|
Donation/Premium |
|
 |
|
|
|
|
|
|
|
|
|
|
Tons of sites having XSS vulnerabilities reported! |
|
|
immortality writes "
There's a new report out by a company which shows that there might be thousands of sites which have weak sanitation policies. The report details how conesfree.com seems to have injected scripts via the search functionality on these sites to direct users to their content. This is a classic XSS/CSS attack, the surprising thing is the scale. Also, pretty well known sites are listed in the report.
A short and interesting read :-)
"
|
|
|
 |
|
|
Mac hacked in 2 minutes;' Vista on 3rd day; Linux undefeated. |
|
|
happyandyk writes "
After Mac was hacked in 2 minutes at the CanSecWest Conference, it was now the time for Vista to get hacked on the 3rd day. Windows Vista security was compromised through the popular 3rd party Adobe Flash Software.
The MacBook Air went first; a Fujitsu laptop running Vista was hacked on the last day of the contest; but it was Linux, running on a Sony Vaio, that remained undefeated as conference organizers ended a three-way computer hacking challenge Friday at the CanSecWest conference.
Source : WinVistaClub
"
|
|
|
|
|
|
Barracuda Spam Firewall contains hardcoded default login credentials |
|
|
Overview
Barracuda Spam Firewalls from version 3.3.01.001 to 3.3.02.053 have default login credentials that can not be modified by an administrator.
I. Description
Barracuda Spam Firewall appliances provide ingress and egress spam filtering for local area networks. An administrator will typically log into the device by supplying credentials to a secure web-interface.
Barracuda Spam Firewalls version 3.3.01.001 to 3.3.02.053 have a guest account with a fixed username and password. This account can log in to the web interface and can not be restricted by the system's built-in access control lists.
|
|
|
|
|
|
Sun Security Bulletin : Java Plug-in and Java Web Start |
|
|
mowgreen writes "http://sunsolve.sun.com/search/document.do?assetkey=1-26-102557-1
Sun Alert ID: 102557 (RESOLVED)
Synopsis: Java Plug-in and Java Web Start May Allow Applets
and Applications to Run With Unpatched JRE
Product: Java 2 Platform, Standard Edition
Category: Security
1. Impact
The Java Plug-in and Java Web Start both allow applets and applications to specify the version of the Java Runtime Environment (JRE) to run with. However, the versions of Java Web Start and the Java Plug-in listed in Section 2 below may allow applets or applications to run with a specified version of the JRE that does not have the latest security fixes."
|
|
|
|
| |
|
Login |
|
|
|
|
|
|
· New User? · Click here to create a registered account.
|
|
|
Antiphishing |
|
|
|
|
|
|
|
|
|
Microsoft MVP |
|
|
|
|
|
|
|
|
|
