The heart of the stand is a common …read more

  Tags:  arduino hacks  

• 10:22

  Facebook And Google Reviews System For Business 1.0 CSRF

   » ‎ Packet Storm Security Exploits
  Facebook And Google Reviews System For Business version 1.0 suffers from a cross site request forgery vulnerability.

  Tags:   

• 10:22

  Facebook And Google Reviews System For Business 1.0 CSRF

   » ‎ Packet Storm Security Recent Files
  Facebook And Google Reviews System For Business version 1.0 suffers from a cross site request forgery vulnerability.

  Tags:   

• 10:22

  Facebook And Google Reviews System For Business 1.0 CSRF

   » ‎ Packet Storm Security Misc. Files
  Facebook And Google Reviews System For Business version 1.0 suffers from a cross site request forgery vulnerability.

  Tags:   

• 10:06

  GNU Privacy Guard 2.2.12

   » ‎ Packet Storm Security Recent Files
  GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

  Tags:   

• 10:06

  GNU Privacy Guard 2.2.12

   » ‎ Packet Storm Security Tools
  GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

  Tags:   

• 10:06

  GNU Privacy Guard 2.2.12

   » ‎ Packet Storm Security Misc. Files
  GnuPG (the GNU Privacy Guard or GPG) is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440. As such, it is meant to be compatible with PGP from NAI, Inc. Because it does not use any patented algorithms, it can be used without any restrictions.

  Tags:   

• 10:04

  Tracking Linux Kernel Vulnerabilities

   » ‎ Full Disclosure

  Posted by Nicholas Luedtke on Dec 14

  All,
  
  I've posted this before, but due to substantial changes, it might be
  more useful now. We have been tracking vulnerabilities in various
  upstream Kernel versions for sometime. We have recently made the
  automated output of this tracker available via the web for those who
  have similar use cases. This is still under development to make the
  information easier to consume. Enjoy.
  
  https://www.linuxkernelcves.com/
  
  -nsl
  

  Tags:   

• 10:03

  Zortam MP3 Media Studio 24.15 Local Buffer Overflow

   » ‎ Packet Storm Security Exploits
  Zortam MP3 Media Studio version 24.15 SEH local buffer overflow exploit.

  Tags:   

• 10:03

  Zortam MP3 Media Studio 24.15 Local Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  Zortam MP3 Media Studio version 24.15 SEH local buffer overflow exploit.

  Tags:   

• 10:03

  Zortam MP3 Media Studio 24.15 Local Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  Zortam MP3 Media Studio version 24.15 SEH local buffer overflow exploit.

  Tags:   

• 10:03

  YSTS 13th Edition - CFP

   » ‎ Full Disclosure

  Posted by Luiz Eduardo on Dec 14

  This is the official form to submit your paper to You sh0t the Sheriff 2019
  
  Where: Sao Paulo, Brazil
  
  When: May 27th, 2019
  
  Call for Papers Open: November 28th, 2018
  
  Call for Papers Close: February 28th, 2019
  
  http://www.ysts.org
  
  @ystscon
  
  ABOUT THE CONFERENCE
  you Sh0t the Sheriff is a very unique, one-day, event dedicated to
  bringing cutting edge talks to the top-notch
  professionals of the Brazilian Information Security Community.
  
  The...
  

  Tags:   

• 10:02

  Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal

   » ‎ Packet Storm Security Exploits
  Responsive FileManager version 9.13.4 suffers from bypass, cross site scripting, remote file read, remote file write, and traversal vulnerabilities.

  Tags:   

• 10:02

  Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal

   » ‎ Packet Storm Security Recent Files
  Responsive FileManager version 9.13.4 suffers from bypass, cross site scripting, remote file read, remote file write, and traversal vulnerabilities.

  Tags:   

• 10:02

  Responsive FileManager 9.13.4 XSS / File Manipulation / Traversal

   » ‎ Packet Storm Security Misc. Files
  Responsive FileManager version 9.13.4 suffers from bypass, cross site scripting, remote file read, remote file write, and traversal vulnerabilities.

  Tags:   

• 10:02

  GNU inetutils

   » ‎ Full Disclosure

  Posted by Hacker Fantastic via Fulldisclosure on Dec 14

  GNU inetutils <= 1.9.4 telnet.c multiple overflows
  ==================================================
  GNU inetutils is vulnerable to a stack overflow vulnerability in the
  client-side environment
  variable handling which can be exploited to escape restricted shells on
  embedded devices.
  Most modern browsers no longer support telnet:// handlers, but in instances
  where URI
  handlers are enabled to the inetutils telnet client this issue maybe...
  

  Tags:   

• 10:02

  Mikrotik RouterOS telnet arbitrary root file creation 0day

   » ‎ Full Disclosure

  Posted by Hacker Fantastic via Fulldisclosure on Dec 14

  Mikrotik RouterOS telnet arbitrary root file creation 0day
  ==========================================================
  This weakness occurs "post-authentication" and can be used to escape the
  restricted shell on Mikrotik devices and escalate "readonly" privileges.
  Mikrotik contains a hidden "devel" login option which can be enabled
  through use of an "options" package.
  
  An exploitable arbitrary file creation...
  

  Tags:   

• 10:01

  Scott Swaaley On High Voltage

   » ‎ Hack a Day

  If you were to invent a time machine and transport a typical hardware hacker of the 1970s into 2018 and sit them at a bench alongside their modern counterpart, you’d expect them to be faced with a pile of new things, novel experiences, and exciting possibilities. The Internet for all, desktop computing fulfilling its potential, cheap single-board computers, even ubiquitous surface-mount components.

  What you might not expect though is that the 2018 hacker might discover a whole field of equivalent unfamiliarity while being very relevant from their grizzled guest. It’s something Scott Swaaley touches upon in his Superconference talk:  “Lessons …read more

  Tags:  cons  

• 10:01

  CVE-2018-7691 | The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities

   » ‎ Full Disclosure

  Posted by alt3kx via Fulldisclosure on Dec 14

  Details
  ================
  Software: Fortify SSC (Software Security Center)
  Version: 17.10, 17.20 & 18.10
  Homepage: [https://www.microfocus.com](https://www.microfocus.com/)
  Advisory report: https://github.com/alt3kx/CVE-2018-7691
  CVE: CVE-2018-7691 at https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7691
  CVSS: 6.5 (Medium; AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
  CWE-639
  
  Description
  ================
  REST API contains Insecure direct object...
  

  Tags:   

• 10:01

  CVE-2018-7690 | The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities

   » ‎ Full Disclosure

  Posted by alt3kx via Fulldisclosure on Dec 14

  Details
  ================
  Software: Fortify SSC (Software Security Center)
  Version: 17.10, 17.20 & 18.10
  Homepage: [https://www.microfocus.com](https://www.microfocus.com/)
  Advisory report: https://github.com/alt3kx/CVE-2018-7690
  CVE: CVE-2018-7690 at https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7690
  CVSS: 6.5 (Medium; AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)
  CWE-639
  
  Description
  ================
  Fortify SSC (Software Security Center)...
  

  Tags:   

• 10:00

  Cisco RV110W Password Disclosure / Command Execution

   » ‎ Packet Storm Security Exploits
  Cisco RV110W suffers from password disclosure and command execution vulnerabilities.

  Tags:   

• 10:00

  Cisco RV110W Password Disclosure / Command Execution

   » ‎ Packet Storm Security Recent Files
  Cisco RV110W suffers from password disclosure and command execution vulnerabilities.

  Tags:   

• 10:00

  Cisco RV110W Password Disclosure / Command Execution

   » ‎ Packet Storm Security Misc. Files
  Cisco RV110W suffers from password disclosure and command execution vulnerabilities.

  Tags:   

• 9:22

  UltraISO 9.7.1.3519 Output FileName Denial Of Service

   » ‎ Packet Storm Security Exploits
  UltraISO version 9.7.1.3519 Output FileName denial of service proof of concept exploit.

