TweetDeck Taken Down in Wake of XSS Attacks

TweetDeck services have been disabled for the time being as Twitter tries to get a handle on a cross-site scripting vulnerability that caused mountains of consternation on the social networking platform this morning. We've temporarily taken TweetDeck services down to assess today's earlier securi...

OpenSSL issued a warning: memory 1 0 years of vulnerability may be hackers for“man in the middle”attack-vulnerability warning-the black bar safety net

On Thursday, the OpenSSL Foundation issued a warning that one already exists 1 0 years of the vulnerabilities could lead to hackers through the use of OpenSSL to encrypt the traffic to launch“man in the middle”attack. Information security experts are still trying to solve the OpenSSL encryption...

LulzSec Hacker Sabu Sentenced to Time Served

The LulzSec hacker-turned-informant known as Sabu avoided any more jail time and was sentenced to time served on Tuesday for his part in leading several of the group’s attacks on high-profile targets. Hector Monsegur walked out of court in New York a free man, thanks to his cooperation with the F...

Spotify Hacked, Urges Android Users to Upgrade app and Change Password

Today, the popular Music streaming service Spotify said the company has suffered a Data breach and warned users of its Android app to upgrade it in the wake of a potential data breach in their servers. Spotify is a commercial music streaming service launched in October 2008 by Swedish start-up...

Apple iCloud and Activation Lock Hacked; Allows Hackers to Unlock Stolen Devices

A Dutch-Moroccan team of hackers calling itself "Team DoulCi" have reportedly claimed to hack a protective feature on Apple’s iCloud system, that could leverage an attacker to remove security measures on lost or stolen iPhone devices. According to a report from Dutch news organization De Telegraa...

VUPEN Discloses Details of Patched Firefox Pwn2Own Zero-Days

Contestants at this year’s Pwn2Own contest made no bones about it: they were going after browsers and as it turned out, Firefox had the biggest target on its back. Mozilla’s popular browser was popped four times during the Canadian hacker festival accounting for a quarter of the $800,000-plus in...

Russian Hacker Charged in Biggest U.S Hacking Case Doesn't Want Extradition to U.S

A Russian Hacker who was arrested in year 2012 by the authorities of the Netherlands and accused for allegedly hacking into the computer networks of more than a dozen major American corporations and stole over 160 million Credit and Debit Card Numbers. Earlier we reported, 33-year-old Russian...

Mybb All Version Denial of Service Vulnerability

Mybb All Version Denial of Service Vulnerability !/usr/bin/perl @@@ @@@@@@@@@@@ @@@@@ @@@@@@@@@@ @@@ @@@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@ @@@@@@@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@ @@@ @@ @@@ @@ @@@ @@@ @@@ @@@ @@@@@@@@@@@ @@@ @ @@@@@@@@@@ @@@ @@@@@@ @@@ @@@@@@@@@@@ @@@ @@ @@@ @@ @@@...

Crime24 Stealer Panel <= Multiple Vulnerabilities

An attacker can execute an XSS and inject sql commands in the search form. Usage Info You must be logged in the admin panel. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | \ | | | \ | | | |/ | / | | | | |/ / \ | | | |/ | ' \ | || | | | \ \ || | Twitter @TheHackersBay...

Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities

Crime24 Stealer Panel 1.0 - Multiple Vulnerabilities =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= | \ | | | \ | | | |/ | / | | | | |/ / \ | | | |/ | ' \ | || | | | \ \ || | Twitter @TheHackersBay Pentester / Underground hacker Exploit Title: Crime24 Stealer Panel...

"4chan Hacked", Most Popular Image-Bulletin Board Compromised

The founder of 4chan, Christopher Poole, aka “moot” has confirmed few hours ago, in a blog post that the popular image-based bulletin board was hacked. The attacker gained access to the administrative functions and successfully hacked into one of 4chan’s database by exploiting a website's softwar...

Hacking exposed MicroSD card vulnerability: execute arbitrary code-a vulnerability warning-the black bar safety net

In the last week held the chaos computer conference, well-known hardware hacker Huang Xin countryAndrew bunnie Huangreported the MicroSD card to the security risks. He and his colleagues found that some SD cards contain a be allowed on the card to execute arbitrary code the vulnerability, and in...

Cisco recognized many routers have Backdoor vulnerability-vulnerability warning-the black bar safety net

Recently, Cisco released the latest security Advisory: cisco-sa-2 0 1 4 0 1 1 0-sbd, confirmed hacker Eloi Vanderbeken on Github exposing the backdoor vulnerability allows an attacker to locally bypass the authentication directly access the Management Interface. ! Security Bulletin display, the...

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (2) (DTLS Support)

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak 2 DTLS Support / CVE-2014-0160 heartbleed OpenSSL information leak exploit ========================================================= This exploit uses OpenSSL to create an encrypted connection and trigger the heartbleed leak. The leake...

ORACLE Subdomain Page Defaced by Indian Hacker

A group of Indian Hackers dubbed as I-HOS TEAM has successfully defaced a page on the sub domain of Oracle Corporation, biggest provider of enterprise software, computer hardware and Services. The users visiting the domain are being greeted with a custom webpage with black background and the them...

Flickr vulnerable to SQL Injection and Remote Code Execution Flaws

Yahoo-owned Flickr, one of the biggest online photo management and sharing website in the world was recently impacted by critical web application vulnerabilities, which left website's database and server vulnerable hackers. Ibrahim Raafat, a security researcher from Egypt has found SQL injection...

NSA denies Report that Agency knew and exploited Heartbleed Vulnerability

The Bloomberg claimed that the U.S. National Security Agency NSA knew about the most critical Heartbleed flaw and has been using it on a regular basis to gather “critical intelligence” and sensitive information for at least past two years and decided to keep the bug secret, citing two sources...

Than imagined more terror! OpenSSL“effort”vulnerability in-depth analysis-vulnerability warning-the black bar safety net

Author: yaoxi original source http://blog.wangzhan.360.cn/ Recently, OpenSSL broke this year's most serious security vulnerability in the hacker community is named“heart bleed”vulnerability. 3 6 0 site Guard security team of the vulnerability analysis, the vulnerability is not only related to htt...

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak (1)

OpenSSL TLS Heartbeat Extension - Heartbleed Information Leak 1 / CVE-2014-0160 heartbleed OpenSSL information leak exploit ========================================================= This exploit uses OpenSSL to create an encrypted connection and trigger the heartbleed leak. The leaked information...

Pakistani Hacker Arrested for Hacking Telecom Company Database

Pakistan’s Federal Investigation Agency FIA has arrested a Pakistani Hacker allegedly involved in hacking into a telecom company and uploading their database on his website. With the help of the National Response Center for Cyber Crime NR3C of Pakistan’s Federal Investigation Agency, the local...