Xplico is an open source Network Forensic Analysis Tool (NFAT) that allows for data extraction from traffic captures. It supports extraction of mail from POP, IMAP, and SMTP, can extract VoIP streams, etc. This is the version that has a GUI allowing you to view photos, texts and videos contained in MMS messages.
b9516f367af7a347e61ade0106c508246b38cb4e1dcbece44616718b23a7badf
This paper details how poorly Linux devices in cop cars are set up and how their lack of a secure design puts everyone at risk.
fc7efa4a04b53671d3343de2d1e7775fdccf6bd40812c3090eabe0d4f58c410b
Secunia Security Advisory - A vulnerability has been reported in Interbase XE, which can be exploited by malicious people to compromise a vulnerable system.
accf945a2cebc96fcfa0fa614c5a50f4b23f695a6a1975327c4c6958b2a4b0d6
Secunia Security Advisory - Debian has issued an update for qemu-kvm. This fixes a security issue and some vulnerabilities, which can be exploited by malicious, local users in a guest system to cause a DoS (Denial of Service) and potentially gain escalated privilege and by malicious people to bypass certain security restrictions.
abf229c0fbcf6a836f2ec0812a55ca9ee0a541424bbd8bbdfe532ce8df19e683
Secunia Security Advisory - Debian has issued an update for spip. This fixes a vulnerability, which can be exploited by malicious users to cause a DoS (Denial of Service).
2a336ae65a2b3de5d7c2b26e059163fc665049840b6bc575437addcec46428a0
Secunia Security Advisory - Debian has issued an update for iceweasel. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose sensitive information and compromise a user's system.
ec6702cf302b6943242d1471ef77c4754bdd15ea5d0caf9cc1215cdf36ae56c4
Secunia Security Advisory - AutoSec Tools has discovered multiple vulnerabilities in Time and Expense Management System, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a vulnerable system.
01f3ab65a241c3f9f303424d061425e439b8d0faecf84dd6459e6e8146194b87
Secunia Security Advisory - AutoSec Tools has discovered a vulnerability in Tine 2.0, which can be exploited by malicious people to conduct cross-site scripting attacks.
fb5ce019f6381d2ca933c2bd89c4f09343ca825596de84d870e953be162d35f9
Secunia Security Advisory - SUSE has issued an update for the kernel. This fixes multiple weaknesses and vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially gain escalated privileges, by malicious people with physical access to potentially compromise a vulnerable system and cause a DoS, and by malicious people to cause a DoS and potentially compromise a vulnerable system.
aa462f3208b4fe05947578f78359f05b66cce25f2382e96d8658aa22824747a3
Secunia Security Advisory - Ignacio Garrido has reported multiple vulnerabilities in 360 Web Manager, which can be exploited by malicious people to disclose sensitive information, delete files on an affected system, and compromise a vulnerable system.
e4c91f5368c2225859db14c10de6c22b3f027cc98b64d06c09b43e4a1d09d510
Secunia Security Advisory - AutoSec Tools has discovered a vulnerability in FrontAccounting, which can be exploited by malicious people to conduct cross-site request forgery attacks.
e0352e4c2d9c4c5960aaaa719b04e1fa1019c18c5ce784c639fd3036182cc830
Secunia Security Advisory - Ubuntu has issued an update for firefox and xulrunner. This fixes multiple vulnerabilities, which can be exploited by malicious people to disclose sensitive information and compromise a user's system.
59b97ea24368b3cb86dbeb27a22238c46881485380c5733697c4d94b2945eec0
A cross site request forgery vulnerability in Front Accounting version 2.3.4 can be exploited to create a new admin.
276c57c4a04414f8488f50a79caa808f3ef20c522cbb0296f61b1ba5071dd5d8
A reflected cross site scripting vulnerability in LDAP Account Manager version 3.4.0 can be exploited to execute arbitrary JavaScript.
5d743e629aefd622c38a22ab1190e577c9a0c735df0e1f9917a1ce3bc2aa2ceb
A command injection vulnerability in Time and Expense Management System can be exploited to execute arbitrary operating system commands.
51c4634c95a72dd7a3507b01554276d6e188fc95a426618f902ccee708d85bb6
Oracle Enterprise Manager 10g Release 1 and Release 2 both suffer from a cross site scripting vulnerability.
4015885c223ff70fa622d3116b9ad723667b5bf20c559042a9e6f22c17627cd1
Oracle Enterprise Manager 11g Release 1 suffers from a remote SQL injection vulnerability.
f2f11a1a28f0a9de198654ca510395ee753ef265e1a37a322a1ccd7270512599
An arbitrary upload vulnerability in Time and Expense Management System can be exploited to upload a PHP shell.
16b29e1a3571d25e957dea7d04207efa6fa61c470091da011080484606247e3a
A reflected cross site scripting vulnerability in Time and Expense Management System can be exploited to execute arbitrary JavaScript.
9929c1154e8449e482f364c675b0eb774cbb040a0429a1c140032178d50497c4
A reflected cross site scripting vulnerability in Tine version 2.0 can be exploited to execute arbitrary JavaScript.
974e1713b17b2547525c8eb2f602e892fd4d4398944b32b6631e56e7d166bc6b
A reflected cross site scripting vulnerability in WebAuction version 0.3.6 can be exploited to execute arbitrary JavaScript.
6fe6a65011ccf04a17d369e44a4e147b973dad4457b154b13a7713d60b983ee5
Sending a specially crafted network packet to an Oracle Database during the connection before the user authentication is performed it is possible to make the Oracle process consume all available CPU resources. To exploit this vulnerability no authentication is needed, the attacker needs to know the SID or Service Name of the database. Affected are Oracle Database Server versions 10gR1, 10gR2, 11gR1 and 11gR2 (on Windows platform).
6061c4891857303cc29e065da2ea05260f71114bccb80e80eab2d4b335fe434d
A Call For Papers for Network Protocols and Algorithms has been announced. Network Protocols and Algorithms is a free-access online international journal, peer-reviewed and published by Macrothink Institute. It publishes papers focused on the design, development, manage, optimize or monitoring any type of network protocol, communication system, algorithm for communication and any protocol and algorithm to communicate network devices.
69d3d8af620a0172ec05f8c775ee0f18bbc47179e2fe92e7407bc6e16d1ee5d1
Ubuntu Security Notice 1128-1 - Kevin Chen discovered that Vino incorrectly handled certain client framebuffer requests. A remote attacker could use this flaw to cause Vino to crash, leading to a denial of service.
fca3394ce9f2f0b40dffc19c7f0227e7f88d5765a3d7d309cff829797dea9fce
Multiple vendors are affected by a memory exhaustion vulnerability in libc/glob(3) GLOB_BRACE|GLOB_LIMIT.
1d1f0bb940366641cffd2edd81473a10c047934622b6fc4b18eefc826bbb182e