  Tags:   

• 9:22

  UltraISO 9.7.1.3519 Output FileName Denial Of Service

   » ‎ Packet Storm Security Recent Files
  UltraISO version 9.7.1.3519 Output FileName denial of service proof of concept exploit.

  Tags:   

• 9:22

  UltraISO 9.7.1.3519 Output FileName Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  UltraISO version 9.7.1.3519 Output FileName denial of service proof of concept exploit.

  Tags:   

• 8:30

  Dexterity Hand is a Configurable Prosthetic Hand

   » ‎ Hack a Day

  One of the interesting benefits of the 3D printing revolution is the dramatic increase in availability of prosthetics for people with virtually any need. With a little bit of research, a 3D printer, and some trial and error, virtually anyone can build a prototype prosthetic to fit them specifically rather than spend thousands of dollars for one from a medical professional. [Dominick Scalise] is attempting to flesh out this idea with a prosthetic hand that he hopes will be a useful prosthetic in itself, but also a platform for others to build on or take ideas from.

  His hand is …read more

  Tags:  printer hacks  

• 7:01

  Retrotechtacular: Remembering Radio Shack P-Box Kits

   » ‎ Hack a Day

  If you are under a certain age, you probably associate Radio Shack with cellphones. While Radio Shack never gave us access to the variety and economy of parts we have today, they did have one thing that I wish we could get again: P-Box kits. The obvious questions are: What’s a P-Box and why do I want one? But the kit wasn’t to make a P-Box. P-Box was the kind of box the kit came in. It was like a piece of perfboard, but made of plastic, built into a plastic box. So you bought the kit — which might …read more

  Tags:  hackaday Columns  

• 6:46

  Logitech App Security Flaw Allowed Keystroke Injection Attacks

   » ‎ Packet Storm Security Headlines
  Logitech App Security Flaw Allowed Keystroke Injection Attacks

  Tags:  headlineflaw  

• 6:46

  Save The Children Foundation Duped By Hackers Into Paying Out $1 Million

   » ‎ Packet Storm Security Headlines
  Save The Children Foundation Duped By Hackers Into Paying Out $1 Million

  Tags:  headlinehackercybercrimefraud  

• 4:00

  Let’s Look At Some Cool Old LEDs

   » ‎ Hack a Day

  LEDs are now a mature technology, with all manner of colors and flavors available. However, back in the 1970s, it was early days for this fledgling display tech, and things looked very different. [IMSAI Guy] happened to work at the optoelectronics division of Hewlett-Packard during their development of LED displays, and has a handful of prototypes from those heady days.

  The video is a great look at not only vintage display hardware, but also rarely seen prototypes that seldom left the HP offices. Matrix, 7-segment and even 16-segment devices are all in attendance here. There’s great macro photography of the …read more

  Tags:  led hacks  

• 2:44

  Double Your Bitcoin Script Automatic 2018 SQL Injection

   » ‎ Packet Storm Security Exploits
  Double Your Bitcoin Script Automatic 2018 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

  Tags:   

• 2:44

  Double Your Bitcoin Script Automatic 2018 SQL Injection

   » ‎ Packet Storm Security Recent Files
  Double Your Bitcoin Script Automatic 2018 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

  Tags:   

• 2:44

  Double Your Bitcoin Script Automatic 2018 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Double Your Bitcoin Script Automatic 2018 suffers from a remote SQL injection vulnerability that allows for authentication bypass.

  Tags:   

• 1:00

  Charge Your EV The Portable Way

   » ‎ Hack a Day

  [Andrew Rossignol] has a slightly unusual plug-in hybrid vehicle, a Cadillac ELR, and his latest project for the car sees him building a battery-powered portable mains charging pack for it in an attempt to increase its range. If this seems to be a rather cumbersome exercise, his write-up details the work he put in trying to hook up directly to the car’s internal battery, and how a 4 kW mains inverter and an off-the-shelf mains charging station were the most practical alternative.

  His first impulse was to hook a second supply to the car’s high voltage bus from a supplementary …read more

  Tags:  transportation hacks  

• 0:00

  Vuln: Geutebrück GmbH E2 Series IP Cameras CVE-2018-19007 OS Command Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Geutebrück GmbH E2 Series IP Cameras CVE-2018-19007 OS Command Injection Vulnerability

  Tags:   

• December 13, 2018
• 22:00

  Turn Old Pinball Parts Into A Unique Digital Clock

   » ‎ Hack a Day

  It’s getting ever harder to build a truly unique digital clock. From electronic displays to the flip-dots and flip-cards, everything seems to have been done to death. But this pinball scoring reel clock manages to keep the unique clock ball in play, as it were.

  It’s not entirely clear whom to credit with this build, but the article was written by [Lucky]. Nor do they mention which pinball machine gave up its electromechanical scoring display for the build. Our guess would be a machine from the ’60s, before the era of score inflation that required more than the four digits …read more

  Tags:  classic hacks  

• 21:42

  WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0009

   » ‎ Bugtraq

  Posted by Michael Catanzaro on Dec 13

  ------------------------------------------------------------------------
  WebKitGTK+ and WPE WebKit Security Advisory WSA-2018-0009
  ------------------------------------------------------------------------
  
  Date reported : December 13, 2018
  Advisory ID : WSA-2018-0009
  WebKitGTK+ Advisory URL :
  https://webkitgtk.org/security/WSA-2018-0009.html
  WPE WebKit Advisory URL :...
  

  Tags:   

• 19:00

  A Cheat Sheet For Publishing Python Packages

   » ‎ Hack a Day

  [Brendan Herger] was warned that the process of publishing a Python package would be challenging. He relishes a challenge, however, and so he went at it with gusto. The exhausting process led him to share a cheat sheet for publishing Python packages with the goal of making the next time smoother, while also letting other people benefit from his experience and get a running start.

  [Brendan] describes publishing a Python package as “tying together many different solutions with brittle interchanges.” His cheat sheet takes the form of an ordered workflow for getting everything in place, with some important decisions and …read more

  Tags:  Software development  

• 16:00

  How To Make A Pilotron, The Forgotten Tube

   » ‎ Hack a Day

  The vacuum tube is largely ignored in modern electronic design, save for a few audio applications such as guitar and headphone amps. The transistor is smaller, cheaper, and inordinately easier to manufacture. By comparison, showing us just how much goes into the manufacture of a tube, [glasslinger] decided to make a wire-element pilotron – from scratch!

  To say this is an involved build is an understatement. Simply creating the glass tube itself takes significant time and skill. [glasslinger] shows off the skills of a master, however – steadily working through the initial construction, before showing off advanced techniques necessary to …read more

  Tags:  classic hacks  

• 15:55

  WebKitGTK+ / WPE WebKit Memory Corruption / Code Execution

   » ‎ Packet Storm Security Advisories
  WebKitGTK+ and WPE WebKit suffer from multiple memory corruption vulnerabilities that can lead to code execution.

  Tags:   

• 15:55

  WebKitGTK+ / WPE WebKit Memory Corruption / Code Execution

   » ‎ Packet Storm Security Recent Files
  WebKitGTK+ and WPE WebKit suffer from multiple memory corruption vulnerabilities that can lead to code execution.

  Tags:   

• 15:55

  WebKitGTK+ / WPE WebKit Memory Corruption / Code Execution

   » ‎ Packet Storm Security Misc. Files
  WebKitGTK+ and WPE WebKit suffer from multiple memory corruption vulnerabilities that can lead to code execution.

  Tags:   

• 15:47

  Safari Proxy Object Type Confusion

   » ‎ Packet Storm Security Exploits
  This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e.g. an argument without causing a bailout, leading to a type confusion.

  Tags:   

• 15:47

  Safari Proxy Object Type Confusion

   » ‎ Packet Storm Security Recent Files
  This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e.g. an argument without causing a bailout, leading to a type confusion.

