Thing secure will make you more carefull

SEC Consult Security Advisory < 20090707-0 >
==============================

Originaly posting by Bernhard Mueller to Bugtraq

I'll just leave this here ;)

https://www.sec-consult.com/files/SEC_Consult_Vulnerability_Lab_Pwning_Symbian_V1.03_PUBLIC.pdf

Abstract:

1. Perform static analysis of XIP ROM images (dumping, restoring import
and export tables, searching for unsafe function calls)
2. Enable run mode debugging of system binaries running from ROM, by
cracking the AppTRK debug agent
3. (Ab-)use the AppTRK debug agent as a foundation for dynamic
vulnerability analysis
3. Build an exemplary file fuzzer for the video- and audio codecs
shipped with current Nokia smartphones
4. List and briefly analyze the identified bugs
5.... Read more »

######################### Securitylab.ir ########################
# Application Info:
# Name: Empire Cms
# Version: 5.1
# Download: http://www.phome.net/OpenSource/download/EmpireCMS_5.1os_SC_GBK.zip
##############################

I want to ssh hop from A to B to C in a way were only B has the
key and configuration for C:

+---------------+   +---------------+   +---+
| A (key for B) |---| B (key for C) |---| C |
+---------------+   +---------------+   +---+

A (ssh): OpenSSH_5.2p1, OpenSSL 0.9.8k 25 Mar 2009
B (ssh): OpenSSH_5.2p1, OpenSSL 0.9.8k 25 Mar 2009
C (sshd): OpenSSH_5.2p1, OpenSSL 0.9.8k 25 Mar 2009

So far, shell connections work fine, i just type the following to obtain
shell access on C:

me@A $ ssh B -t ssh C
me@C $

The problem now is, that i'd like to use scp, rsync etc. through ssh.
So i need a transparent way integrated into ssh:

me@A $ rsync foo C:

But whatever ProxyCommand i use in my .ssh/config on A for Host C,
A wants to authenticate with C which can't be done because A does not
have credentials for C.

Thanks in advance,

--
Miers... Read more »

   |
  |  [o] AjaxPortal v3.0 Remote File Inclusion Vulnerability       |
 
|   |
  |       Software : AjaxPortal v3.0       |
  |       Vendor   : http://myiosoft.com/download/AjaxPortal/ajaxportal-30.zip                    |
  |       Author   : Cru3l.b0y           |
  |       Contact  : Cru3l.b0y@deltahacking.net        |
  |   Home     : WwW.DeltaHacking.Net
 
  |   |
  |  [o] Vulnerable file   |
  |     |
  |       install/di.php  ... Read more »

##############################

idsecconf 2009 Call For Paper

this is my friend's first e book said that "this is my first e-book" this e-book is talk about windows parental control.... for you that want to know how to control it. i want you to read this book first before you go on the rock....muahahahha

this e-book is so great

check this link

http://mugi.or.id/media/p/2575.aspx

Hi,

Here's the vulnerabilities descriptions and POCs:
##############################