A vulnerability which is known to the designers, implementers, or operators of the system, but has not been corrected.

learn more… | top users | synonyms

1
vote
1answer
280 views

What Is AllowNullSessionFallback?

I've been examining various things under LSA in the registry, and I came across this: ...
2
votes
2answers
560 views

What was the security vulnerability behind Box and Dropbox and what's different now?

Earlier today I received a number of comments saying that my shared links were disabled. I looked around and saw a number of articles explaining what happened, and Dropbox posted an official statement ...
-3
votes
2answers
432 views

What types of software vulnerabilities are out there? [closed]

I have search a lot in the internet and I didn't find anything that is directly answer my question. What type of vulnerabilities are out there. I mean vulnerabilities like buffer overrun, not like XSS ...
-2
votes
3answers
197 views

How do I communicate security issues encountered on an online banking platform?

Occasionally, I've produced (and reproduced) the HTTP 500 Internal Server Error on an online banking platform - quite a famous one. I suppose the errors are due to bugs in back end code, possibly ...
2
votes
2answers
386 views

I've found security vulnerability in current linux distribution. What next?

I've installed ubuntu server 12.04 on VM two weeks ago. I've created regular snapshots. XXX time ago I've noticed unusual activity and I've found that a backdoor was installed into my server. One of ...
0
votes
1answer
228 views

Fomat String vulnerability used to display data outside the function stack frame?

if we run the following code using the input "hi", the output will simply be "hi" main(int argc, char **argv) { char *secret = "This is a secret 1\n"; char *secret2 = "This is ...
2
votes
0answers
79 views

Should I cancel my current credit card because of heartbleed vulnerability? [duplicate]

I recently looked at my local credit union bank and they said that their site is not vulnerable to heart bleed. However, I have used my credit card in many websites such as grubhub, amazon, some ...
5
votes
1answer
904 views

Does xkcd.com/1353 overstate heartbleed's capability?

Today's xkcd has characters discussing heartbleed: Megan: I mean, this bug isn't just broken encryption. Megan: It lets website visitors make a server dispense random memory contents. Megan: It's ...
1
vote
1answer
236 views

OpenSSL exploit [closed]

I have read about recent vulnerability in openssl. I tried to exploit one of my cloud servers where I run my web sites. I managed to get 64 KB of data. But what I managed to get was only HTML, CSS, ...
-3
votes
3answers
117 views

How can get email about latest vulnerabilities [closed]

Today my friend got email for the latest vulnerablility heartbleed. But i could not find where i can subscribe so that i can also get emails about latest vulnerabilities Can anyone please help me ...
4
votes
2answers
360 views

Are there any known Heartbleed attacks?

Are there any known instances of malicious security breeches exploiting the Heartbleed vulnerability? Or is there at present only a known vulnerability, albeit a very serious one?
4
votes
3answers
2k views

HeartBleed - How to detect compromised websites

Is there a way to determine as an end-user which HTTPS sites use OpenSSL? Due to heartbleed it is recommended that clients change their passwords that were sent over TLS recently as private keys may ...
4
votes
2answers
84 views

How do I know that I'm vulnerable to the: “ Coordinated Website Compromise Campaigns Continue to Plague Internet ”

http://blogs.cisco.com/security/mass-compromise-of-the-obsolete/ and: All Redhat/CentOS versions plus nearly 100% of linux-based routers run 2.6 Since the article is extremely ...
0
votes
1answer
71 views

Are there limits (or, what are the limits) to our understanding of AES's resistance to known plaintext attacks?

Let's assume the same message is encrypted many times, each time with a different IV but the same key. Do we reach a point where just knowing what that message is gives us a plausible attack by which ...
2
votes
1answer
263 views

What is the exactly mean of these CPE file fields?

I am working in the development of an application that have to download and parse this CPE file definition: http://static.nvd.nist.gov/feeds/xml/cpe/dictionary/official-cpe-dictionary_v2.3.xml My ...
0
votes
4answers
197 views

How to secure my website's FTP?