  Tags:   

• 15:47

  Safari Proxy Object Type Confusion

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module exploits a type confusion bug in the Javascript Proxy object in WebKit. The DFG JIT does not take into account that, through the use of a Proxy, it is possible to run arbitrary JS code during the execution of a CreateThis operation. This makes it possible to change the structure of e.g. an argument without causing a bailout, leading to a type confusion.

  Tags:   

• 15:03

  Nintendo Sues Californian For Selling Modded NES Classic And Switch Hacks

   » ‎ Packet Storm Security Headlines
  Nintendo Sues Californian For Selling Modded NES Classic And Switch Hacks

  Tags:  headlinehackerusanintendo  

• 15:03

  Charming Kitty Targeting US, Arab Officials In Wake Of Iran Sanctions

   » ‎ Packet Storm Security Headlines
  Charming Kitty Targeting US, Arab Officials In Wake Of Iran Sanctions

  Tags:  headlinegovernmentusafraudphishiran  

• 15:03

  Extortion Emails Carrying Bomb Threats Cause Panic Across The US

   » ‎ Packet Storm Security Headlines
  Extortion Emails Carrying Bomb Threats Cause Panic Across The US

  Tags:  headlineemailcybercrimefraudterror  

• 15:03

  GitLab Opens Bug Bounty To The World

   » ‎ Packet Storm Security Headlines
  GitLab Opens Bug Bounty To The World

  Tags:  headlinehacker  

• 13:08

  #0daytoday #Windows UAC Protection Bypass Exploit [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Windows UAC Protection Bypass Exploit [remote #exploits #0day #Exploit]

  Tags:   

• 13:00

  Every Computer Deserves a Rotary Encoder

   » ‎ Hack a Day

  In the era of touch screens and capacitive buttons, we’d be lying if we said we didn’t have the occasional pang of nostalgia for the good old days when interfacing with devices had a bit more heft to it. The physical clunk and snap of switches never seems to get old, and while you can always pick up a mechanical keyboard for your computer if you want to hear that beautiful staccato sound while firing off your angry Tweets, there’s a definite dearth of mechanical interface devices otherwise.

  [Jeremy Cook] decided to take matters into his own hands (literally and …read more

  Tags:  arduino hacks  

• 12:28

  #0daytoday #WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains Exploit [#0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WebKit JIT - Int32/Double Arrays can have Proxy Objects in the Prototype Chains Exploit [#0day #Exploit]

  Tags:   

• 12:28

  #0daytoday #Linux - userfaultfd Bypasses tmpfs File Permissions Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #Linux - userfaultfd Bypasses tmpfs File Permissions Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 12:27

  #0daytoday #CyberLink LabelPrint 2.5 - Stack Buffer Overflow Exploit CVE-2017-14627 [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #CyberLink LabelPrint 2.5 - Stack Buffer Overflow Exploit CVE-2017-14627 [remote #exploits #0day #Exploit]

  Tags:   

• 11:30

  The Battle Between Robot Harmonica And Machine Finger Rages On

   » ‎ Hack a Day

  When asking the question “Do humans dream of machines?”, it’s natural to think of the feverish excitement ahead of an iPhone or Playstation launch, followed by lines around the block of enthusiastic campers, eager to get their hands on the latest hardware as soon as is humanly possible. However, it’s also the title of an art piece by [Jonghong Park], and is deserving of further contemplation. (Video after the break.)

  The art piece consists of a series of eight tiny harmonicas, which are in turn, played by eight fans, which appear to have been cribbed from a low-power graphics card …read more

  Tags:  art  

• 11:20

  Windows UAC Protection Bypass

   » ‎ Packet Storm Security Exploits
  This Metasploit module modifies a registry key, but cleans up the key once the payload has been invoked. The module does not require the architecture of the payload to match the OS.

  Tags:   

• 11:20

  Windows UAC Protection Bypass

   » ‎ Packet Storm Security Recent Files
  This Metasploit module modifies a registry key, but cleans up the key once the payload has been invoked. The module does not require the architecture of the payload to match the OS.

  Tags:   

• 11:20

  Windows UAC Protection Bypass

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module modifies a registry key, but cleans up the key once the payload has been invoked. The module does not require the architecture of the payload to match the OS.

  Tags:   

• 10:33

  Falco 0.13.0

   » ‎ Packet Storm Security Recent Files
  Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.

  Tags:   

• 10:33

  Falco 0.13.0

   » ‎ Packet Storm Security Tools
  Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.

  Tags:   

• 10:33

  Falco 0.13.0

   » ‎ Packet Storm Security Misc. Files
  Sysdig falco is a behavioral activity monitoring agent that is open source and comes with native support for containers. Falco lets you define highly granular rules to check for activities involving file and network activity, process execution, IPC, and much more, using a flexible syntax. Falco will notify you when these rules are violated. You can think about falco as a mix between snort, ossec and strace.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03835 1

   » ‎ Packet Storm Security Advisories
  Micro Focus Security Bulletin MFSBGN03835 1 - The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Revision 1 of this advisory.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03835 1

   » ‎ Packet Storm Security Recent Files
  Micro Focus Security Bulletin MFSBGN03835 1 - The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Revision 1 of this advisory.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03835 1

   » ‎ Packet Storm Security Misc. Files
  Micro Focus Security Bulletin MFSBGN03835 1 - The SSC REST API contains Insecure Direct Object Reference (IDOR) vulnerabilities that allow authenticated users access to arbitrary details of the Local and LDAP users via POST method and to arbitrary details of other user's Fortify projects via GET method. Revision 1 of this advisory.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03837 1

   » ‎ Packet Storm Security Advisories
  Micro Focus Security Bulletin MFSBGN03837 1 - A vulnerabilities in Apache Tomcat was addressed by Micro Focus Network Node Manager i. The vulnerability could be exploited Remote Cross-Site Scripting (XSS) and Remote Disclosure of Information. Revision 1 of this advisory.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03837 1

   » ‎ Packet Storm Security Recent Files
  Micro Focus Security Bulletin MFSBGN03837 1 - A vulnerabilities in Apache Tomcat was addressed by Micro Focus Network Node Manager i. The vulnerability could be exploited Remote Cross-Site Scripting (XSS) and Remote Disclosure of Information. Revision 1 of this advisory.

  Tags:   

• 10:21

  HP Security Bulletin MFSBGN03837 1

   » ‎ Packet Storm Security Misc. Files
  Micro Focus Security Bulletin MFSBGN03837 1 - A vulnerabilities in Apache Tomcat was addressed by Micro Focus Network Node Manager i. The vulnerability could be exploited Remote Cross-Site Scripting (XSS) and Remote Disclosure of Information. Revision 1 of this advisory.

  Tags:   

• 10:19

  Red Hat Security Advisory 2018-3816-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-3816-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include memory disclosure and client-side security problems.

  Tags:   

• 10:19

  Red Hat Security Advisory 2018-3816-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-3816-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include memory disclosure and client-side security problems.

  Tags:   

• 10:19

  Red Hat Security Advisory 2018-3816-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-3816-01 - Red Hat CloudForms Management Engine delivers the insight, control, and automation needed to address the challenges of managing virtual environments. CloudForms Management Engine is built on Ruby on Rails, a model-view-controller framework for web application development. Action Pack implements the controller and the view components. Issues addressed include memory disclosure and client-side security problems.

  Tags:   

• 10:19

  Debian Security Advisory 4354-1

   » ‎ Packet Storm Security Advisories
  Debian Linux Security Advisory 4354-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the same-origin policy.

  Tags:   

• 10:19

  Debian Security Advisory 4354-1

   » ‎ Packet Storm Security Recent Files
  Debian Linux Security Advisory 4354-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the same-origin policy.

  Tags:   

• 10:19

  Debian Security Advisory 4354-1

   » ‎ Packet Storm Security Misc. Files
  Debian Linux Security Advisory 4354-1 - Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or bypass of the same-origin policy.

