NetCore's full range of routers have been hit by a "suspected backdoor" program.

Netcore is a Shenzhen Lei Ke network communications producer, the main products involved in wireless routers, wireless network cards, network cards, hubs, switches, broadband routers, Layer 2, 3 and 4 switches, optical terminals. NetCore router has a built-in program called IGDMPTD, according to...

MalDrone — First Ever Backdoor Malware for Drones

The use of small Unmanned Aerial Vehicles UAVs called Drones is rapidly transforming the way we go to war. Drones were once used for land surveillance, Delivering Pizza's, then equipped with bombs that changed the way nations conduct war and last year, these hovering drones were also used to hack...

CVE-2 0 1 5-0 3 9 3: Oracle released a serious security vulnerability alerts-a vulnerability alert-the black bar safety net

Oracle on Tuesday released this year's first security patches upgrade the CPU for the announcement, the attendant, there are some disturbing vulnerability warning. Maybe this two-day operation and maintenance of the students need to give their company the Oracle products on the newly released 1 6...

Dennis Fisher and Mike Mimoso Discuss the Apple and Adobe Zero Days, and More

Dennis Fisher and Mike Mimoso talk about all of the zero days that were dropped this week on Adobe and Apple, the Oracle backdoor drama and the upcoming Kaspersky Security Analyst Summit in Cancun. Then, Dennis calls Brian Donohue to talk about the wonders of the Blackhat movie and Brian’s dog...

Regin Cyberespionage Malware Platform Modules Disclosed

The Regin malware platform used to steal secrets from government agencies, banks and GSM network operators caught the attention of security experts who called it one of the most advanced attack platforms that has been studied, surpassing Flame, Duqu, even Stuxnet. Researchers at Kaspersky Lab sai...

January 2015 Oracle Critical Patch update

Oracle’s first Critical Patch Update of the year arrived Tuesday with its usual volume, and some disturbing fanfare. Oracle admins today are staring at 169 patches on their collective plates across the company’s product line. One of the more pressing fixes is for a an issue in the Oracle E-Busine...

Nasty Oracle Vulnerability Leaves Researcher 'Flabbergasted'

Oracle on Tuesday will release a huge number of security fixes as part of its quarterly critical patch update, and one of them is a patch for a vulnerability that a well-known security researcher said looks a lot like a back door but was likely just a terrible mistake. The flaw is found in Oracle...

ASUSWRT Backdoor Command Execution Vulnerability

ASUSWRT is the ASUS router firmware. In ASUS WRT versions 3.0.0.4.3761071, 3.0.0.376.2524-g0013f52, infosvr's common.c fails to properly check the requested MAC address, which could allow a remote attacker to send a NETCMDIDMANUCMD packet to UDP port 9999, by sending a packet to UDP port 9999, an...

NSA Official: Support for Compromised Dual EC Algorithm Was 'Regrettable'

In a new article in an academic math journal, the NSA’s former director of research says that the agency’s decision not to withdraw its support of the Dual ECDRBG random number generator after security researchers found weaknesses in it and questioned its provenance was a “regrettable” choice...

ASUS Router 'infosvr' Remote Command Execution

The remote device is an ASUS router that contains firmware which is affected by a flaw in its 'infosvr' service due to not properly checking the MAC address of a request. An unauthenticated, remote attacker, using a crafted request to UDP port 9999, can exploit this to run arbitrary commands or...

Multiple snom IP phones vulnerabilities

Crossite scripting, CSRF, directory traversal, authentication bypass, privilege escalation, code execution, backdoor access...

Encryption is Not the Enemy

There are few things scarier these days than a politician stepping in front of a microphone, taking a deep breath and opening his mouth to pontificate on security. A long list of American elected officials have reinforced this, and on Monday, UK Prime Minister David Cameron jumped to the head of...

Malicious software new play: hidden in the Pastebin on the backdoor-vulnerability warning-the black bar safety net

Quickly share text, code, website, Pastebin often used by hackers are used to share their libraries, stolen data and other code, and now it really is for hackers. Recently security researchers actually found hackers is via Gmail drafts, Evernote and other platforms to control the botnet. Security...

Website Backdoor Scripts Leverage the Pastebin Service

The popular copy and paste website 'Pastebin' created a decade ago for software developers and even by hackers groups to share source code, dumps and stolen data, has more recently been leveraged by cyber criminals to target millions of users. Compromising a website and then hosting malware on it...

HP-VSA-Remote-Execution

HP VSA / SANiQ Hydra client Nicolas Grégoire [email protected] v0.5 HOST = '192.168.201.11' The remote host PORT = 13838 The hydra port import getopt import re import sys import binascii import struct import socket import os ''' ================================== Define functions...

ASUSWRT 3.0.0.4.376_1071 LAN Backdoor Command Execution

!/usr/bin/env python3 Exploit Title: ASUSWRT 3.0.0.4.3761071 LAN Backdoor Command Execution Date: 2014-10-11 Vendor Homepage: http://www.asus.com/ Software Link: http://dlcdnet.asus.com/pub/ASUS/wireless/RT-N66UB1/FWRTN66U30043762524.zip Source code:...

ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution Exploit

ASUSWRT version 3.0.0.4.3761071 suffers from a remote command execution vulnerability. A service called "infosvr" listens on port 9999 on the LAN bridge. Normally this service is used for device discovery using the "ASUS Wireless Router Device Discovery Utility", but this service contains a featu...

ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution

!/usr/bin/env python3 Exploit Title: ASUSWRT 3.0.0.4.3761071 LAN Backdoor Command Execution Date: 2014-10-11 Vendor Homepage: http://www.asus.com/ Software Link: http://dlcdnet.asus.com/pub/ASUS/wireless/RT-N66UB1/FWRTN66U30043762524.zip Source code:...

ASUSWRT 3.0.0.4.376_1071 - LAN Backdoor Command Execution

ASUSWRT 3.0.0.4.3761071 - LAN Backdoor Command Execution !/usr/bin/env python3 Exploit Title: ASUSWRT 3.0.0.4.3761071 LAN Backdoor Command Execution Date: 2014-10-11 Vendor Homepage: http://www.asus.com/ Software Link: http://dlcdnet.asus.com/pub/ASUS/wireless/RT-N66UB1/FWRTN66U30043762524.zip...

Netcore (Netis) Router 53413/UDP Backdoor Service Vulnerability

Netcore is a Shenzhen Lei Ke network communications producer, the main products involved in wireless routers, wireless network cards, network cards, hubs, switches, broadband routers, Layer 2, 3 and 4 switches, optical terminals. A large number of Netcore/Netis router products in the implementati...