When I opened ftp command prompt and typed open mydomain.com, it gave me the following and I think that this is a security vulnerable. connected to mydomain.com. 220----- Welcome to Pure-FTPd ...
1
vote
0answers
203 views

Tomcat 7 and ETags

I recently got updated by InfoSec that we need to be careful about ETags using Apache WebServer (HTTPD) as they reveal inode and can be exploited especially in NFS etc. But I am moving to Tomcat 7. ...
1
vote
1answer
2k views

Trying to reproduce a file upload compromise on Joomla

After telling my workmates and boss that we had a very critical lack of security controls, finally we got compromised! They had a Joomla 1.5 which was exploited using a file upload vulnerability. WSO ...
1
vote
0answers
501 views

automatic connection from LSASS to different IPs. Is this the usual behavior?

I'm using windows 7. firefox 22. connecting through a regular residential wifi router. In the last month I've noticed that when I connect to the internet and once in a while my firewall indicates me ...
-2
votes
1answer
61 views

websites with vulnerabilities INFO [duplicate]

Websites like http://www.cvedetails.com/ http://www.securityfocus.com This websites show information about vulnerabilities and exploits, which other sites are similar?
0
votes
1answer
1k views

Is ASP.net More Secure than PHP in GENERAL? [closed]

In other words, my (long version) question is: Are developers able to get away with, more using ASP.net than PHP in terms of writing secure code for their apps? I ask this because ASP.net has many ...
1
vote
1answer
199 views

What is LFI vulnerability

LFI: Local file inclusion. After going through many tutorials I have two things I can/t figure out: checking the vulnerability: I don't understand what makes a website vulnerable or not. For ...
0
votes
1answer
222 views

How many security holes were discovered in the original version of Windows XP?

In order to steer our future, it is important to understand our past. Now as the end of Windows XP draws near it would be interesting to see how the worlds most popular operating system fared ...
2
votes
2answers
90 views

How do vulnerability reports work?

I'm really interested in IT security and I would like to know how vulnerability reports work. Is there a central database for those things? I often see CVE-XXX-XXX on disclosures, but I don't ...
0
votes
2answers
2k views

MS12-020: Remote Code Execution

I'm doing some exercises in the lab. My vuln. scanner detects MS12-020 on a few machines. The report indicates that this could be exploited to allow the execution of code remotely. To me this would ...
15
votes
7answers
2k views

Can hackers detect my operating system?

I've seen people demonstrating the use of backtrack to attack VMs. In one of the components of backtrack, it shows the operating system of the targets. Since support for Windows XP is ending soon, i ...
0
votes
2answers
153 views

Getting detailed information about an infected website

I have a set of bad URL's. I want to know the nature of infections affecting these URL's . Running an online scanner such as VirusTotal gives me some basic information from various engines about the ...
2
votes
1answer
979 views

Is htaccess secure enought to whitelist clients IPs?

I'm using .htaccess to control source IP of connections to my web application. My configuration looks more or less like this: order deny,allow deny from all allow from X.Y.Z.Q These ...
-3
votes
1answer
757 views

Wordpress - cleartext admin credentials disclosure

I am testing my own wordpress blog against security issues with wpscan. Honestly I have never done that before and was shocked after I saw the result. One vulnerability of my wordpress site is: [+] ...
2
votes
2answers
483 views

What hacking risks a site has if it has no input boxes?

I recently posted a question about recovery of website from XSS attacks, http://stackoverflow.com/questions/20759081/how-to-recover-a-site-after-an-xss-attack... Doing a bit more digging online, i ...
0
votes
1answer
48 views

Photo Attachment's Feature For Some Mail Servers [duplicate]

You already know google started new service which is related to gmail. http://gmailblog.blogspot.com/2013/11/attachments-in-gmail-now-with-power-of.html When we send new mail to friends.If it ...
4
votes
1answer
232 views

What are the major vulns that affect the Dalvik VM of Android?