  Tags:   

• 10:01

  Jeremy Hong: Weaponizing the Radio Spectrum

   » ‎ Hack a Day

  Jeremy Hong knows a secret or two about things you shouldn’t do with radio frequency (RF), but he’s not sharing.

  That seems an odd foundation upon which to build one’s 2018 Hackaday Superconference talk, but it’s for good reason. Jeremy knows how to do things like build GPS and radar jammers, which are federal crimes. Even he hasn’t put his knowledge to practical use, having built only devices that never actually emitted any RF.

  So what does one talk about when circumspection is the order of the day? As it turns out, quite a lot. Jeremy focused on how the …read more

  Tags:  cons  

• 9:18

  Ethical Hacking Growing In Popularity At Data Breaches Increase

   » ‎ Packet Storm Security Headlines
  Ethical Hacking Growing In Popularity At Data Breaches Increase

  Tags:  headlinehackerdata loss  

• 9:18

  Ethical Hacking Growing In Popularity As Data Breaches Increase

   » ‎ Packet Storm Security Headlines
  Ethical Hacking Growing In Popularity As Data Breaches Increase

  Tags:  headlinehackerdata loss  

• 9:18

  UK Whitehats Blacklisted By Cisco Talos

   » ‎ Packet Storm Security Headlines
  UK Whitehats Blacklisted By Cisco Talos

  Tags:  headlinemalwareflawcisco  

• 9:18

  Shamoon Destroys Data At Italian Oil And Gas Company

   » ‎ Packet Storm Security Headlines
  Shamoon Destroys Data At Italian Oil And Gas Company

  Tags:  headlinemalwaredata lossitalyscada  

• 9:18

  Over Half Of Brazil's Population Exposed In Security Incident

   » ‎ Packet Storm Security Headlines
  Over Half Of Brazil's Population Exposed In Security Incident

  Tags:  headlineprivacyamazondata lossbrazil  

• 8:30

  Tiny Art Etched into Silicon Wafers with Electron Beam Lithography

   » ‎ Hack a Day

  Looks like [Sam Zeloof] got bored on his Thanksgiving break, and things got a little weird in his garage. Of course when your garage contains a scanning electron microscope, the definition of weird can include experimenting with electron-beam lithography, resulting in tiny images etched into silicon.

  You’ll probably remember [Sam] from his 2018 Hackaday Superconference talk on his DIY semiconductor fab lab, which he used to create a real integrated circuit. That chip, a PMOS dual-channel differential amp, was produced by photolithography using a modified DLP projector. Photolithography imposes limits to how small a feature can be created on silicon, …read more

  Tags:  misc hacks  

• 7:01

  RISC-V Will Stop Hackers Dead From Getting Into Your Computer

   » ‎ Hack a Day

  The greatest hardware hacks of all time were simply the result of finding software keys in memory. The AACS encryption debacle — the 09 F9 key that allowed us to decrypt HD DVDs — was the result of encryption keys just sitting in main memory, where it could be read by any other program. DeCSS, the hack that gave us all access to DVDs was again the result of encryption keys sitting out in the open.

  Because encryption doesn’t work if your keys are just sitting out in the open, system designers have come up with ingenious solutions to prevent …read more

  Tags:  computer hacks  

• 4:00

  [Ben Krasnow] Builds a One-Component Interferometer

   » ‎ Hack a Day

  When we think of physics experiments, we tend to envision cavernous rooms filled with things like optical benches, huge coils in vacuum chambers, and rack after rack of amplifiers and data acquisition hardware. But it doesn’t have to be that way – you can actually perform laser interferometry with a single component and measure sub-micron displacements and more.

  The astute viewer of [Ben Krasnow]’s video below will note that in order to use the one component, a laser diode, as an interferometer, he needed a whole bunch of support gear, like power supplies, a signal generator, and a really, really …read more

  Tags:  laser hacks  

• 1:00

  iCEBreaker, The Open Source Development Board for FPGAs

   » ‎ Hack a Day

  The Hackaday Superconference is over, which is a shame, but one of the great things about our conference is the people who manage to trek out to Pasadena every year to show us all the cool stuff they’re working on. One of those people was [Piotr Esden-Tempski], founder of 1 Bit Squared, and he brought some goodies that would soon be launched on a few crowdfunding platforms. The coolest of these was the iCEBreaker, an FPGA development kit that makes it easy to learn FPGAs with an Open Source toolchain.

  The hardware for the iCEBreaker includes the iCE40UP5K fpga with …read more

  Tags:  crowd funding  

• 0:00

  Vuln: Google Chrome Prior to 71.0.3578.80 Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  Google Chrome Prior to 71.0.3578.80 Multiple Security Vulnerabilities

  Tags:   

• 0:00

  Vuln: QEMU CVE-2018-16867 Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU CVE-2018-16867 Directory Traversal Vulnerability

  Tags:   

• 0:00

  Vuln: FreeBSD Network File System Multiple Security Vulnerabilities

   » ‎ SecurityFocus Vulnerabilities
  FreeBSD Network File System Multiple Security Vulnerabilities

  Tags:   

• 0:00

  Vuln: Pixar Tractor CVE-2018-5411 HTML Injection Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Pixar Tractor CVE-2018-5411 HTML Injection Vulnerability

  Tags:   

• 0:00

  Vuln: QEMU CVE-2018-16872 Directory Traversal Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  QEMU CVE-2018-16872 Directory Traversal Vulnerability

  Tags:   

• December 12, 2018
• 22:00

  Stovetop Milk Steamer Is Beautiful, Effective

   » ‎ Hack a Day

  The Moka pot is an industrial design classic, hailing from Italy in the early part of the 20th century. To this day, it remains an excellent way to brew top quality coffee at home with affordable equipment. However, if your tastes for coffee lie more towards lattes than espresso, you’re out of luck – unless you’ve got one of these.

  [Create] started with a classic Moka pot for this project, and set out to build a stovetop milk steamer. The top reservoir is quickly cut away, and a tap fitted atop the lower water reservoir. This allows the flow of …read more

  Tags:  home hacks  

• 20:46

  WebDAV Server Serving DLL

   » ‎ Packet Storm Security Exploits
  This Metasploit module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotely and execute the provided export function. The export function needs to be valid, but the default meterpreter function can be anything. The process does write the dll to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV but does not load the dll from that location. This file should be removed after execution. The extension can be anything you'd like, but you don't have to use one. Two files will be written to disk. One named the requested name and one with a dll extension attached.

  Tags:   

• 20:46

  WebDAV Server Serving DLL

   » ‎ Packet Storm Security Recent Files
  This Metasploit module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotely and execute the provided export function. The export function needs to be valid, but the default meterpreter function can be anything. The process does write the dll to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV but does not load the dll from that location. This file should be removed after execution. The extension can be anything you'd like, but you don't have to use one. Two files will be written to disk. One named the requested name and one with a dll extension attached.

  Tags:   

• 20:46

  WebDAV Server Serving DLL

   » ‎ Packet Storm Security Misc. Files
  This Metasploit module simplifies the rundll32.exe Application Whitelisting Bypass technique. The module creates a webdav server that hosts a dll file. When the user types the provided rundll32 command on a system, rundll32 will load the dll remotely and execute the provided export function. The export function needs to be valid, but the default meterpreter function can be anything. The process does write the dll to C:\Windows\ServiceProfiles\LocalService\AppData\Local\Temp\TfsStore\Tfs_DAV but does not load the dll from that location. This file should be removed after execution. The extension can be anything you'd like, but you don't have to use one. Two files will be written to disk. One named the requested name and one with a dll extension attached.

  Tags:   

• 20:37

  Fortify SSC 17.10 / 17.20 / 18.10 User Detail Insecure Direct Object Reference

   » ‎ Packet Storm Security Exploits
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to extracting local and ldap users.

  Tags:   

• 20:37

  Fortify SSC 17.10 / 17.20 / 18.10 User Detail Insecure Direct Object Reference

   » ‎ Packet Storm Security Recent Files
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to extracting local and ldap users.

