Billions of Malicious Bots Attacks Take to Cipher-Stunting to Hide

When it comes to cyberattacks, adversaries are focusing not just on advanced malware development, but also on increasing the sophistication of their evasion techniques. This is playing out lately in the form of ballooning instances of “cipher stunting” – a TLS tampering technique that helps...

Excerpts from “5 Questions for Eric O’Neil—the FBI “ghost” who brought down a Russian Mole”

Eric O’Neill serves as Carbon Black’s national security strategist where he is a thought leader on a wide range of issues including counterterrorism and national security matters. Prior to this, he was as an operative for the FBI, where he conducted national security field operations against...

UCL Ransomware Linked to AdGholas Malvertising Group

A ransomware attack that closed off access to personal and shared drives at University College London last week has been linked to a malvertising campaign spreading Mole, a variant of CryptoMix ransomware. Kafeine, a white-hat who works for Proofpoint and is known for his research into exploit...

Mole Story Free (for kids 7-9) - Dynamic Code Loading, External URLs, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Mole Story Free for kids 7-9 published at the 'play' market has multiple vulnerabilities...

molevalley.gov.uk XSS vulnerability

Vulnerable URL: http://www.molevalley.gov.uk/index.cfm?articleid=17355 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:41 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 858892 Google Pagerank| 4 VIP websit...

Mole Group Real Estate Script <= 1.1 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Real Estate Script = 1.1 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...

Mole Group Hotel Script 1.0 - Remote SQL Injection Vulnerability

No description provided by source. -+================================================================================+- -+ Mole Group Hotel Script 1.0 Remote SQL Injection Vulnerability +- -+================================================================================+- Discovered By: t0pP8uZz...

Sql injection

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

Design/Logic Flaw

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

Code injection

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4673

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-4674

admin/admin.php in Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script allows remote attackers to change an arbitrary password via a modified userid field...

CVE-2009-4673

SQL injection vulnerability in profile.php in Mole Group Adult Portal Script allows remote attackers to execute arbitrary SQL commands via the userid parameter...

CVE-2009-4673

CVE-2009-4673 concerns a SQL injection in profile.php of the Mole Group Adult Portal Script, exploitable via the user_id parameter. The vulnerability allows remote attackers to execute arbitrary SQL commands (impact: partial confidentiality, integrity, and availability according to NVD). Public r...

CVE-2009-4675

admin/admininfo/index.php in the Mole Group Gastro Portal Restaurant Directory Script does not require administrative authentication, which allows remote attackers to change the admin password via an unspecified form submission...

CVE-2009-4674

The CVE-2009-4674 entry affects Mole Group Sky Hunter Airline Ticket Sale Script and Bus Ticket Script. The flaw in admin/admin.php allows remote attackers to change an arbitrary password by modifying a user_id field, indicating an authentication/configuration weakness in the user management func...

CVE-2009-4675

CVE-2009-4675 describes a flaw in the Mole Group Gastro Portal (Restaurant Directory) where admin/admin_info/index.php does not require administrative authentication, enabling remote attackers to change the admin password through an unspecified form submission. The NVD CVSS v2 base score is 7.5 (...

Design/Logic Flaw

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2008-6817

Mole Group Lastminute Script 4.0 and earlier stores passwords in cleartext, which allows context-dependent attackers to obtain sensitive information. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...