100k IEEE site Plain-Text Passwords found on Public FTP

A Romanian researcher - Radu Drăgușin found that 100000 usernames and passwords of the Institute of Electrical and Electronics Engineers IEEE was stored in plaint-text on a publicly accessible FTP server. According to him, on Sept. 18 he first discovered a log with usernames and passwords in...

Nasa Cross Site Scripting

Exploit Title: Feedback form heasarc.gsfc.nasa.gov Cross Site Scripting Date: 13/08/2012 Author: Ryuzaki Lawlet Web/Blog: http://justryuz.blogspot.com/ Category: webapps Security:RISK: High Vendor or Software Link: Google dork: - Tested on: Linux Exploit/p0c :...

NASA Compromised

And then there was NASA. Poor NASA. This was a tough year for the formerly high-flying and universally beloved U.S. space agency. Not only has their budget seen deep cuts as the US Government tries to balance its books, but they also celebrated the bitter-sweet final mission of their once marquee...

NASA SSL Digital Certificate hacked by Iranian Hackers

NASA SSL Digital Certificate hacked by Iranian Hackers Iranian hackers 'Cyber Warriors Team' announced in an online post that it compromised an SSL certificate belonging to NASA and subsequently accessed information on thousands of NASA researchers. A space agency representative revealed that...

Iranian Students Claim to have Stolen Thousands of Researcher's Records

There’s still no official response from NASA officials after a group of Iranian student programmers calling themselves Cyber Warriors Team claimed to have swiped records for thousands of NASA researchers by compromising an agency site’s SSL certificate. In a May 16 statement posted on Pastebin, t...

Microsoft to Investigate Alleged Xbox Credit Card Hack

Microsoft is looking into a potential security issue affecting its Xbox 360 video game console this week after a group of college students claimed they were able to extract the credit card information of a console’s previous owner from the machine. Ashley Podhradsky, Rob D’Ovidio, and Cindy Casey...

NASA sub-domain and Australian Police targeted by Hackers

NASA sub-domain and Australian Police targeted by Hackers Hacker with name "Black Jester" hack another subdomain https://airtrafficconflictresolutions.arc.nasa.gov of NASA. Hacker compromise the database of site and leak password hashes of Users and Database Info also. The leaked info posed on...

NASA Computers Hacked Repeatedly in Last Two Years

NASA has been hit repeatedly by hackers during the last two years – including an incident where attackers compromised systems at the agency’s Jet Propulsion Laboratory. The situation was revealed in testimony Feb. 29 by NASA Inspector General Paul Martin before the House Science, Space and...

"NASA Own3d Again" - NASA Database Leaked by r00tw0rm

"NASA Own3d Again" - NASA Database Leaked by r00tw0rm Hackers from Team r00tw0rm again hit NASA. According to Latest tweet by Hackers, They claim to hack the one of the Sudomain of Nasa Link is not exposed by hackers and claimed to be reported for Fix. Hackers claim to hack GB's of database and...

NASA Subdomains Shell Upload / SQL Injection

Title: ====== NASA Subdomains FCKEditor - Multiple Vulnerabilities Date: ===== 2012-01-29 References: =========== http://vulnerability-lab.com/getcontent.php?id=400 VL-ID: ===== 400 Introduction: ============= The National Aeronautics and Space Administration NASA is the agency of the United Stat...

NASA Hacker Arrested in Romania

Razvan Manole Cernaianu, perhaps better known as Tinkode, the hacker who gained notoriety after allegedly compromising a number of websites, including those of NASA, the European Space Agency, and Sun Microsystems, was recently arrested in Romania. According to a statement released by the Romania...

NASA and Pentagon Hacker - TinKode Arrested in Romania

NASA and Pentagon Hacker - TinKode Arrested in Romania Romanian police have arrested a man believed to be TinKode, the notorious hacker responsible for several daring, high-profile cyberattacks, including last year's breach of NASA's servers, Royal Navy, The European Space Agency and MySQL.com. T...

NASA Subdomains FCKEditor - Multiple Vulnerabilities

Document Title: =============== NASA Subdomains FCKEditor - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=400 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 400 Produc...

NASA Subdomains FCKEditor - Multiple Vulnerabilities

Document Title: =============== NASA Subdomains FCKEditor - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=400 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 400 Produc...

Operation Ghost Click by FBI - Online advertising scam taken Down

Operation Ghost Click by FBI - Online advertising scam taken Down A gang of internet 'cyber bandits' who stole $14 million after hacking into at least 4 million computers in an online advertising scam have been arrested following a joint investigation by the FBI and Nasa. Six men are in custody i...

TeaMp0isoN : NASA forum is Vulnerable SQL injection, Admin Hacked !

TeaMp0isoN : NASA forum is Vulnerable SQL injection, Admin Hacked ! TeaMp0isoN Hackers crew today Reveal on twitter that the discussion forum on NASA website at https://worldwind35.arc.nasa.gov/forum/ is Vulnerable to SQL injection. The discussion Forum script is Powered by Vbulletin. According t...

TeaMp0isoN : NASA forum is Vulnerable SQL injection, Admin Hacked !

TeaMp0isoN : NASA forum is Vulnerable SQL injection, Admin Hacked ! TeaMp0isoN Hackers crew today Reveal on twitter that the discussion forum on NASA website at is Vulnerable to SQL injection. The discussion Forum script is Powered by Vbulletin. According to hacker, He use Vbulletin 4.0.x = 4.1.3...

Titan Rain

Hacks against the Defense Department and other U.S. agencies stretching back to 2003 were codenamed Titan Rain by investigators. The attacks, which breached hundreds of networks, including Departments of State, Energy and Homeland Security, were coordinated from Chinese computers, investigators...

Gary McKinnon

For more than a year between February of 2001 and March of 2002, a British national, Gary McKinnon, was allegedly able to hack into nearly 100 United States military and NASA computers. Prosecutors have accused McKinnon of having committed the “biggest military computer hack of all time.” McKinno...

Hack Targets NASA's Earth Observation System

A hacker is claiming that a security hole in a server at NASA’s Goddard Space Flight Center has exposed data related to a satellite-based Earth observation system used to aid in disaster relief. The hacker, who uses the handle “Tinkode” has published a screen capture from what he claims is an FTP...