  Tags:   

• 20:37

  Fortify SSC 17.10 / 17.20 / 18.10 User Detail Insecure Direct Object Reference

   » ‎ Packet Storm Security Misc. Files
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to extracting local and ldap users.

  Tags:   

• 20:35

  Fortify SSC 17.10 / 17.20 / 18.10 Project Insecure Direct Object Reference

   » ‎ Packet Storm Security Exploits
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to user projects.

  Tags:   

• 20:35

  Fortify SSC 17.10 / 17.20 / 18.10 Project Insecure Direct Object Reference

   » ‎ Packet Storm Security Recent Files
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to user projects.

  Tags:   

• 20:35

  Fortify SSC 17.10 / 17.20 / 18.10 Project Insecure Direct Object Reference

   » ‎ Packet Storm Security Misc. Files
  Fortify Software Security Center versions 17.10, 17.20, and 18.10 suffer from an insecure direct object reference vulnerability related to user projects.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3822-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-3822-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3822-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-3822-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3822-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-3822-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3823-01

   » ‎ Packet Storm Security Advisories
  Red Hat Security Advisory 2018-3823-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3823-01

   » ‎ Packet Storm Security Recent Files
  Red Hat Security Advisory 2018-3823-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Red Hat Security Advisory 2018-3823-01

   » ‎ Packet Storm Security Misc. Files
  Red Hat Security Advisory 2018-3823-01 - The kernel packages contain the Linux kernel, the core of any Linux operating system. Issues addressed include an use-after-free vulnerability.

  Tags:   

• 20:34

  Slackware Security Advisory - mozilla-firefox Updates

   » ‎ Packet Storm Security Advisories
  Slackware Security Advisory - New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

  Tags:   

• 20:34

  Slackware Security Advisory - mozilla-firefox Updates

   » ‎ Packet Storm Security Recent Files
  Slackware Security Advisory - New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

  Tags:   

• 20:34

  Slackware Security Advisory - mozilla-firefox Updates

   » ‎ Packet Storm Security Misc. Files
  Slackware Security Advisory - New mozilla-firefox packages are available for Slackware 14.2 and -current to fix security issues.

  Tags:   

• 20:33

  Ubuntu Security Notice USN-3845-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3845-1 - Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. Eyal Itkin discovered FreeRDP incorrectly handled bitmaps. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 20:33

  Ubuntu Security Notice USN-3845-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3845-1 - Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. Eyal Itkin discovered FreeRDP incorrectly handled bitmaps. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 20:33

  Ubuntu Security Notice USN-3845-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3845-1 - Eyal Itkin discovered FreeRDP incorrectly handled certain stream encodings. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. This issue only applies to Ubuntu 18.04 LTS and Ubuntu 18.10. Eyal Itkin discovered FreeRDP incorrectly handled bitmaps. A malicious server could use this issue to cause FreeRDP to crash, resulting in a denial of service, or possibly execute arbitrary code. Various other issues were also addressed.

  Tags:   

• 20:19

  [SECURITY] [DSA 4354-1] firefox-esr security update

   » ‎ Bugtraq

  Posted by Moritz Muehlenhoff on Dec 12

  -------------------------------------------------------------------------
  Debian Security Advisory DSA-4354-1 security () debian org
  https://www.debian.org/security/ Moritz Muehlenhoff
  December 12, 2018 https://www.debian.org/security/faq
  -------------------------------------------------------------------------
  
  Package : firefox-esr
  CVE ID : CVE-2018-12405 CVE-2018-17466...
  

  Tags:   

• 20:15

  [security bulletin] MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote Unauthorized Access

   » ‎ Bugtraq

  Posted by security-alert on Dec 12

  Note: the current version of the following document is available here:
  https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03298201
  
  SUPPORT COMMUNICATION - SECURITY BULLETIN
  
  Document ID: KM03298201
  Version: 1
  
  MFSBGN03835 rev.1 - Fortify Software Security Center (SSC), Remote
  Unauthorized Access
  
  NOTICE: The information in this Security Bulletin should be acted upon as
  soon as possible.
  
  Release Date: 2018-12-12
  Last...
  

  Tags:   

• 20:12

  [security bulletin] MFSBGN03837 rev.1 - Network Node Manager i, Multiple Vulnerabilities

   » ‎ Bugtraq

  Posted by security-alert on Dec 12

  Note: the current version of the following document is available here:
  https://softwaresupport.softwaregrp.com/document/-/facetsearch/document/KM03302206
  
  SUPPORT COMMUNICATION - SECURITY BULLETIN
  
  Document ID: KM03302206
  Version: 1
  
  MFSBGN03837 rev.1 - Network Node Manager i, Multiple Vulnerabilities
  
  NOTICE: The information in this Security Bulletin should be acted upon as
  soon as possible.
  
  Release Date: 2018-12-12
  Last Updated: 2018-12-12...
  

  Tags:   

• 17:30

  Cyborg, Or Leafy Sensor Array?

   » ‎ Hack a Day

  Some plants react quickly enough for our senses to notice, such as a Venus flytrap or mimosa pudica. Most of the time, we need time-lapse photography at a minimum to notice while more exotic sensors can measure things like microscopic pores opening and closing. As with any sensor reading, those measurements can be turned into action through a little trick we call automation. [Harpreet Sareen] and [Pattie Maes] at MIT brought these two ideas together in a way which we haven’t seen before where a plant has taken the driver’s seat in a project called Elowan. Details are sparse but …read more

  Tags:  green hacks  

• 16:47

  #0daytoday #MixPad v4.40 - Unicode Buffer Overflow Exploit [dos #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #MixPad v4.40 - Unicode Buffer Overflow Exploit [dos #exploits #0day #Exploit]

  Tags:   

• 14:30

  Intel Announces Faster Processor Patched for Meltdown and Spectre

   » ‎ Hack a Day

  Intel just announced their new Sunny Cove Architecture that comes with a lot of new bells and whistles. The Intel processor line-up has been based off the Skylake architecture since 2015, so the new architecture is a fresh breath for the world’s largest chip maker. They’ve been in the limelight this year with hardware vulnerabilities exposed, known as Spectre and Meltdown. The new designs have of course been patched against those weaknesses.

  The new architecture (said to be part of the Ice Lake-U CPU) comes with a lot of new promises such as faster core, 5 allocation units and upgrades …read more

  Tags:  news  

• 13:00

  Electric Drift Trike Needs Water Cooling

   » ‎ Hack a Day

  Electric vehicles of all types are quickly hitting the market as people realize how inexpensive they can be to operate compared to traditional modes of transportation. From cars and trucks, to smaller vehicles such as bicycles and even electric boats, there’s a lot to be said for simplicity, ease of use, and efficiency. But sometimes we need a little bit more out of our electric vehicles than the obvious benefits they come with. Enter the electric drift trike, an electric vehicle built solely for the enjoyment of high torque electric motors.

  This tricycle is built with some serious power behind …read more

  Tags:  transportation hacks  

• 11:30

  Soft Rotating Pneumatic Actuators

   » ‎ Hack a Day

  When we think of pneumatic actuators, we typically consider the standard varieties of pneumatic cylinder, capable of linear motion. These can be referred to as “hard” actuators, made of rigid components and capable of great accuracy and force delivery. However, “soft” actuators have their own complementary abilities – such as being able to handle more delicate tasks and being less likely to injure human operators when used in collaborative operations. The Whitesides Research Group at Harvard University has undertaken significant research in this field, and released a paper covering a novel type of soft pneumatic actuator.