I frequently hear about the security risks of using Android. But few people who write articles on this subject ever identify what parts of Android are at fault, nor do they identify design flaws. Can ...
1
vote
3answers
372 views

What is best method for retest blind sql vulnerability

I tested web site application with commercial automated tool.There are some blind sql injection.I want to retest this results .Is there any good method for test blind sql injection with tool or ...
1
vote
1answer
108 views

Is there other vulnerabilities than CVE of NVD

I am aware that there is the CVE list published by the NVD. Are there any other important vulnerabilities lists that show vulnerabilities other than the NVDs? Thx
1
vote
1answer
183 views

Security risks if a server in not supported anymore

I have an SQL 2000 database server which is not supported by Microsoft anymore. We have our information security policy applied and even PCI requirements. What are the security risks that we might ...
2
votes
1answer
184 views

I don't quite understand the principle of “use after free” and CVE-2010-1119

I am a rookie hacker studying android vulnerabilities. My partner and I are studying "CVE-2010-1119". Unfortunately there does not appear to be enough information online. Could anyone please help me ...
5
votes
2answers
396 views

On Hawkes' technique to bypass canaries

I found this reference to bypass canaries: http://sota.gen.nz/hawkes_openbsd.pdf It recommends to brute force the canary byte-for-byte. I don't understand how this works: "Technique is to brute force ...
0
votes
4answers
251 views

What is a good way to be alerted of major security patches for software I use? [duplicate]

I maintain a few webservers running ubuntu, apache, mysql, and python/django. I update all the libraries quarterly, but I'd like to update more often when a patch for a major vulnerability is ...
0
votes
1answer
2k views

Cable modem/router hidden internal ISP network?

I was querying my router(Thomson TCW750-4) over the SNMP and stumbled upon some interesting information. I see that the router actually has five separate network configurations operational: ...
1
vote
2answers
250 views

Preventing exploits like ROP and Return-to-libc in modern Operating systems

As I was reading about the advanced exploits such as Return Oriented Programming (ROP), Retun-to-libc, etc., I came across many defenses to these attacks including techniques like ASLR, kBouncer, ROP ...
1
vote
1answer
265 views

If I find a Microsoft Vulnerability do I get credit for reporting it directly to Microsoft?

I know that if you discover a vulnerability in a open source product you have the option of fixing it yourself, creating a bug report or other methods to prove that you have contributed to the ...
11
votes
7answers
21k views

Using google dorks for a specific site?

I need to see if a site I am testing is vulnerable to any of the multiple Google dorks that are available at sites like this and this. Traditionally, one uses a 'dork' by searching "Index ...
3
votes
1answer
87 views

Test suite for a white-box fuzzer

I have created a white-box fuzzer by extending the Crest. Now, I'm looking for a test suite (a set of c programs with known vulnerabilities) to test the functionality of my tool. where i can find ...
1
vote
1answer
202 views

How to check www.abc.com/?page=xyz is vulnerable to RFI or not?

On my friends website when I typed www.abc.com/?page=non existing page, I got page not found error.But when I gave www.abc.com/?page=www.google.com I got blank white page.So is this website ...
7
votes
2answers
471 views

How stack smashing is prevented?

I just read AlephOne's paper on smashing the stack, and implemented it on my machine (Ubuntu 12.04), it was a bit old so had to take a lot of help from the internet but I enjoyed it. Now, I want to ...
0
votes
1answer
148 views

What vulnerabilities does a malware exploit? [closed]

I have a malware sample. I want to know what vulnerabilities does it exploit (and of which software). I tried analyzing it in IDA Free and it seems that the code was developed in Visual C/C++ runtime. ...
1
vote
3answers
305 views

Vulnerability scanner shows SQL errors were disclosed.How Severe it is?

When I scanned my site for Vulnerabilities I found this error. Various SQL errors were disclosed within the application source code or other files. I have checked for sql injection and confirmed ...
4
votes
1answer
998 views

How do I know if a font is malicious?

There are cases of fonts being used for exploiting vulnerabilities {for ex: ThreatPost, SecureList and F-Secure}. My question is if you ever get hands on such a font, how do you know that it is ...
3
votes
2answers
3k views

Help Configuring Cisco Router

I have some network issues in my network due to misconfiguration of Cisco router and switches. Please give me some advice or solutions to fix these vulnerabilities and configuration issues. ...
5
votes
4answers
752 views

How to hack a Win95 machine?

While playing with old operating systems, I came across that there are no remote code execution exploits available for Win95 machines, running just file share (no IIS or anything else). Win95 neither ...