odlican.net cms v.1.5 remote file upload vulnerability
Author: Teo Manojlovic
http://packetstormsecurity.org/1002-exploits/odlican-upload.txt
http://secunia.com/advisories/38488/
http://www.exploit-db.com/exploits/11340
>>Forum mladih Igmanske inicijative i Fondacija Friedrich Ebert u Beogradu pozivaju sve zainteresovane da se prijave za učešće u radu I Foruma nove regionalne politike i evropskih integracija, koji će se održati od 12-14. maja 2010. godine na Fruškoj gori.
read more
>>
Blic: Predstavnici softverskog diva upozoravaju korisnike da se na internetu pojavilo antivirusno rešenje koje svojim nazivom pokušava da zavara korisnike da softver u stvari dolazi iz "Majkrosofta". >>
This article is a continuation of the following GNUCITIZEN articles: Hacking Linksys IP Cameras (pt 1), Hacking Linksys IP Cameras (pt 2), Hacking Linksys IP Cameras (pt 3), Hacking Linksys IP Cameras (pt 4), Hacking Linksys IP Cameras (pt 5).
As we know, there are several ways one could go about hunting for IP cameras on the net. The slowest way would be to portscan random IP addresses for certain ports and programmatically detect if the web interface of a given camer >>
Feedproxy Security
03-08-2010 0:20
Best of Application Security (Friday, Mar. 5)
Ten of Application Security industry's coolest, most interesting, important, and entertaining links from the past week -- in no particular order.
Verizon Incident Metrics Framework ReleasedWiseguys net $25m in ticket scalping racketState of Software Security Report Internet Explorer 8 and the Security Development Lifecycle (SDL)Top 10 Hacks of 2009 and WAF MitigationsFTC alleges that ControlScan offered 'little or no verification' of site security or privacy I’m in ur 4sq, snarfin ur pass >>
Feedproxy Security
-
ha.ckers: Using Parameter Pollution and Clickjacking to Aid Anti-CSRF Bypass
-
Ilia Alshanetsky: ConFoo PHP 5.3 == Awesome! Slides
-
ha.ckers: RSA Conference Wrapup
Security researchers recently unveiled findings about malware that came preinstalled on a Vodafone mobile phone handset. Its memory card was also believed to carry malware. A leading mobile telecommunication company, Vodafone, has been taking the heat for packing malware straight out of the box on their HTC Magic Android smartphones. The recipient of one of the malware-laden phones was, fortunately, an employee of the Spanish antivirus firm, P >>
trendmicro
-
trendmicro: More Adobe Exploits in the Wild
-
ha.ckers: Using Parameter Pollution and Clickjacking to Aid Anti-CSRF Bypass
-
Feedproxy Security: Plane crashes and security breaches

Filed under: Software Update, Security
It’s been a while since I’ve talked about Clickjacking, with only a few exceptions here and there. Mostly because I haven’t seen it much in the wild - at least not yet. But there’s still a lot of research out there to be done. I got an interesting email the other day that talked about a way to use parameter pollution (or a mix of URL parameters and POST) to create a condition where you can defeat CSRF tokens:
The technique, found by Lava Kuppan describes a scenario where a m >>
ha.ckers
03-11-2010 22:25
Plane crashes and security breaches
by Christian Moldes
In Outliers, Malcom Gladwell analyses how plane crashes are the result of a combination of errors. I found this analysis very interesting because of the similarity with most security breaches. A brief excerpt of his book:
“Plane crashes rarely happen in real life the same way they happen in the movies. Some engine part does not explode in a fiery bang. The rudder doesn’t suddenly snap under the force of takeoff. The cap >>
Feedproxy Security
-
theregister: Password reset questions dead easy to guess
-
1raindrop: On the Risk of Overfocusing on Seductive Details
-
: Bejtlich OWASP Podcast Posted
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
![]() |
xss antivirus security vulnerability avast SPAM attacks pentesting microsoft kasper zastita Sponzorisani linkovi: Grcki stubovi Torte |