  The actuator consists of …read more

  Tags:  robots hacks  

• 10:30

  How To Tell If Your Partner Is Spying On Your Phone

   » ‎ Packet Storm Security Headlines
  How To Tell If Your Partner Is Spying On Your Phone

  Tags:  headlineprivacyphonespyware  

• 10:30

  It's December Of 2018 And, To Hell With It, Just Patch Your Stuff

   » ‎ Packet Storm Security Headlines
  It's December Of 2018 And, To Hell With It, Just Patch Your Stuff

  Tags:  headlinemicrosoftflawpatch  

• 10:30

  Former Mt. Gox CEO Could Face 10 Years For Embezzlement

   » ‎ Packet Storm Security Headlines
  Former Mt. Gox CEO Could Face 10 Years For Embezzlement

  Tags:  headlinecybercrimefraudjapancryptography  

• 10:27

  Ticketmaster Fails To Take Responsibility For Malware

   » ‎ Packet Storm Security Headlines
  Ticketmaster Fails To Take Responsibility For Malware

  Tags:  headlinehackerprivacymalwaredata loss  

• 10:01

  How To Stay Grounded When You Have Zero Potential

   » ‎ Hack a Day

  Ground is an interesting topic when it comes to engineering. Either it’s the reference level for a digital circuit (not necessarily at zero volts, either), or it’s the return path for current, or it’s the metal chassis, which shouldn’t be the return path for current or else something’s terribly broken. Erika Earl’s talk at this year’s Hackaday Superconference is all about ground.

  The first type of ground to talk about is the ground in your outlets and walls. The AC safety ground is the third pin on your plug that should be attached to the chassis of your washer/dryer on …read more

  Tags:  cons  

• 8:30

  My Oscilloscope Uses Fire

   » ‎ Hack a Day

  If you want to visualize sound waves, you reach for your oscilloscope, right? That wasn’t an option in 1905 so physicist [Heinrich Rubens] came up with another way involving flames. [Luke Guigliano] and [Will Peterson] built one of these tubes — known as a Rubens’ tube — and will show you how you can, too. You can see a video of their results, below. Just in case a flame oscilloscope isn’t enough to attract your interest, they are driving the thing with a theremin for extra nerd points.

  The guys show a short flame run and one with tall flames. …read more

  Tags:  misc hacks  

• 7:01

  Warnings On Steroids – Static Code Analysis Tools

   » ‎ Hack a Day

  A little while back, we were talking about utilizing compiler warnings as first step to make our C code less error-prone and increase its general stability and quality. We know now that the C compiler itself can help us here, but we also saw that there’s a limit to it. While it warns us about the most obvious mistakes and suspicious code constructs, it will leave us hanging when things get a bit more complex.

  But once again, that doesn’t mean compiler warnings are useless, we simply need to see them for what they are: a first step. So today …read more

  Tags:  Software development  

• 6:22

  #0daytoday #WordPress Snap Creek Duplicator Code Injection Exploit CVE-2018-17207 [remote #exploits #0day #Exploit]

   » ‎ 0day.today (was: 1337day, Inj3ct0r, 1337db)
  #0daytoday #WordPress Snap Creek Duplicator Code Injection Exploit CVE-2018-17207 [remote #exploits #0day #Exploit]

  Tags:   

• 4:53

  [slackware-security] mozilla-firefox (SSA:2018-345-01)

   » ‎ Bugtraq

  Posted by Slackware Security Team on Dec 12

  [slackware-security] mozilla-firefox (SSA:2018-345-01)
  
  New mozilla-firefox packages are available for Slackware 14.2 and -current to
  fix security issues.
  
  Here are the details from the Slackware 14.2 ChangeLog:
  +--------------------------+
  patches/packages/mozilla-firefox-60.4.0esr-i686-1_slack14.2.txz: Upgraded.
  This release contains security fixes and improvements.
  For more information, see:...
  

  Tags:   

• 4:00

  A Pi Cluster to Hang in Your Stocking with Care

   » ‎ Hack a Day

  It’s that time of year again, with the holidays fast approaching friends and family will be hounding you about what trinkets and shiny baubles they can pretend to surprise you with. Unfortunately there’s no person harder to shop for than the maker or hacker: if we want it, we’ve probably already built the thing. Or at least gotten it out of somebody else’s trash.

  But if they absolutely, positively, simply have to buy you something that’s commercially made, then you could do worse than pointing them to this very slick Raspberry Pi cluster backplane from [miniNodes]. With the ability to …read more

  Tags:  ARM  

• 1:00

  Toast Printer Prints Tasty Images And Weather Forecasts

   » ‎ Hack a Day

  Electrical Engineering degrees usually focus on teaching you useful things, like how to make electronic devices that actually work and that won’t kill you. But that doesn’t mean that you can’t have some fun on the way. Which is what Cornell students [Michael Xiao] and [Katie Bradford] decided to do with T.O.A.S.T: The Original Artistic Solution for Toast. In case the name didn’t give it away, this is a toast printer. The user supplies an image and a bit of bread, and the T.O.A.S.T prints the image onto the toast. Alternatively, the printer can show you the weather by printing …read more

  Tags:  raspberry  

• 0:00

  Vuln: X.Org X Server CVE-2018-14665 Multiple Local Privilege Escalation Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  X.Org X Server CVE-2018-14665 Multiple Local Privilege Escalation Vulnerability

  Tags:   

• 0:00

  Vuln: OpenSSL CVE-2018-0734 Side Channel Attack Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenSSL CVE-2018-0734 Side Channel Attack Information Disclosure Vulnerability

  Tags:   

• 0:00

  Vuln: Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  Oracle Solaris CVE-2017-3623 Remote Code Execution Vulnerability

  Tags:   

• 0:00

  Vuln: OpenSSL CVE-2018-5407 Side Channel Attack Information Disclosure Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  OpenSSL CVE-2018-5407 Side Channel Attack Information Disclosure Vulnerability

  Tags:   

• 0:00

  Vuln: phpMyAdmin CVE-2018-19968 Local File Include Vulnerability

   » ‎ SecurityFocus Vulnerabilities
  phpMyAdmin CVE-2018-19968 Local File Include Vulnerability

  Tags:   

• December 11, 2018
• 22:00

  FPGA Hack Becomes An Atari Game Genie

   » ‎ Hack a Day

  The Game Genie is a classic of the early 90s video game scene. It’s how you would have beaten the Ninja Turtles game, and it’s why the connector in your NES doesn’t work as it should. They never made a Game Genie for the Atari 2600, though, because by the time the Game Genie was released, the Atari was languishing on the bottom shelves of Toys R Us. Now though, we have FPGAs and development tools. We can build our own. That’s exactly what [Andy] did, and his Game Genie for the 2600 works as well as any commercial product …read more

  Tags:  fpga  

• 21:19

  WordPress Snap Creek Duplicator Code Injection

   » ‎ Packet Storm Security Exploits
  When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters before inserting them inside the wp-config.php file, leading to arbitrary PHP code execution. WARNING: This exploit WILL break the wp-config.php file. If possible try to restore backups of the configuration after the exploit to make the WordPress site work again.

  Tags:   

• 21:19

  WordPress Snap Creek Duplicator Code Injection

   » ‎ Packet Storm Security Recent Files
  When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters before inserting them inside the wp-config.php file, leading to arbitrary PHP code execution. WARNING: This exploit WILL break the wp-config.php file. If possible try to restore backups of the configuration after the exploit to make the WordPress site work again.

  Tags:   

• 21:19

  WordPress Snap Creek Duplicator Code Injection

   » ‎ Packet Storm Security Misc. Files
  When the WordPress plugin Snap Creek Duplicator restores a backup, it leaves dangerous files in the filesystem such as installer.php and installer-backup.php. These files allow anyone to call a function that overwrite the wp-config.php file AND this function does not sanitize POST parameters before inserting them inside the wp-config.php file, leading to arbitrary PHP code execution. WARNING: This exploit WILL break the wp-config.php file. If possible try to restore backups of the configuration after the exploit to make the WordPress site work again.

  Tags:   

• 21:12

  HotelDruid 2.3 SQL Injection

   » ‎ Packet Storm Security Exploits
  HotelDruid version 2.3 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:12

  HotelDruid 2.3 SQL Injection

   » ‎ Packet Storm Security Recent Files
  HotelDruid version 2.3 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:12

  HotelDruid 2.3 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  HotelDruid version 2.3 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:12

  Apache OFBiz 16.11.05 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  Apache OFBiz version 16.11.05 suffers from a cross site scripting vulnerability.

