431 matches found
IntelBras WRN 340 Unauthenticated Remote DNS Changer
!/usr/bin/perl IntelBras WRN 340 ADSL Modem-Router - Unauthenticated Remote DNS Change Exploit Discovered by: Gabriel P. Lipski - gpDOTlipskiATgmailDOTcom Brazil, sept. 2015. AVISO: Este codigo foi feito apenas para fins educacionais. NAO USE SEM A PERMISSAO DO DONO DA REDE-ALVO. Use por sua cont...
This 20-year-old Student Has Written 100 Malware Programs in Two Years
Security firm Trend Micro has identified a 20-year-old Brazilian college student responsible for developing and distributing over 100 Banking Trojans selling each for around US$300. Known online as 'Lordfenix', 'Hacker's Son' and 'Filho de Hacker', the computer science student first began his...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kde-i18n-Brazil-2.2.2 package of the Red Hat Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. Exploitation of these vulnerabilities can be carried out remotely...
Vulnerabilities of the Red Hat Linux operating system, which allow a remote attacker to compromise the confidentiality, integrity, and accessibility of protected information
The multiple vulnerabilities in the kde-i18n-Brazil-3.0.3 package of the Red Hat Linux operating system may lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited remotely...
By javascript hack TP-Link Router with the Poc and video-bug warning-the black bar safety net
Recently read this post:“getlocalandpublicipaddressesinjavascript with javascript to get the local and public IP address”I began to think, this used to hack into WIFI router is a good idea Ah, I have just got a TP-LINK WR741N, then measured up the chant. The collection of relevant information, I...
Shuttle Tech ADSL Modem-Router 915 WM - Unauthenticated Remote DNS Change Exploit
Exploit for hardware platform in category remote exploits !/bin/bash Shuttle Tech ADSL Modem-Router 915 WM Unauthenticated Remote DNS Change Exploit Copyright 2015 c Todor Donev http://www.ethical-hacker.org/ Description: The vulnerability exist in the web interface, which is accessible without...
MP3-CD-Converter-Professional-BoF-(SEH)
Exploit Titule: Exploit Buffer Overflow MP3 CD Converter ProfessionalSEH Date: 12/20/2010 Author: C4SS!0 G0M3S Software Link: http://www.mp3-cd-converter.com/mp3cdconverter.exe Version: 5.0.3 import os import sys import struct import time def usage: os.system"cls" os.system"color 4f" print"\n"...
CVE-2014-6671
The World Cup 2014 Brazil - Xem TV aka vn.letshare.football.worldcup application 2.6 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
Hacked Political News Site Targets Router DNS Settings
The website for one of Brazil’s biggest newspapers has been compromised with malware that tries to change the victim’s router DNS settings. Web security company Securi published a report yesterday that Politica Estadao’s website was loading iFrames that carried out a brute-force attack against th...
Phishers Use Luis Suarez Bite as Bait
The World Cup is the most popular sporting event on the planet, and not just among sports fans; attackers and scammers of all stripes love it as well, as it presents a unique opportunity to separate victims from their money. Phishing and malware scams tied to the World Cup in Brazil have been...
July 2014 Security Bulletin Release
Many around the globe have been following the 2014 FIFA World Cup Brazil™ closely. Regardless of which country you are supporting, many folks have been impressed by the defensive display put on by keeper Tim Howard in a loss against Belgium. It was a great performance highlighting a strong defens...
Dennis Fisher and Mike Mimoso Discuss This Week's Microsoft Takedown
Dennis Fisher and Mike Mimoso discuss the Microsoft malware takedown, its legal and security implications and the revelation of a massive financial fraud campaign in Brazil. Download: digitalunderground157.mp3 Music by Chris Gonsalves...
Brazilian Payment Fraud Campaign Steals Billions
UPDATE–Hackers are targeting Brazil’s Boleto payment system, the second most popular payment method in the country, and have conducted hundreds of thousands of fraudulent transactions, though researchers differ over how much money has been stolen. Formally known as Boleto Bancario, Boletos are...
Joomla Component Seyret (com_seyret) - Local File Inclusion Vulnerability
No description provided by source. Exploit Title: Joomla Component Seyret comseyret Date: 2010-06-26 Author: mlk Software Link: null Version: null Tested on: Linux,BSD and windows CVE : null Code : on paper Joomla Component Seyret comseyret - Local File Inclusion Vulnerability + Discovered by : m...
SpoonFTP 1.2 - RETR Denial of Service Vulnerability
No description provided by source. !/usr/bin/python +Exploit Title: Exploit Denial of Service SpoonFTP 1.2 +Date: 21\03\2011 +Author: C4SS!0 G0M3S +Software Link: http://www.softpedia.com/progDownload/SpoonFTP-Download-49969.html +Version: 1.2 +Tested On: WIN-XP SP3 Portuguese Brazil +CVE: N/A xx...
Vacation Rental Script 4.0 - Arbitrary File Upload Vulnerability
No description provided by source. Script Name: Vacation Rental Script = 4.0 Site: http://www.vacationrentalscript.com/ Bug: Upload Shell Found: Br0ly google dork: 2006 - 2009 Vacation Rental Script BraZIL!! You need register a account first so: Signup: http://server/signup Cheek your email for...
[Onapsis Security Advisories] Multiple Hard-coded Usernames in SAP Components
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Onapsis Security Advisories:Multiple Hard-coded Usernames CWE-798 have been found and patched in a variety of SAP components. Summaries of the advisories with links to full versions follow: 1. ONAPSIS-2014-011-SAP Project System Structures and...
CVE-2014-4005
SAP Brazil add-on has hardcoded credentials, which makes it easier for remote attackers to obtain access via unspecified vectors...
