New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. Which I've found in your modem. In April I've already drew attention of Ukrtelecom's representativ...

Nmap NSE net: ftp-brute

Tries to get FTP login credentials by guessing usernames and passwords. This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script...

Nmap NSE net: smtp-enum-users

Attempts to enumerate the users on a SMTP server by issuing the VRFY, EXPN or RCPT TO commands. The goal of this script is to discover all the user accounts in the remote system. The script will output the list of user names that were found. The script will stop querying the SMTP server if...

Nmap NSE net: snmp-win32-users

Attempts to enumerate Windows user accounts through SNMP SYNTAX: snmpcommunity: The community string to use. If not given, it is ''public'', or whatever is passed to 'buildPacket'. OpenVAS Vulnerability Test $Id: gbnmapsnmpwin32usersnet.nasl 5505 2017-03-07 10:00:18Z teissa $ Autogenerated NSE...

GMA-7 television networks website, twitter & Facebook hacked by D4RKB1T

GMA-7 television networks website , twitter & Facebook hacked by D4RKB1T The website of one of the leading television networks in the Philippines has been hacked by a username "D4RKB1T". GMA-7's website - gmanews.tv, its Facebook and Twitter accounts have been simultaneously hacked on Sunday...

Vendor's List Of Backdoor Accounts Leaked Online

An internal document listing the backdoor accounts for switches manufactured by networking equipment vendor Allied Telesis was circulating online Friday, a day after an internal support page providing instructions on accessing hard coded back door accounts in the company’s products was found to b...

Comodo Hacked - Reseller private data exposed !

Comodo Hacked - Reseller private data exposed ! Another official reseller of SSL certificate authority Comodo has suffered a security breach that allowed attackers to gain unauthorized access to data. Brazil-based ComodoBR is at least the fourth Comodo partner to be compromised this year. Custome...

Multiple Vulnerabilities in miniblog

High-Tech Bridge SA Security Research Lab has discovered vulnerabilities in miniblog which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerabilities in miniblog 1.1 The vulnerability exists due to input sanitation error i...

CodeMasters - Gaming Community Compromised, Back-End Users Data Leaked !

CodeMasters - Gaming Community Compromised, Back-EndUsers Data Leaked ! CodeMasters - Gaming Community has been hacked by "Kon" . He leak the back-end users login Information as shown below : Technical Details : Encryption: DESUnix Method: POST SQLi URL: Not providing Number of member accounts:...

Password Reset Problem Derails PlayStation Network

Sony was forced to shut down their PlayStation Network and Qriocity password reset pages today, just days after they finally brought the gaming platform back online following nearly a month of outage stemming from an “external intrusion.” In a post on the PlayStation blog, Sony is quick to reassu...

FCC Roundtable: Small Businesses Lacking Security, But We Can Help

Small businesses aren’t taking the necessary precautions to protect themselves from cyber attacks, according to the U.S. Federal Communications Commission FCC – but Uncle Sam wants to help. The U.S. Government agency, better known for battles over media deregulation, is now looking ot help small...

Hacked PlayStation Network to be fully restored by end of May !

Hacked PlayStation Network to be fully restored by end of May ! Sony said Tuesday it aimed to fully restore its PlayStation Network, shut down after a massive security breach affecting more than 100 million online accounts, by the end of May. Sony also confirmed that personal data from 24.6 milli...

( #SOE ) Sony hit with second attack, loses 12,700 credit card numbers !

SOE Sony hit with second attack, loses 12,700 credit card numbers ! Sony loses 12,700 credit card account numbers, 24.6 million accounts compromised Following up on this morning's news that Sony Online Entertainment servers were offline across the board, Sony Online Entertainment announced that i...

Dslreports.com hacked, Over 9000 accounts compromised !

Dslreports.com hacked, Over 9000 accounts compromised ! DSL Reports - the information and review site on high speed Internet services which operates over 200 forums - has been hit with a blind SQL injection attack, which resulted in the compromise of at least 9000 accounts. Founder Justin Beech...

FBI Warns of Massive Wire Fraud Scams

The FBI is warning businesses about an ongoing spate of attacks that are stealing millions of dollars from companies through unauthorized bank transfers to Chinese companies. The fraudulent wire transfers are not a new tactic, but the FBI says the current round of attacks is notable in that...

XSS in Webmin 1.540 + exploit for privilege escalation

Information -------------------- Name : XSS vulnerability in Webmin Software : All versions prior to and including 1.540 are affected. Vendor Hompeage : http://www.webmin.com Vulnerability Type : Cross-Site Scripting Severity : Medium Researcher : Javier Bassi javierbassi at gmail dot com...

Hacker Pleads Guilty To Theft of 600K Credit Cards, Could Get 10 Years

A 26 year-old Georgia man pleaded guilty in federal court in Virginia to the theft of hundreds of thousands of credit cards and a years-long fraud scheme that netted him more than $100,000 in illicit profits – money he used to buy himself a BMW and luxury clothing. Rogelio Hackett of Lithonia,...

European Space Agency (ESA.INT) Hacked by TinKode !

European Space Agency ESA.INT Hacked by TinKode ! The European Space Agency ESA, established in 1975, is an intergovernmental organisation dedicated to the exploration of space, currently with 18 member states. Headquartered in Paris, ESA has a staff of more than 2,000 with an annual budget of...

CVE-2011-0748

Multiple cross-site request forgery CSRF vulnerabilities in phpList before 2.10.13 allow remote attackers to hijack the authentication of administrators for requests that 1 add or 2 edit administrator accounts...

PT-2011-2550 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista versions SP1 and SP2 Microsoft Windows Server 2008 versions Gold, SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1...