  Tags:   

• 21:12

  Apache OFBiz 16.11.05 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  Apache OFBiz version 16.11.05 suffers from a cross site scripting vulnerability.

  Tags:   

• 21:12

  Apache OFBiz 16.11.05 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  Apache OFBiz version 16.11.05 suffers from a cross site scripting vulnerability.

  Tags:   

• 21:09

  WordPress AutoSuggest 0.24 SQL Injection

   » ‎ Packet Storm Security Exploits
  WordPress AutoSuggest plugin version 0.24 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:09

  WordPress AutoSuggest 0.24 SQL Injection

   » ‎ Packet Storm Security Recent Files
  WordPress AutoSuggest plugin version 0.24 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:09

  WordPress AutoSuggest 0.24 SQL Injection

   » ‎ Packet Storm Security Misc. Files
  WordPress AutoSuggest plugin version 0.24 suffers from a remote SQL injection vulnerability.

  Tags:   

• 21:08

  ThinkPHP 5.x Remote Code Execution

   » ‎ Packet Storm Security Exploits
  ThinkPHP versions prior to 5.0.23 and prior to 5.1.31 suffer from a remote code execution vulnerability.

  Tags:   

• 21:08

  ThinkPHP 5.x Remote Code Execution

   » ‎ Packet Storm Security Recent Files
  ThinkPHP versions prior to 5.0.23 and prior to 5.1.31 suffer from a remote code execution vulnerability.

  Tags:   

• 21:08

  ThinkPHP 5.x Remote Code Execution

   » ‎ Packet Storm Security Misc. Files
  ThinkPHP versions prior to 5.0.23 and prior to 5.1.31 suffer from a remote code execution vulnerability.

  Tags:   

• 21:07

  Huawei B315s-22 Information Disclosure

   » ‎ Packet Storm Security Exploits
  Huawei B315s-22 suffers from an information disclosure vulnerability.

  Tags:   

• 21:07

  Huawei B315s-22 Information Disclosure

   » ‎ Packet Storm Security Recent Files
  Huawei B315s-22 suffers from an information disclosure vulnerability.

  Tags:   

• 21:07

  Huawei B315s-22 Information Disclosure

   » ‎ Packet Storm Security Misc. Files
  Huawei B315s-22 suffers from an information disclosure vulnerability.

  Tags:   

• 21:06

  Adobe ColdFusion 2018 Shell Upload

   » ‎ Packet Storm Security Exploits
  Adobe ColdFusion 2018 suffers from a remote shell upload vulnerability.

  Tags:   

• 21:06

  Adobe ColdFusion 2018 Shell Upload

   » ‎ Packet Storm Security Recent Files
  Adobe ColdFusion 2018 suffers from a remote shell upload vulnerability.

  Tags:   

• 21:06

  Adobe ColdFusion 2018 Shell Upload

   » ‎ Packet Storm Security Misc. Files
  Adobe ColdFusion 2018 suffers from a remote shell upload vulnerability.

  Tags:   

• 21:04

  TP-Link Archer C1200 Cross Site Scripting

   » ‎ Packet Storm Security Exploits
  TP-Link Archer C1200 suffers from a cross site scripting vulnerability.

  Tags:   

• 21:04

  TP-Link Archer C1200 Cross Site Scripting

   » ‎ Packet Storm Security Recent Files
  TP-Link Archer C1200 suffers from a cross site scripting vulnerability.

  Tags:   

• 21:04

  TP-Link Archer C1200 Cross Site Scripting

   » ‎ Packet Storm Security Misc. Files
  TP-Link Archer C1200 suffers from a cross site scripting vulnerability.

  Tags:   

• 20:59

  PrestaShop 1.6.x / 1.7.x Remote Code Execution

   » ‎ Packet Storm Security Exploits
  PrestaShop versions 1.6.x and 1.7.x suffer from a remote code execution vulnerability.

  Tags:   

• 20:59

  PrestaShop 1.6.x / 1.7.x Remote Code Execution

   » ‎ Packet Storm Security Recent Files
  PrestaShop versions 1.6.x and 1.7.x suffer from a remote code execution vulnerability.

  Tags:   

• 20:59

  PrestaShop 1.6.x / 1.7.x Remote Code Execution

   » ‎ Packet Storm Security Misc. Files
  PrestaShop versions 1.6.x and 1.7.x suffer from a remote code execution vulnerability.

  Tags:   

• 20:58

  Tourism Website Blog Code Execution / SQL Injection

   » ‎ Packet Storm Security Exploits
  Tourism Website version Blog suffers from code execution and remote SQL injection vulnerabilities.

  Tags:   

• 20:58

  Tourism Website Blog Code Execution / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Tourism Website version Blog suffers from code execution and remote SQL injection vulnerabilities.

  Tags:   

• 20:58

  Tourism Website Blog Code Execution / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Tourism Website version Blog suffers from code execution and remote SQL injection vulnerabilities.

  Tags:   

• 20:57

  Alumni Tracer SMS Notification Cross Site Request Forgery / SQL Injection

   » ‎ Packet Storm Security Exploits
  Alumni Tracer SMS version Notification suffers from cross site request forgery and remote SQL injection vulnerabilities.

  Tags:   

• 20:57

  Alumni Tracer SMS Notification Cross Site Request Forgery / SQL Injection

   » ‎ Packet Storm Security Recent Files
  Alumni Tracer SMS version Notification suffers from cross site request forgery and remote SQL injection vulnerabilities.

  Tags:   

• 20:57

  Alumni Tracer SMS Notification Cross Site Request Forgery / SQL Injection

   » ‎ Packet Storm Security Misc. Files
  Alumni Tracer SMS version Notification suffers from cross site request forgery and remote SQL injection vulnerabilities.

  Tags:   

• 20:56

  Linux/x86 execve(/usr/bin/ncat -lvp 1337 -e /bin/bash) Shellcode

   » ‎ Packet Storm Security Recent Files
  95 bytes small Linux/x86 execve(/usr/bin/ncat -lvp 1337 -e /bin/bash) null-free shellcode.

  Tags:   

• 20:56

  Linux/x86 execve(/usr/bin/ncat -lvp 1337 -e /bin/bash) Shellcode

   » ‎ Packet Storm Security Misc. Files
  95 bytes small Linux/x86 execve(/usr/bin/ncat -lvp 1337 -e /bin/bash) null-free shellcode.

  Tags:   

• 20:55

  PHP Source Code Analysis

   » ‎ Packet Storm Security Recent Files
  Whitepaper called PHP Source Code Analysis. Written in Turkish.

  Tags:   

• 20:55

  PHP Source Code Analysis

   » ‎ Packet Storm Security Misc. Files
  Whitepaper called PHP Source Code Analysis. Written in Turkish.

  Tags:   

• 20:53

  SmartFTP Client 9.0.2623.0 Denial Of Service

   » ‎ Packet Storm Security Exploits
  SmartFTP Client version 9.0.2623.0 suffers from a denial of service vulnerability.

  Tags:   

• 20:53

  SmartFTP Client 9.0.2623.0 Denial Of Service

   » ‎ Packet Storm Security Recent Files
  SmartFTP Client version 9.0.2623.0 suffers from a denial of service vulnerability.

  Tags:   

• 20:53

  SmartFTP Client 9.0.2623.0 Denial Of Service

   » ‎ Packet Storm Security Misc. Files
  SmartFTP Client version 9.0.2623.0 suffers from a denial of service vulnerability.

  Tags:   

• 20:52

  LanSpy 2.0.1.159 Buffer Overflow

   » ‎ Packet Storm Security Exploits
  LanSpy version 2.0.1.159 suffers from a local buffer overflow vulnerability.

