SwaggSec gained access to China Telecom and Warner Bros

SwaggSec gained access to China Telecom and Warner Bros A hacking group is claiming to have breached the networks of Warner Bros. and China Telecom, releasing documents and publishing login credentials. Swagg Security, or SwaggSec, the same hacker collective that breached Foxconn a few months ago...

D-Tekweb SQL Injection

================================================ D-Tekweb index.php SQL Injection Vulnerability ================================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees ThEhAcKeR12 has hacked into an events management company and obtained sensitive information belonging to 20,000 individuals, many of whom were United States government employees or contractors. Hacker posted an Excel spreadsheet...

SmartFTP Client Information Disclosure Vulnerability

This host is installed with SmartFTP Client and is prone to information disclosure vulnerability. OpenVAS Vulnerability Test $Id: secpodsmartftpclientinfodiscvuln.nasl 7006 2017-08-25 11:51:20Z teissa $ SmartFTP Client Information Disclosure Vulnerability Authors: Antu Sanadi Copyright: Copyright...

SmartFTP Client Information Disclosure Vulnerability

SmartFTP Client is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nmap NSE net: ftp-brute

Tries to get FTP login credentials by guessing usernames and passwords. This uses the standard unpwdb username/password list. However, in tests FTP servers are significantly slower than other servers when responding, so the number of usernames/passwords can be artificially limited using script...

Web hosting administration company InterWorx Hacked !

Web hosting administration company InterWorx Hacked ! Web-hosting administration outfit InterWorx has warned users to change their passwords following a deep penetrating hack attack. The assault on the firm's support desk database exposed users' login credentials because the support desk software...

Quick N Easy FTP Server 3.2 Denial Of Service

Exploit Title:DOS LOGIN Quick 'n Easy FTP Server 3.2 Date:28/2/2011 Author: clshack Software Link: http://www.pablosoftwaresolutions.com/html/quickneasyftpserver.html Version:1.12 Tested on: windows xp sp3 en CVE : !/usr/bin/python from ftplib import import random import socket def pinghost,port:...

Nmap NSE: Telnet Brute

This script attempts to get Telnet login credentials by guessing usernames and passwords. This is a wrapper on the Nmap Security Scanner's http://nmap.org telnet-brute.nse. OpenVAS Vulnerability Test $Id: gbnmaptelnetbrute.nasl 7006 2017-08-25 11:51:20Z teissa $ Wrapper for Nmap Telnet Brute NSE...

rhn-client-tools: authorized information disclosure

yum-rhn-plugin in Red Hat Network Client Tools aka rhn-client-tools on Red Hat Enterprise Linux RHEL 5 and Fedora uses world-readable permissions for the /var/spool/up2date/loginAuth.pkl file, which allows local users to access the Red Hat Network profile, and possibly prevent future security...

Torque Game Engine - Multiple Denial of Service Vulnerabilities

Torque Game Engine - Multiple Denial of Service Vulnerabilities source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engi...

Torque Game Engine - Multiple Denial of Service Vulnerabilities

source: https://www.securityfocus.com/bid/40102/info Torque Game Engine is prone to multiple denial-of-service vulnerabilities. An attacker with valid login credentials can exploit these issues to cause the application using the engine to crash, resulting in a denial-of-service condition. Other...

CVE-2010-0512: Undefined Security Weakness

The Accounts Preferences implementation in Apple Mac OS X 10.6 before 10.6.3, when a network account server is used, does not support Login Window access control that is based solely on group membership, which allows attackers to bypass intended access restrictions by entering login credentials...

Botnet: Kneber

Kneber Zbot, BTN1 is a form of malware which is reported to have affected more than 74,000 PCs in 2,400 business and government systems around the world. Kneber, named after the username linking the infected computers worldwide Hilary Kneber, is related to the ZeuS botnet, a malware botnet packag...

On plesk virtual host to mention the right-vulnerability warning-the black bar safety net

This virtual machine in a foreign country relatively popular. Safety performance is also very high, where the next record to mention the right methods. 1. mysql adminthe original rootand the default passwordsetupdidn't change,by mysql to provide the right 2. Parallels Plesk Control Panel,in 8 8 8...

PHPShop 0.6 - Bypass

PHPShop 0.6 - Bypass ======================================================================================== | Title : PHPShop Version 0.6 by pass Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | |...

CVE-2009-4302

login/indexform.html in Moodle 1.8 before 1.8.11 and 1.9 before 1.9.7 links to an index page on the HTTP port even when the page is served from an HTTPS port, which might cause login credentials to be sent in cleartext, even when SSL is intended, and allows remote attackers to obtain these...

'Moderate' Flaw Hits Adobe Photoshop Elements

Adobe has shipped a patch to cover a security vulnerability affecting its Photoshop Elements software product. The flaw, rated moderate, affects Adobe Photoshop Elements versions 8.0 and 7.0. It could be exploited by a hacker with valid login credentials and/or physical access to execute arbitrar...

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete

PunBB Automatic Image Upload 1.3.5 - Arbitrary File Delete !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowDelete = "Members"; use LWP::UserAgent; use HTTP::Cookies; my $UserName,$PassWord,$DirectoryFile,$DeleteFile = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or...

PunBB Automatic Image Upload 1.3.5 - SQL Injection

PunBB Automatic Image Upload 1.3.5 - SQL Injection !/usr/bin/perl 0-Day PunBB Automatic Image Upload $AllowStats = "Members"; use LWP::UserAgent; use HTTP::Cookies; use strict; my $UserName,$PassWord,$ID = @ARGV; if@ARGV 'Mozilla/5.0', maxredirect = 0, cookiejar = $Cookies, or die $!; sub Login m...