A vulnerability which is known to the designers, implementers, or operators of the system, but has not been corrected.
0
votes
0answers
28 views
PHP folder browsing [on hold]
I made PHP app that allows you to browse through folders. I want to make impossible to browse anywhere else than in app folder and it's subfolders. Path to current folder is in URL (GET).
I would do ...
0
votes
4answers
74 views
How to secure my website's FTP?
When I opened ftp command prompt and typed open mydomain.com, it gave me the following and I think that this is a security vulnerable.
connected to mydomain.com.
220----- Welcome to Pure-FTPd ...
0
votes
0answers
16 views
Tomcat 7 and ETags
I recently got updated by InfoSec that we need to be careful about ETags using Apache WebServer (HTTPD) as they reveal inode and can be exploited especially in NFS etc.
But I am moving to Tomcat 7. ...
0
votes
1answer
127 views
Trying to reproduce a file upload compromise on Joomla
After telling my workmates and boss that we had a very critical lack of security controls, finally we got compromised!
They had a Joomla 1.5 which was exploited using a file upload vulnerability. WSO ...
-1
votes
0answers
5 views
Known vulnerabilities in (EC-)KCDSA [migrated]
Does anybody know if there's known vulnerabilities in KCDSA/EC-KCDSA?
I have been researching for the past few hours and I haven't found anything. Wikipedia has very limited amount of information and ...
0
votes
1answer
26 views
automatic connection from LSASS to different IPs. Is this the usual behavior?
I'm using windows 7. firefox 22. connecting through a regular residential wifi router.
In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
-2
votes
1answer
41 views
websites with vulnerabilities INFO [duplicate]
Websites like
http://www.cvedetails.com/
http://www.securityfocus.com
This websites show information about vulnerabilities and exploits, which other sites are similar?
0
votes
1answer
77 views
Is ASP.net More Secure than PHP in GENERAL? [closed]
In other words, my (long version) question is: Are developers able to get away with, more using ASP.net than PHP in terms of writing secure code for their apps?
I ask this because ASP.net has many ...
1
vote
1answer
58 views
What is LFI vulnerability
LFI: Local file inclusion.
After going through many tutorials I have two things I can/t figure out:
checking the vulnerability: I don't understand what makes a website vulnerable or not. For ...
0
votes
1answer
149 views
How many security holes were discovered in the original version of Windows XP?
In order to steer our future, it is important to understand our past. Now as the end of Windows XP draws near it would be interesting to see how the worlds most popular operating system fared ...
2
votes
2answers
65 views
How do vulnerability reports work?
I'm really interested in IT security and I would like to know how vulnerability reports work.
Is there a central database for those things? I often see CVE-XXX-XXX on disclosures, but I don't ...
0
votes
2answers
221 views
MS12-020: Remote Code Execution
I'm doing some exercises in the lab. My vuln. scanner detects MS12-020 on a few machines.
The report indicates that this could be exploited to allow the execution of code remotely.
To me this would ...
10
votes
7answers
857 views
Can hackers detect my operating system?
I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
0
votes
1answer
93 views
Getting detailed information about an infected website
I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the ...
1
vote
1answer
105 views
Is htaccess secure enought to whitelist clients IPs?
I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this:
order deny,allow
deny from all
allow from X.Y.Z.Q
These ...
-3
votes
1answer
336 views
Wordpress - cleartext admin credentials disclosure
I am testing my own wordpress blog against security issues with wpscan.
Honestly I have never done that before and was shocked after I saw the result.
One vulnerability of my wordpress site is:
[+] ...
1
vote
2answers
161 views
What hacking risks a site has if it has no input boxes?
I recently posted a question about recovery of website from XSS attacks, http://stackoverflow.com/questions/20759081/how-to-recover-a-site-after-an-xss-attack...
Doing a bit more digging online, i ...
0
votes
1answer
33 views
Photo Attachment's Feature For Some Mail Servers [duplicate]
You already know google started new service which is related to gmail.
http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html
When we send new mail to friends.If it ...
4
votes
1answer
95 views
What are the major vulns that affect the Dalvik VM of Android?
I frequently hear about the security risks of using Android. But few people who write articles on this subject ever identify what parts of Android are at fault, nor do they identify design flaws. Can ...
0
votes
3answers
117 views
What is best method for retest blind sql vulnerability
I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
0
votes
1answer
54 views
Is there other vulnerabilities than CVE of NVD
I am aware that there is the CVE list published by the NVD. Are there any other important vulnerabilities lists that show vulnerabilities other than the NVDs?
Thx
1
vote
1answer
72 views
Security risks if a server in not supported anymore
I have an SQL 2000 database server which is not supported by Microsoft anymore. We have our information security policy applied and even PCI requirements.
What are the security risks that we might ...
2
votes
1answer
109 views
I don't quite understand the principle of “use after free” and CVE-2010-1119
I am a rookie hacker studying android vulnerabilities. My partner and I are studying "CVE-2010-1119".
Unfortunately there does not appear to be enough information online. Could anyone please help me ...
4
votes
1answer
151 views
On Hawkes' technique to bypass canaries
I found this reference to bypass canaries: http://sota.gen.nz/hawkes_openbsd.pdf
It recommends to brute force the canary byte-for-byte. I don't understand how this works: "Technique is to brute force ...
1
vote
3answers
109 views
What is a good way to be alerted of major security patches for software I use?
I maintain a few webservers running ubuntu, apache, mysql, and python/django. I update all the libraries quarterly, but I'd like to update more often when a patch for a major vulnerability is ...
0
votes
1answer
565 views
Cable modem/router hidden internal ISP network?
I was querying my router(Thomson TCW750-4) over the SNMP and stumbled upon some interesting information.
I see that the router actually has five separate network configurations operational:
...
0
votes
2answers
126 views
Preventing exploits like ROP and Return-to-libc in modern Operating systems
As I was reading about the advanced exploits such as Return Oriented Programming (ROP), Retun-to-libc, etc., I came across many defenses to these attacks including techniques like ASLR, kBouncer, ROP ...
1
vote
1answer
159 views
If I find a Microsoft Vulnerability do I get credit for reporting it directly to Microsoft?
I know that if you discover a vulnerability in a open source product you have the option of fixing it yourself, creating a bug report or other methods to prove that you have contributed to the ...
9
votes
7answers
6k views
Using google dorks for a specific site?
I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this.
Traditionally, one uses a 'dork' by searching "Index ...
2
votes
1answer
62 views
Test suite for a white-box fuzzer
I have created a white-box fuzzer by extending the Crest.
Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool.
where i can find ...
1
vote
1answer
109 views
How to check www.abc.com/?page=xyz is vulnerable to RFI or not?
On my friends website when I typed www.abc.com/?page=non existing page, I got page not found error.But when I gave www.abc.com/?page=www.google.com I got blank white page.So is this website ...
6
votes
2answers
200 views
How stack smashing is prevented?
I just read AlephOne's paper on smashing the stack, and implemented it on my machine (Ubuntu 12.04), it was a bit old so had to take a lot of help from the internet but I enjoyed it.
Now, I want to ...
0
votes
1answer
116 views
What vulnerabilities does a malware exploit? [closed]
I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
1
vote
3answers
263 views
Vulnerability scanner shows SQL errors were disclosed.How Severe it is?
When I scanned my site for Vulnerabilities I found this error.
Various SQL errors were disclosed within the application source code or other files.
I have checked for sql injection and confirmed ...
2
votes
1answer
285 views
How do I know if a font is malicious?
There are cases of fonts being used for exploiting vulnerabilities {for ex: ThreatPost, SecureList and F-Secure}. My question is if you ever get hands on such a font, how do you know that it is ...
3
votes
2answers
862 views
Help Configuring Cisco Router
I have some network issues in my network due to misconfiguration of Cisco router and switches. Please give me some advice or solutions to fix these vulnerabilities and configuration issues.
...
4
votes
2answers
347 views
How to hack a Win95 machine?
While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...
2
votes
3answers
363 views
Top 10 dangerous mistakes in C programming? [closed]
What is the top dangerous mistakes in C programming?
for example misusing a strcpy causes a stack-overflow and code injection.
I'm looking for at least 10 bad programming pattern in C.
2
votes
2answers
633 views
Security behind the windows 8 eye
I use the Windows 8 operating system. Whenever I navigate to the login page of Internet Explorer 10, or even the login screen of the operating system, I see an eye symbol at the end of the password ...
0
votes
4answers
411 views
How can i protect myself from tor vulnerablity on windows
Recently I came across an article regarding Tor. According to article
there is speculation that the uncovered malware was used by a law
enforcement agency to harvest the IP addresses of users ...
1
vote
1answer
98 views
Notification or report for security problem of unix systems? [duplicate]
I have unix systems(Solaris,Oracle,Redhat vs).I have to control all system for security problem,bugs,patch,vulnerabilities
I'm looking for securty information for all security issue
After that I'll ...
-7
votes
1answer
293 views
What are the vulnerabilities on port 23? [closed]
I'm working on a pen-testing project and still in the beginning but I faced a switch with only 80 & 23 ports opened. How can I use these ports to attack that switch ?
1
vote
0answers
26 views
How would you find a complete list of a software's vulnerabilities? [duplicate]
I'm interested in the number of vulnerabilities over time, not in specific information about the vulnerabilities. I also don't expect any list to be completely authoritative. But what list could I ...
5
votes
3answers
877 views
How exactly is MD5 vulnerable to collission attacks?
I've often read that MD5 (among other hashing algorithms) is vulnerable to collisions attacks. I understand the collision part: there exist two (or more) inputs such that MD5 will generate the same ...
4
votes
2answers
584 views
What is the impact of the Bluebox Android APK integrity vulnerability?
Bluebox have recently disclosed a vulnerability (Android security bug 8219321) in Android, that is getting a lot of coverage in the media.
The title of the post is "Uncovering Android Master Key" - ...
6
votes
4answers
397 views
Are there any customizable vulnerability notification services? [duplicate]
Are there any services (free or otherwise) that provide information on new vulnerabilities for a given piece of technology?
For example, say I want to be updated of all new Wordpress vulnerabilities ...
12
votes
2answers
615 views
How to make a website patch their poor security?
I am following an online class from a local institution. Recently, I've noticed they don't crypt passwords because they sent me my password by e-mail in clear text.
The website has a lot of personal ...
22
votes
5answers
1k views
IMG tag vulnerability
Is it safe to display images from arbitrary domains? I.e. let's say I have an image on my page:
<img src="http://badguy.com/image.gif" />
What if image.gif will return some js attack vector, ...
4
votes
2answers
270 views
Vulnerability testing without the use of exploits?
I was doing some testing on a server to see if it was vulnerable to a 0-day local exploit (the exploit was for gaining root privileges using a bug in the Linux kernel). There was no real information ...
3
votes
1answer
171 views
Vim Modeline Vulnerabilities
I use vim and have a use case for modelines. A modeline means that vim will parse a textfile for lines like:
# vim: set someoption=somevalue
and will then set those options. This is awesome if ...