  Tags:   

• 20:52

  LanSpy 2.0.1.159 Buffer Overflow

   » ‎ Packet Storm Security Recent Files
  LanSpy version 2.0.1.159 suffers from a local buffer overflow vulnerability.

  Tags:   

• 20:52

  LanSpy 2.0.1.159 Buffer Overflow

   » ‎ Packet Storm Security Misc. Files
  LanSpy version 2.0.1.159 suffers from a local buffer overflow vulnerability.

  Tags:   

• 20:50

  PrinterOn Enterprise 4.1.4 Arbitrary File Deletion

   » ‎ Packet Storm Security Exploits
  PrinterOn Enterprise version 4.1.4 suffers from an arbitrary file deletion vulnerability.

  Tags:   

• 20:50

  PrinterOn Enterprise 4.1.4 Arbitrary File Deletion

   » ‎ Packet Storm Security Recent Files
  PrinterOn Enterprise version 4.1.4 suffers from an arbitrary file deletion vulnerability.

  Tags:   

• 20:50

  PrinterOn Enterprise 4.1.4 Arbitrary File Deletion

   » ‎ Packet Storm Security Misc. Files
  PrinterOn Enterprise version 4.1.4 suffers from an arbitrary file deletion vulnerability.

  Tags:   

• 20:46

  CUPS Weak Session Cookie Generation

   » ‎ Packet Storm Security Advisories
  CUPS generates session cookies srandom(time(NULL)) and random() on Linux.

  Tags:   

• 20:46

  CUPS Weak Session Cookie Generation

   » ‎ Packet Storm Security Recent Files
  CUPS generates session cookies srandom(time(NULL)) and random() on Linux.

  Tags:   

• 20:46

  CUPS Weak Session Cookie Generation

   » ‎ Packet Storm Security Misc. Files
  CUPS generates session cookies srandom(time(NULL)) and random() on Linux.

  Tags:   

• 20:45

  Linux userfaultfd tmpfs File Permission Bypass

   » ‎ Packet Storm Security Exploits
  Linux userfaultfd bypasses tmpfs file permissions.

  Tags:   

• 20:45

  Linux userfaultfd tmpfs File Permission Bypass

   » ‎ Packet Storm Security Recent Files
  Linux userfaultfd bypasses tmpfs file permissions.

  Tags:   

• 20:45

  Linux userfaultfd tmpfs File Permission Bypass

   » ‎ Packet Storm Security Misc. Files
  Linux userfaultfd bypasses tmpfs file permissions.

  Tags:   

• 20:44

  Logitech Options Craft WebSocket Server Missing Authentication

   » ‎ Packet Storm Security Advisories
  The Logitech "Options" craft websocket server has no authentication.

  Tags:   

• 20:44

  Logitech Options Craft WebSocket Server Missing Authentication

   » ‎ Packet Storm Security Recent Files
  The Logitech "Options" craft websocket server has no authentication.

  Tags:   

• 20:44

  Logitech Options Craft WebSocket Server Missing Authentication

   » ‎ Packet Storm Security Misc. Files
  The Logitech "Options" craft websocket server has no authentication.

  Tags:   

• 20:42

  WebKit JIT Proxy Object Issue

   » ‎ Packet Storm Security Exploits
  WebKit JIT int32/double arrays can have proxy objects in the prototype chains.

  Tags:   

• 20:42

  WebKit JIT Proxy Object Issue

   » ‎ Packet Storm Security Recent Files
  WebKit JIT int32/double arrays can have proxy objects in the prototype chains.

  Tags:   

• 20:42

  WebKit JIT Proxy Object Issue

   » ‎ Packet Storm Security Misc. Files
  WebKit JIT int32/double arrays can have proxy objects in the prototype chains.

  Tags:   

• 20:41

  Ubuntu Security Notice USN-3844-1

   » ‎ Packet Storm Security Advisories
  Ubuntu Security Notice 3844-1 - Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restrictions, or execute arbitrary code. Multiple security issues were discovered in WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to open privileged pages, or bypass other security restrictions. Various other issues were also addressed.

  Tags:   

• 20:41

  Ubuntu Security Notice USN-3844-1

   » ‎ Packet Storm Security Recent Files
  Ubuntu Security Notice 3844-1 - Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restrictions, or execute arbitrary code. Multiple security issues were discovered in WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to open privileged pages, or bypass other security restrictions. Various other issues were also addressed.

  Tags:   

• 20:41

  Ubuntu Security Notice USN-3844-1

   » ‎ Packet Storm Security Misc. Files
  Ubuntu Security Notice 3844-1 - Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass same-origin restrictions, or execute arbitrary code. Multiple security issues were discovered in WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to open privileged pages, or bypass other security restrictions. Various other issues were also addressed.

  Tags:   

• 20:39

  Microsoft Security Bulletin CVE Revision Increment For December, 2018

   » ‎ Packet Storm Security Advisories
  This Microsoft bulletin summary lists CVEs that have undergone a major revision increment.

  Tags:   

• 20:39

  Microsoft Security Bulletin CVE Revision Increment For December, 2018

   » ‎ Packet Storm Security Recent Files
  This Microsoft bulletin summary lists CVEs that have undergone a major revision increment.

  Tags:   

• 20:39

  Microsoft Security Bulletin CVE Revision Increment For December, 2018

   » ‎ Packet Storm Security Misc. Files
  This Microsoft bulletin summary lists CVEs that have undergone a major revision increment.

  Tags:   

• 20:38

  Microsoft Security Update Summary For December 11, 2018

   » ‎ Packet Storm Security Advisories
  This Microsoft summary lists Microsoft security updates released for December 11, 2018.

  Tags:   

• 20:38

  Microsoft Security Update Summary For December 11, 2018

   » ‎ Packet Storm Security Recent Files
  This Microsoft summary lists Microsoft security updates released for December 11, 2018.

  Tags:   

• 20:38

  Microsoft Security Update Summary For December 11, 2018

   » ‎ Packet Storm Security Misc. Files
  This Microsoft summary lists Microsoft security updates released for December 11, 2018.

  Tags:   

• 20:15

  Experian Exposes Apparent Customer Data In Training Manuals

   » ‎ Packet Storm Security Headlines
  Experian Exposes Apparent Customer Data In Training Manuals

  Tags:  headlineprivacybankcybercrimedata lossfraudidentity theft  

• 19:00

  Improving Depth Of Field With Only 5 Phones

   » ‎ Hack a Day

  The hottest new trend in photography is manipulating Depth of Field, or DOF. It’s how you get those wonderful portraits with the subject in focus and the background ever so artfully blurred out. In years past, it was achieved with intelligent use of lenses and settings on an SLR film camera, but now, it’s all in the software.

  For the Pixel 2 smartphone, Google had used some tricky phase-detection autofocus (PDAF) tricks to compute depth data in images, and used this to decide which parts of images to blur. Distant areas would be blurred more, while the subject in the …read more

  Tags:  news  

• 19:00

  Improving Depth Of Field With Only 5 Phones

   » ‎ Hack a Day

  The hottest new trend in photography is manipulating Depth of Field, or DOF. It’s how you get those wonderful portraits with the subject in focus and the background ever so artfully blurred out. In years past, it was achieved with intelligent use of lenses and settings on an SLR film camera, but now, it’s all in the software.

  For the Pixel 2 smartphone, Google had used some tricky phase-detection autofocus (PDAF) tricks to compute depth data in images, and used this to decide which parts of images to blur. Distant areas would be blurred more, while the subject in the …read more

  Tags:  news  

• 17:20

  Microsoft Security Advisory Updates For December 11, 2018

   » ‎ Packet Storm Security Advisories
  This Microsoft advisory notification includes advisories released or updated on December 11, 2018.

  Tags:   

• 17:20

  Microsoft Security Advisory Updates For December 11, 2018

   » ‎ Packet Storm Security Recent Files
  This Microsoft advisory notification includes advisories released or updated on December 11, 2018.

  Tags: