Distributed Red Team Operations with Cobalt Strike

What if you could easily host malicious websites, send phishing emails, and manage compromised hosts across diverse internet addresses? This week's Cobalt Strike adds the ability to manage multiple attack servers at once. Here's how it works: When you connect to two or more servers, Cobalt Strike...

Mozilla Firefox 18.0.2/Opera 12.12/Internet Explorer 9 Memory Corruption

Exploit for multiple platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Bots, Zeus, Web Exploits: the Most Potent Threats of 2012

Every year it seems that security-related news advances further from its roots in national security circles, IT departments, and the antivirus industry into the mainstream consciousness. From July to the end of year was no exception. However, despite a handful of flashy security stories, F-Secure...

Predictive Security Analytics Tool Available Free to Researchers

SAN JUAN, Puerto Rico – Dan Hubbard has lately been a regular face at a lot of big data meet-ups. He’s also often been the lone security face at these meet-ups, which are dominated by analytics, search, social media and advertising professionals. That may change soon for the CTO of DNS and securi...

CVE-2013-7387

creationtimestamp| type| source ---|---|--- 2013-01-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24438 2013-02-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24444...

MySQL 5.5 < 5.5.29 Multiple Vulnerabilities

The version of MySQL 5.5 installed on the remote host is earlier than 5.5.29 and is, therefore, affected by vulnerabilities in the following components : - Information Schema - InnoDB - MyISAM - Server - Server Locking - Server Optimizer - Server Parser - Server Partition - Server Privileges -...

Java 7u11 Update Addresses Only One of Two Zero-Day Vulnerabilities

Microsoft can take some solace that it is not alone in sending out security updates that don’t fully address a zero-day vulnerability. A researcher at Immunity Inc., put Oracle on a similar hot seat this week when he reported that a recent out-of-band Java update repaired only one of two Java fla...

RHEL 5 / 6 : java-1.7.0-openjdk (RHSA-2013:0165)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2013:0165 advisory. - OpenJDK: MethodHandles incorrect permission checks Libraries, 8004933 CVE-2012-3174 - OpenJDK: MethodHandles.Lookup incorrect permissi...

Out-of-Band IE Patch Released as More Sites Attacked

Internet Explorer users, exposed to a zero-day vulnerability in the browser and a faulty temporary Fix It from Microsoft, finally got some relief today when the company, as promised, released an out-of-band patch. Meanwhile, a handful of new telco, manufacturing and human rights sites have been...

MS13-008: Security Update for Internet Explorer (2799329)

The remote host is missing Internet Explorer IE Security Update 2799329. The installed version of IE is affected by a vulnerability that could allow an attacker to execute arbitrary code on the remote host. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid63522;...

Cool, BlackHole Exploit Kits Created by Same Hacker

If the relatively cheap, easily available, and totally reliable Blackhole exploit kit is the Toyota Camry of exploit kits, then the Cool exploit kit is the Lexus LS: both kits are reportedly developed by the same crew, but the latter is astronomically more expensive and presumably loaded with...

MS13-005: Vulnerability in Windows Kernel-Mode Driver Could Allow Elevation of Privilege (2778930)

The remote host contains a flaw in the way the Windows kernel handles window broadcast messages. Successful exploitation could allow an attacker to take complete control of an affected system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid63423; scriptversion"1.15";...

Adobe ColdFusion Exploits in Wild; Patch Remains Week Away

Adobe is recommending ColdFusion users apply a series of mitigations to counter active exploits against vulnerabilities in the application server. An advisory was released late Friday night that the trio of flaws are being targeted by attackers, and that the company would not have a patch availab...

Joomla mega menu module File Upload Vulnerability metasploit

Exploit for php platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Cyber Attack Management Tool: Armitage

Armitage is a graphical cyber attack management tool for Metasploit that visualizes your targets, recommends exploits, and exposes the advanced capabilities of the framework. Armitage aims to make Metasploit usable for security practitioners who understand hacking but don’t use Metasploit every...

osTicket - 'l.php?url' Arbitrary Site Redirect

source: https://www.securityfocus.com/bid/57111/info osTicket is prone to multiple input-validation vulnerabilities including: 1. Multiple cross-site scripting vulnerabilities 2. An open-redirection vulnerability 3. Multiple SQL-injection vulnerabilities An attacker may leverage these issues to...

Microsoft Internet Explorer CDwnBindInfo Object Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

Thinksns Arbitrary File Upload Vulnerability (metasploit)

Exploit for php platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Coldfusion 8 RDS Authentication Bypass

Exploit for php platform in category remote exploits This is private exploit. You can buy it at https://0day.today...

Joomla, WordPress Sites Hit by IFrame Injection Attacks

Users of the popular Joomla content management system are being urged by security experts to upgrade to the latest version after reports of exploits being used to compromise websites built on the platform. The SANS Internet Storm Center received numerous reports that Joomla sites, as well as...