Bicololo malware spreading via 404 Error targeting Russians

A Trojan that attacks Russian Internet users using a new trick to spread itself. Known as "Bicololo" was first discovered in October 2012 and specially designed to steal login credentials from users. For this, the malware modify the system Hosts file i.e etc/hosts to host perfect phishing sites v...

Windows Gather FTP Explorer (FTPX) Credential Extraction

This module finds saved login credentials for the FTP Explorer FTPx FTP client for Windows. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Windows Gather FTP Explorer...

CVE-2012-0959

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

CVE-2012-0959

Remote Login Service RLS 1.0.0 does not properly clear account information when switching users, which might allow physically proximate users to obtain login credentials...

Fluger Edit 2 Blind SQL Injection / Cross Site Scripting Vulnerability

Exploit for php platform in category web applications ===================================================== Vulnerable Software: Fluger Edit v.2 || administration software Vendor: http://www.fluger.com/ Software License: Commercial Vulnerabilities: Blind SQL Injection And XSS Tested: In Wild...

Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305 Several flaws were found in the...

WordPress Newsletter Plugin 1.5 - Remote File Disclosure

WordPress Newsletter plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the plugin...

WordPress Thinkun Remind Plugin 1.1.3 - Remote File Disclosure

WordPress Tinymce Thumbnail plugin is prone to a remote file disclosure vulnerability. It allows an attacker to compromise encrypted login credentials for or retrieve the device's administrator password allowing them to directly access the device's configuration control panel. Solution Update the...

SwaggSec gained access to China Telecom and Warner Bros

SwaggSec gained access to China Telecom and Warner Bros A hacking group is claiming to have breached the networks of Warner Bros. and China Telecom, releasing documents and publishing login credentials. Swagg Security, or SwaggSec, the same hacker collective that breached Foxconn a few months ago...

D-Tekweb SQL Injection

================================================ D-Tekweb index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees ThEhAcKeR12 has hacked into an events management company and obtained sensitive information belonging to 20,000 individuals, many of whom were United States government employees or contractors. Hacker posted an Excel spreadsheet...

SmartFTP Client Information Disclosure Vulnerability

This host is installed with SmartFTP Client and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsmartftpclientinfodiscvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SmartFTP Client Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright...

SmartFTP Client Information Disclosure Vulnerability

SmartFTP Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: ftp-brute

Tries to get FTP login credentials by guessing usernames and passwords. This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script...

Web hosting administration company InterWorx Hacked !

Web hosting administration company InterWorx Hacked ! Web-hosting administration outfit InterWorx has warned users to change their passwords following a deep penetrating hack attack. The assault on the firm's support desk database exposed users' login credentials because the support desk software...

Quick N Easy FTP Server 3.2 Denial Of Service

Exploit Title:DOS LOGIN Quick 'n Easy FTP Server 3.2 Date:28/2/2011 Author: clshack Software Link: http://www.pablosoftwaresolutions.com/html/quickneasyftpserver.html Version:1.12 Tested on: windows xp sp3 en CVE : !/usr/bin/python from ftplib import import random import socket def pinghost,port:...

Nmap NSE: Telnet Brute

This script attempts to get Telnet login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org telnet-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaptelnetbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Telnet Brute NSE...

rhn-client-tools: authorized information disclosure

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Torque Game Engine - Multiple Denial of Service Vulnerabilities

Torque Game Engine - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engi...

Torque Game Engine - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engine to crash, resulting in a denial-of-service condition. Other...