268 matches found
YXcms越权修改任意用户资料，获取任意用户密码
简要描述： YXcms建站系统修改用户资料时，对用户身份没有进行验证，导致越权操作 详细说明： 1、涉及版本YXcms1.2.6 2、下载地址：http://www.yxcms.net/ 系统演示地址：http://demo.yxcms.net/index.html 3、用户完善自己资料内容时，系统根据用户id在后台进行操作。但用户id的设置只是简单的数字，因此通过修改id，我们可以修改任意用户的资料信息。 漏洞证明： 1、登录系统，进入会员中心，在资料完善模块填写要修改的用户基本资料。 2、为了演示漏洞，我们注册了一个id为1的被攻击账户，抓包修改id为被攻击者的id，即为1。...
CVE-2014-4154
ZTE ZXV10 W300 router with firmware W300V1.0.0aZRDLK stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain the PPPoE/PPPoA password via a direct request for basic/tc2wanfun.js...
Android exposed the new vulnerability: hackers can use a key authentication to steal user passwords-vulnerability warning-the black bar safety net
Close paragraph of time, the hackers in the Android system found a large number of vulnerabilities, including the legitimate Android software into malicious software, the FBI can remotely monitor the Android phone microphone and so on. Now, PCWorld also exposed with the Android a new...
New Botnet Campaign 'Fort Disco' Brute-Forcing Thousands of WordPress, Joomla Websites
Password theft has been a growing problem within the security community. Researchers at Arbor Networks have uncovered a botnet called Fort Disco that was used to compromise more than 6000 websites based on popular CMSs such as WordPress, Joomla and Datalife Engine. The Fort Disco botnet is...
New Botnet Campaign 'Fort Disco' Brute-Forcing Thousands of WordPress, Joomla Websites
Password theft has been a growing problem within the security community. Researchers at Arbor Networks have uncovered a botnet called Fort Disco that was used to compromise more than 6000 websites based on popular CMSs such as WordPress, Joomla and Datalife Engine. The Fort Disco botnet is...
Shylock Trojan Going Global with New Features, Resilient Infrastructure
The prolific, credential-stealing Shylock banking Trojan is growing increasingly sophisticated as its creators continue adding new modules and functionalities to the man-in-the-browser malware, according to a Symantec report. To this point, Shylock has made its money via man-in-the-browser attack...
Apple App Store was vulnerable for more than Half year
A Google developer helps Apple to fixed a security flaw in its application store that for years has allowed attackers to steal passwords and install unwanted or extremely expensive applications. Security loophole allowed attacker to hijack the connection, because Apple neglected to use encryption...
Apple App Store was vulnerable for more than Half year
A Google developer helps Apple to fixed a security flaw in its application store that for years has allowed attackers to steal passwords and install unwanted or extremely expensive applications. Security loophole allowed attacker to hijack the connection, because Apple neglected to use encryption...
Remotely controlled Malware as Browser extensions
"Browser extensions extend the functionality of the web browser. These extensions improve the appearance, functionality, security or other parts of the browser. Extensions were also developed with malicious intent, in order to generate revenue or just spread the code between more and more browser...
Input validation
Apple Mac OS X before 10.7.5 and 10.8.x before 10.8.2 allows local users to read passwords entered into Login Window aka LoginWindow or Screen Saver Unlock by installing an input method that intercepts keystrokes...
Looking to Bolster Security, Dropbox Adds Two-Factor Authentication
Several weeks after announcing that some of its users’ log-ins and passwords had been stolen, file storage company Dropbox announced it has added a two-step authentication process over the weekend to help reinforce the security of its users’ accounts. The added layer of security is currently...
Discovered the biggest Facebook phishing in French
Discovered the biggest Facebook phishing in French Two Days before we publish that Geeks at Security Web-Center Found 25 Facebook phishing sites. Security Web-Center found another biggest Facebook phishing site in French which steal more then 5000 usernames and passwords, using the fake domain...
Optima DDOS 10a Botnet leaked on Underground Forums
Optima DDOS 10a botnet leaked on Underground Forums On underground forums "Optima DDOS 10a Botnet" full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and...
Optima DDOS 10a Botnet leaked on Underground Forums
Optima DDOS 10a botnet leaked on Underground Forums On underground forums "Optima DDOS 10a Botnet " full version posted for all to download and use. Complete new version of the acclaimed DDoS bot Optima Darkness. In this new version 10a according to the author was raised in secrecy bot system and...
New Aldi Botnet Aims to Be "People's Bot" for Under $10
A new, exceptionally cheap botnet builder has surfaced called Aldi Bot and is for sale online for as little as US $8. Aldi Bot first appeared in August and is named after the popular supermarket chain, according to a post this week on GData’s SecurityBlog. Its authors initially offered it for €10...
Aldi Bot - Buy a Botnet just in 10 Euros
Aldi Bot - Buy a Botnet just in 10 Euros Researchers of German security firm G Data have discovered that a bot builder dubbed "Aldi Bot" is currently being offered for that much on underground forums. The Aldi Bot Builder appears to be based on the ZeuS source code. The malware has nothing to do...
Pesca 0.75 Local Stealer - Download !
Pesca 0.75 Local Stealer - