CVE-2014-4005

The CVE-2014-4005 entry concerns a SAP Brazil add-on that contains hardcoded credentials. This vulnerability could allow remote attackers to obtain access via unspecified vectors. The available sources identify the issue and its impact but do not provide specific product versions, exploit details...

Dilbert Cross Site Scripting

================================================================================ Cross Site Scripting on The Official Dilbert Website ================================================================================ Site: www.dilbert.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom...

New York Times Cross Site Scripting

================================================================================ Cross Site Scripting on New York Times ================================================================================ Site: www.nytimes.com Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal...

Telegraph Cross Site Scripting

================================================================================ Cross Site Scripting on The Telegraph ================================================================================ Site: www.telegraph.co.uk Date: 25/02/2014 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fata...

NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying

Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...

NASA website Hacked; Protest by Hackers against US action on Syria and Brazil Spying

Earlier reports based on Snowden's documents revealed the existence of the NSA's PRISM program, and indicate that the National Security Agency spied on Brazilians. On other End, President Obama said that the Syrian government used chemical weapons on its citizens and The United States may have to...

Warning ! Facebook virus Zeus targets bank accounts

The infamous Zeus malware has once again resurfaced as per Symantec and is capable of draining your bank accounts. Zeus propagates through phishing messages that originate from an account that has been phished. Such a phished account will then start automatically sending messages to friends with...

Warning ! Facebook virus Zeus targets bank accounts

The infamous Zeus malware has once again resurfaced as per Symantec and is capable of draining your bank accounts. Zeus propagates through phishing messages that originate from an account that has been phished. Such a phished account will then start automatically sending messages to friends with...

Malicious Firefox, Chrome Extensions Target Facebook Users

Facebook users are being warned of malicious Firefox and Chrome extensions that can give an attacker remote control over a Facebook profile. Microsoft has seen an increase in activity around these extensions, in particular in Brazil. The threat is detected as Trojan:JS/Febipos.A and has been...

Google Transparency Report Requests Up to Remove Information

Google has released a new Transparency Report, this time pointing out sharp increases in the number of government requests from Brazil and Russia it received to remove content from Google-branded websites. This is the seventh time the Mountain View-based company has released the report that...

TopTV and Reliance Netconnect websites hacked by Brazilian hackers

The TopTV website and Reliance Netconnect broadband provider websites compromised today by Brazilian hacking crew named "HighTech Brazil HackTeam". Index.php from Reliance Netconnect and few internal pages of TopTV defaced. Heather Kennedy from TopTV said that they are aware of the breach of...

Scientific Linux Security Update : tzdata enhancement update on SL5.x, SL6.x i386/x86_64 (20121126)

This update adds the following enhancements : - On October 24 2012, the Jordanian Cabinet rescinded a 2012-10-14 instruction to switch from daylight saving time DST to standard time on 2012-10-26. Instead, Jordan will remain on local DST ITC +3 for the 2012-2013 Jordanian winter. - Cuba, which wa...

Millions of DSL modems hacked in Brazil, spread banking malware

More than 4.5 million DSL modems have been compromised as part of a sustained hacking campaign in Brazil, with the devices spreading malware and malicious web address redirects. According to the malware analyst at Kaspersky Lab in Brazil, Fabio Assolini. The vulnerability exploited by attackers...

The Tale of One Thousand and One DSL Modems

This is the description of an attack happening in Brazil since 2011 using 1 firmware vulnerability, 2 malicious scripts and 40 malicious DNS servers, which affected 6 hardware manufacturers, resulting in millions of Brazilian internet users falling victim to a sustained and silent mass attack on...

Stanford Cross Site Scripting

======================================================================= XSS on Stanford University - School of Medicine ======================================================================= Site: med.stanford.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

Texas A&M University Cross Site Scripting

======================================================================= XSS on Texas A&M University - xyleborini site ! ======================================================================= Site: xyleborini.tamu.edu Date: 17/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team: Fatal Error...

University Of Wisconsin - Madison Cross Site Scripting

======================================================================= XSS on Comm Arts Departement of University - Wisconsin-Madison ======================================================================= Site: commarts.wisc.edu Date: 15/09/2012 Author: s4r4d0 Contact: s4r4d0atyahoodotcom Team:...

Zend Framework Information Disclosure

Vulnerability: Zend Framework SQL Configuration-File disclosure - + Author: W4n73d openforceatlivedotcom - - + Vendor: framework.zend.com + Version: 1.x.x - - + PoC: www.whatever.br/application/configs/application.ini - + EX: // params.username = "root" params.password = "myleetpass" // - + Date:...

Scientific Linux Security Update : tzdata on SL4.x, SL5.x, SL6.x i386/x86_64

This updated package addresses the following change to Daylight Saving Time DST : - Belarus has canceled the Daylight Saving Time. BZ740000, BZ740001, BZ740014, BZ739668, BZ739916 - New time zones have been added to track South Sudan Africa/Juba and West Bank Asia/Hebron. - Samoa changed its Time...

Scientific Linux Security Update : tzdata on SL5.x, SL4.x i386/x86_64

A tzdata enhancement, with updates for Venezuela, Indiana, Egypt, Gaza, South Australia, Antarctica, Brazil, and Iran is now available. The tzdata package contains data files with information regarding and rules for daylight saving times in various timezones around the world. The updated package...