Corruption and Persistent Vulnerability in Skype 5.8 and 5.5 [Video POC]

Corruption & Persistent Vulnerability in Skype 5.8 and 5.5 Ucha Gobejishvili longrifle0x Benjamin Kunz Mejri Rem0ve&Alexander Fuchs f0x23, security Experts from The Vulnerability-Lab Team discovered a remote pointer corruption with persistent weakness on Skypes v5.8.0.156 Windows 7 & MacOS...

Skype 5.8x / 5.5x Corruption

Title: ====== Skype 5.8x 5.5x - Corruption & Persistent Vulnerability Date: ===== 2012-03-29 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=455 MRSC ID: 12250 VIDEO: http://vulnerability-lab.com/getcontent.php?id=457 ; VL-ID: ===== 455 Introduction: ============= Skype...

RockYou Agrees to $250K FTC Fine Over Loss Of 32m Passwords

The Federal Trade Commission announced on Tuesday that it had reached a settlement with RockYou over violations of the Children’s Online Privacy Protection Act COPPA after the Web site allowed hackers to gain access to the personal information of its 32 million members. In a statement published o...

Skype 5.8x 5.5x - Corruption & Persistent Vulnerability

Document Title: =============== Skype 5.8x 5.5x - Corruption & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=455 MRSC ID: 12250 Video: http://vulnerability-lab.com/getcontent.php?id=457 Release Date: ============= 2012-03-28...

Skype 5.8x 5.5x - Corruption & Persistent Vulnerability

Document Title: =============== Skype 5.8x 5.5x - Corruption & Persistent Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=455 MRSC ID: 12250 Video: http://vulnerability-lab.com/getcontent.php?id=457 Release Date: ============= 2012-03-27...

Facebook profiles can be hijacked by Chrome extensions malware

Facebook profiles can be hijacked by Chrome extensions malware Cybercriminals are uploading malicious Chrome browser extensions to the official Chrome Web Store and use them to hijack Facebook accounts, according to security researchers from Kaspersky Lab. The rogue extensions are advertised on...

Facebook 'Like' Scam Driven by Malicious Chrome Extension

A Kaspersky Lab researcher has discovered a Brazilian social engineering campaign that attempts to trick Facebook users into installing a malicious plug-in hosted on Google’s Chrome Web Store. The Facebook scam-page solicits victims by promising to teach them how to “remove the virus from their...

Facebook Link Detection (deprecated)

Binary data 6396.prm...

Facebook Warns Users About Timeline Adware

Facebook issued a video warning to its hundreds of millions of users on Thursday about the dangers of adware programs that lure users with promises of special features. In a video message from the Facebook Security group, the company said that a growing number of companies are fooling Facebook...

Carberp Banking Trojan Scam - 8 Arrested in Russia

Carberp Banking Trojan Scam - 8 Arrested in Russia 8 Men suspected of being involved in the Carberp phishing scam have been arrested in Russia. The men were arrested after a joint investigation by the Russian Ministry of Internal Affairs MVD and Federal Security Service FSB. According to the MVD,...

Video: College Professor, Students Crack Zeus Trojan Mystery

A segment from last night’s Rock Center, Brian Williams’ TV news magazine, gives the inside scoop on how a college professor and his students helped law enforcement crack one of the largest and most profitable banking Trojan operations around. Reporter Richard Engel sat down with Gary Warner, a...

Russian Agencies Take Down Carberp Gang

A collaborative effort between a Russian security company and two Russian federal agencies has yielded the arrest of eight men allegedly involved in the Carberp Trojan scam, it was announced today. Officials from Russia’s Ministry of Internal Affairs MVD and Federal Security Service FSB, along wi...

Deathcore XP SQL Injection

Exploit Title; Deathcore xp - SQL Injection Vulnerability Date ; 19/03/12 Author ; 3spi0n Script Vendor ; http://deathcore.xtgem.com/ Script Demo ; http://www.two-fire.website.org/ Category ; Webapps Type ; Sql Injection Tested on ; Ubuntu / Win7 Script Details ; - Demo ;...

Roman Andreev wins Facebook Hacker Cup 2012

Roman Andreev wins Facebook Hacker Cup 2012 25 of the world's best hackers gathered for Facebook's 2nd annual Hacker Cup event being held at its offices in Menlo Park. Roman Andreev from Russia completed one problem correctly in 1 hr 4 min and won Facebook's Hacker Cup to get his name placed on a...

NTG Haber Yazilim 1 SQL Injection

Exploit Title; NTG Haber Yazilim v1 - SQL Injection Vulnerability Date ; 14/03/12 Author ; 3spi0n Script Vendor ; www.netgenel.net/index/1/ntg-haber-yazilimi-v1.html Script Demo ; http://www.netgenel.net/v1/anasayfa.php Category ; Webapps Type ; Sql Injection Tested on ; Ubuntu / Win7 Script...

linux/x86 Bugtraq shutdown modsecurity shellcode 64 bytes

Title :Bugtraq shutdown modsecurity -Linux/x86 shellcode 64 bytes Author : TrOoN E-mail : http://www.facebook.com/alexydant my new facebook Home : city 617 logt Draria algeria Web Site : www.1337day.com Facebook : http://www.facebook.com/alexydant my new facebook platform : Bugtraq Eng Type :...

Fake FC Barca Facebook Page Found Conning Fans

Fans of the immensely popular FC Barca football club may have been duped into giving away their Facebook log-on credentials, according to a post on Symantec’s Security Response blog. Symantec researchers discovered a phishing site that was catering to fans of the team.The site, Facebook F.C.B., i...

Tunisian Islamist Website Hacked by Anonymous

Tunisian Islamist Website Hacked by Anonymous The Facebook page of Hizb Ettahrir, an Islamist political party that is legally unrecognized in Tunisia, was hacked last night by a Tunisian group claiming affiliation with the international cyber activist collective Anonymous. "We are fighting you...

Fake Facebook Profile For NATO Senior Commander Used To Phish Senior Brass

A fake Facebook profile for NATO Senior Commander James Stavridis, a US Navy Admiral, was used to trick senior officers in both the U.S. and British military to becoming friends. The spear phishing attack is of unknown origin and is believed to have divulged a wide range of personal information o...

Inside Facebook's Social Authentication System

VANCOUVER–Authentication is one of the thornier problems in security and it’s one that’s never been solved to any real degree, despite decades of research, technological advances and trial and error. For companies such as Facebook that have to deal with authentication on a massive scale, the...