German Police eavesdropping Facebook, Gmail, Skype Conversations

An eavesdropping tool allegedly used by the German government to intercept Skype calls is full of security problems and may violate a ruling by the country's constitutional court, according to a European hacker club. The information was released as part of a move towards financial transparency. T...

CVE-2012-2082

The CVE-2012-2082 issue affects the Chaos Tool Suite (ctools) Drupal module 7.x-1.x prior to 7.x-1.0. The root cause is that the module did not properly filter user signatures when rendering comments, allowing remote authenticated users with the post comments permission to inject arbitrary web sc...

SA-CONTRIB-2012-054 - Chaos tool suite - Cross Site Scripting (XSS)

CVE: CVE-2012-2082 This suite is primarily a set of APIs and tools to improve the developer experience. It also contains a module called the Page Manager whose job is to manage pages. In particular it manages panel pages, but as it grows it will be able to manage far more than just Panels. The...

Hackers Plan Satellite Network to Fight Internet Censorship

A group of hackers are reportedly declaring war on Internet censorship, and they plan to fight back with their own satellite communications network. Sound like science fiction? According to BBC News, the plan was recently outlined at the Chaos Communication Congress in Berlin. Dubbed the...

Microsoft to Release Emergency Fix for ASP.NET DoS Flaw

UPDATED Microsoft on Thursday plans to release an emergency out-of-band update to address a vulnerability in ASP.NET that could allow an attacker to consume all of the resources on a vulnerable server with a single specially designed HTTP request. The vulnerability affects a wide range of Web...

Train-switching system can be vulnerable to DDoS attack

Train-switching system can be vulnerable to DDoS attack Hackers who have shut down websites by overwhelming them with web traffic could use the same approach to shut down the computers that control train switching systems, a security expert said at a hacking conference in Berlin. Prof. Stefan...

50 Days of Lulz - LulzSec Says Goodbye & Operation AntiSec will Continue

50 Days of Lulz - LulzSec Says Goodbye & Operation AntiSec will Continue Hacker group LulzSec has announced that after 50 days of hacking companies and organizations, it is finally done. LulzSec tweet a message which was posted on Pastebin : https://pastebin.com/1znEGmHa The group confirmed its...

Operation Icarus : Will Anonymous shut down the NYSE (New York Stock Exchange) ?

Operation Icarus : Will Anonymous shut down the NYSE New York Stock Exchange ? Anonymous Hackers starts Operation Icarus , They Release a Press Release Regarding This, as Posted Below : Operation Icarus Attention Brothers: The opportunity to create financial chaos and public unrest and from that,...

A letter to all Anonymous from Anonymous Hackers : Operation shutdown !

A letter to all Anonymous from Anonymous Hackers : Operation shutdown ! A letter released by Anonymous Hackers for all Anonymous .... as shown below : Anonymous We are anonymous, and we are Legion, for every one of us you find, and everyone you manage to take down, ten shall take his place, we do...

Sony PlayStation 3 hacked, PS3 jailbreak Fail0verflow method !

Sony PlayStation 3 hacked, PS3 jailbreak Fail0verflow method. Sony PlayStation 3 has successfully been hacked by a team of hackers named fail0verflow thanks to its poor public key cryptography. The hacker group demonstrated their hacking tricks at the Chaos Communication Conference 27C3 in 45...

'SMS of Death' Attacks Can Crash the Simplest of Phones

Malicious text messages can crash many types of mobile phones, including devices by Samsung, Sony Ericsson, Motorola and LG, according to a presentation given at the Chaos Communication Congress hacking conference this week in Berlin. Nicknamed ‘SMS of Death,’ the attacks were outlined by Collin...

Wikileaks Daily: Chaos Reigns As Assange Denied Bail

Another day, another flurry of media reports stemming from the ongoing leak of sensitive diplomatic cables by the Website Wikileaks. Reports have surfaced that the group is in disarray now that Wikileaks chief Julian Assange was denied bail by a UK court, even as hacktivists try to take down the...

Chaos Communication Congress

Berlin, Germany One of the security world’s most venerable conferences, the Chaos Communications Congress CCC is an annual gathering for hackers sponsored by the Chaos Computer Club. First held in 1984, the event now draws thousands of hackers, intellectuals, academics and Utopians to snowy Berli...

CVE-2010-1548

The auto-complete functionality in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated users, with "access content" privileges, to read the title of an unpublished node via a q=ctools/autocomplete/node/ value...

CVE-2010-2010

Multiple cross-site scripting XSS vulnerabilities in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal allow remote attackers to inject arbitrary web script or HTML via a node title...

Code injection

The auto-complete functionality in the Chaos Tool Suite aka CTools module 6.x before 6.x-1.4 for Drupal does not follow access restrictions, which allows remote authenticated users, with "access content" privileges, to read the title of an unpublished node via a q=ctools/autocomplete/node/ value...

CVE-2010-1546

CVE-2010-1546 affects Drupal's Chaos Tool Suite (CTools) module 6.x, prior to 6.x-1.4. An eval injection in the import functionality allows a remote authenticated user with "administer page manager" privileges to execute arbitrary PHP code via input to a text area, via the page_manager_page_impor...

CVE-2010-2010

The CVE-2010-2010 entry refers to multiple cross-site scripting (XSS) vulnerabilities in the Chaos Tool Suite (CTools) module for Drupal, affecting the 6.x line prior to 6.x-1.4. The vulnerability allows remote attackers to inject arbitrary web script or HTML via a node title. Affected component:...

CVE-2010-1547

CVE-2010-1547 concerns CSRF vulnerabilities in the Drupal Chaos Tool Suite (CTools) module, version 6.x prior to 6.x-1.4. The issue allows remote attackers to hijack administrator sessions by issuing requests that enable or disable a page via specific q parameters (q=admin/build/pages/nojs/enable...

SA-CONTRIB-2010-058: Chaos tool suite - Multiple vulnerabilities

The Chaos tool suite ctools is primarily a set of APIs and tools to improve the developer experience. This module was found to have multiple vulnerabilities. Cross site scripting XSS The module did not properly sanitize node titles under certain circumstances, resulting in multiple cross-site...