Ice IX: Not Cool At All

My colleague Jorge Mieres recently found a C&C server of a botnet based on a malicious program called Ice IX. As announced on several user forums, Ice IX is a bot created using the source code of ZeuS 2.0.8.9, which became publicly available in May. The author of the new bot says the program...

Ice IX, the First Crimeware Based on the Leaked ZeuS Sources

After rumors about the supposed merger between SpyEye and ZeuS, and the public release of the source of the latter, it was logical that the range of possibilities opened up even more for new cybercriminals into the ecosystem of crimeware. Consistent with this, it was only a matter of time for the...

Black Ice BIImgFrm.ocx ActiveX Code Execution (CVE-2008-2683)

A remote code execution vulnerability has been reported in Black Ice BIImgFrm.ocx. The vulnerability is due to a design flaw in the application which allows uploading of specially crafted files to an affected system. An attacker could exploit this vulnerability by enticing a victim to open a...

Black Ice Cover Page - ActiveX Control Arbitrary File Download (Metasploit)

$Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Exploit for windows platform in category remote exploits $Id: blackicedownloadimagefileurl.rb 12992 2011-06-21 02:51:39Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more...

Black Ice Fax Voice SDK 12.6 Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

Black Ice Fax Voice SDK v12.6 Remote Code Execution

Exploit for windows platform in category remote exploits : Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 -...

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

Black Ice Fax Voice SDK 12.6 - Remote Code Execution : Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 -...

Black Ice Cover Page ActiveX Control Arbitrary File Download

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

Black Ice Cover Page SDK - Insecure Method 'DownloadImageFileURL()' (Metasploit)

Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module $Id: blackicecoverpagedownload.rb 12540 2011-06-20...

Black Ice Fax Voice SDK 12.6 - Remote Code Execution

: Theres an integer overflow in this section of fax.ocx which is how i found the dereference vulnerability. 1000CFA3 MOV ECX,EBP+8 51EC8B55 EAX 1000CF82 - 51EC8B55 EBX 0013EC68 - 01D29E90 ECX FFFFFFFF EDX 73F360D3 - EB0C4589 EDI 0013EB98 - 73F4D682 ESI 00000000 EBP 0013EB94 - 0013EC10 ESP 0013EB9...

Black Ice Cover Page SDK insecure method DownloadImageFileURL()

Exploit for windows platform in category remote exploits Blackice Cover Page SDK insecure method DownloadImageFileURL exploit arg1="http://www.google.com/robots.txt" arg2="C:\Documents and Settings\All Users\Start Menu\Programs\Startup\robots.txt" target.DownloadImageFileURL arg1 ,arg2 MSF Module...

ICE Innovation => SQL injection vulnerability

Exploit for php platform in category web applications ============================================================ Title: ICE Innovation =SQL injection vulnerability Date:10/6/11 Author: Sideswipe Home: www.pro2leet.net or www.alboraaq.com or www.indishell.in Category: Web apps Dork: intext:"Desi...

26 Underground Hacking Exploit Kits available for Download !

List of Hacking Exploit Kits : 1. Unknow 2. Tor 3. Target-Exploit 4. Smart pack 5. RDS 6. My poly sploit 7. multisploit 8. mypack-009 9. mypack-091 10. mypack-086 11. mypack-081 12. Mpack 13. Infector 14. Ice-pack-1 15. Ice-pack-2 16. Ice-pack-3 17. G-pack 18. Fire pack -1 19. Fire Pack -2 20...

Concave Yaya article system injection vulnerability analysis-vulnerability warning-the black bar safety net

Article author:small ice Last night in the penetration of a local University website time to find a sub-Station is using the concave Yaya news publishing system, at the time in Internet for a under the about the system vulnerabilities but did not find anything, so they own out of the sleeve 4. 7A...

Lingxia I.C.E CMS - Blind SQL Injection

Lingxia I.C.E CMS - Blind SQL Injection !/usr/bin/python ICE CMS Blind SQLi 0day. mrme@pluto ice$ python icecold.py -p localhost:8080 -t 10.3.100.25:8500 -d /ice/ | ---------------------------------------------------- | | Lingxia I.C.E CMS Remote Blind SQL Injection Exploit | | by mrme -...

gcc security and bug fix update

4.1.2-50.el5 - fix up fastjar directory traversal bugs CVE-2010-0831 4.1.2-49.el5 - fix ICE in setuidsinptset 605803 - fix ICE in makertlfornonlocaldecl 582682, 508735, 503565, PR c++/33094 - dont build gcjwebplugin 596097 - fix IPP handling in libgcj 578382 - document -print-multi-os-directory...

USA Ice Hockey School Site Defaced by r0ckykhan

USA Ice Hockey School Site Defaced by r0ckykhan Link : https://www.sheehanhockey.com/ Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

CVE-2010-1031: Undefined Security Weakness

Unspecified vulnerability in HP Insight Control for Linux aka IC-Linux or ICE-LX 2.11 and earlier allows local users to gain privileges via unknown vectors...

Network penetration copying SAM file-a vulnerability warning-the black bar safety net

First:use WinHex this software,go to disk edit, and then enter c:\windows\system32\config copy the SAM and SYSTEM to any directory can be Second:use ice edge,directly by the ice edge copy c:\windows\system32\config copy the SAM and SYSTEM to any directory can be Summary The following easy...