iPhone Jailbreak Tool Sets Stage for Mobile Malware

SAN DIEGO–The success of a group of hackers in compromising the security of Apple’s iPhone may set the stage for more malware for the popular handset, including rootkit-style remote monitoring tools and data stealing malware. In a presentation at the ToorCon Hacking Conference here on Saturday,...

ConvexSoft DJ Audio Mixer Denial of Service Vulnerability

Exploit for windows platform in category dos / poc =========================================== ConvexSoft DJ Audio Mixer Denial of Service =========================================== Software : ConvexSoft DJ Audio Mixer Software link :...

VB Installation - Add NEW Administrator user

Exploit for php platform in category web applications ============================================= VB Installation - Add NEW Administrator user ============================================= Title: VB Installation- Add NEW Administrator user Date: 2010-10-06 Author: King of Larestan Version:...

В США задержаны 11 хакеров из России

Они входили в преступную группу, похитившую из американских банков 3 млн долларов Дмитрий ГОНЧАРУК, Никита КРАСНИКОВ — 05.10.2010 Еще шесть граждан России были задержаны в США по обвинению в причастности к команде мошенников, которая воровала деньги с банковских счетов. Гражданство других девяти...

Chaos Communication Congress

Berlin, Germany One of the security world’s most venerable conferences, the Chaos Communications Congress CCC is an annual gathering for hackers sponsored by the Chaos Computer Club. First held in 1984, the event now draws thousands of hackers, intellectuals, academics and Utopians to snowy Berli...

Jax Calender admin bypass vulnerability

Exploit for php platform in category web applications ======================================= Jax Calender admin bypass vulnerability ======================================= Exploit Title: Jax Calender admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software Link:...

Jax Guestbook admin bypass vulnerability

Exploit for php platform in category web applications ======================================== Jax Guestbook admin bypass vulnerability ======================================== Exploit Title: Jax Guestbook admin bypass vulnerability Date: 3.10.2010 Author: EraGoN Software...

TinyMCE MCFileManager 2.1.2 - Arbitrary File Upload

============================================== File Upload Vulnerability Plugins tinymce ============================================== http://tinymce.moxiecode.com/pluginsfilemanager.php Author : Hackeri-AL Contact : h-al at hotmail dot it Greetz : LoocK3D & b4cKd00r & GHoST61 & BaDBoy My Group ...

All Eyes On Stuxnet At Annual Virus Researcher Summit

The world will know more about the mysterious Stuxnet virus by week’s end, after top virus researchers reveal the findings of their post mortem on Stuxnet at the annual Virus Bulletin Conference. HED: All eyes on Stuxnet at annual virus researcher summit DEK: Researchers will reveal new details...

BPJewelry Store SQL Injection

----------------------------------------------------------------------------------------- BPJewelry Store SQL-i Vulnerability ----------------------------------------------------------------------------------------- 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /'...

Entrans Sql Injection Vulnerability

Exploit for php platform in category web applications =================================== Entrans Sql Injection Vulnerability =================================== Exploit Title: Entrans SQLi vulnerablility Date: 2010/9/27 Author: keracker Software Link: http://sourceforge.net/projects/entrans/...

Entrans SQL Injection

Exploit Title: Entrans SQLi vulnerablility Date: 2010/9/27 Author: keracker Software Link: http://sourceforge.net/projects/entrans/ Software Description: Entrans is an online collaborative translation tool used for editing and translation of PO files. It provides features such as dynamic'' keyboa...

Attacks On MPAA's UK Law Firm Lead to Data Leaks, Lawsuit

A UK Law firm that has aggressively pursued cases against illegal file sharing on behalf of the Motion Picture Association of America MPAA and Recording Industry Association of America RIAA now finds itself in the cross hairs of both hackers and and privacy activists. The firm was the subject of...

Entrans - SQL Injection

Exploit Title: Entrans SQLi vulnerablility Date: 2010/9/27 Author: keracker Software Link: http://sourceforge.net/projects/entrans/ Software Description: Entrans is an online collaborative translation tool used for editing and translation of PO files. It provides features such as dynamic'' keyboa...

Microsoft Missed 2009 Published Article on Stuxnet-Type Attack

A security flaw affecting Microsoft’s Windows operating system that was exploited by the Stuxnet worm was publicly disclosed more than a year before the worm appeared, according to a researcher at Symantec Corp. On September 17, Symantec researcher Liam O Murchu noted on that company’s Connect bl...

California Man Gets 6 Years for Laundering

A Long Beach, California man who helped funnel stolen cash to a global network of hackers and carders was sentenced Thursday to 6 years in prison for conspiracy to launder money. Cesar Carranza, 38, sold MSR-206’s to carders to encode stolen bank card data onto blank cards, and he served as a...

eNdonesia 8.4 - SQL Injection

eNdonesia 8.4 - SQL Injection ======================================================================/ eNdonesia 8.4 Print Module SQL Injection Vulnerability Download : http://sourceforge.net/projects/endonesia/files/eNdonesia Version : 8.4 or lower maybe also affected Dork :...

ColdUserGroup 1.6 Bypass / Cross Site Scripting

Exploit Title: ColdUserGroup - Version 1.6 bypass/XSS Vulnerabilities Date: 09/09/2010 Author: Sangteamtham Software Link: http://www.coldgen.com/index.cfm?ColdGen=ProductDetails&ProductID=8 Version: 1.22 Tested on: Windows 7 1.Description: Built using Fusebox and adhering to CSS/XHTML standards...

Nearly 60,000 Fake Websites Created Weekly

Every week, hackers are creating 57,000 new Web addresses which they position and index on leading search engines in the hope that unwary users will click them by mistake. Read the full article. Help Net Security...

Former Employees a Rich Target in Social Engineering Contest

The results of a hacking contest at the DEFCON conference shows that the largest U.S. corporations have a lot to learn. “If any of these targets had hired us to do a social engineering audit, we would have failed them,” an organizer said. HED:DEFCON tournament suggests ex-employees pose big risk...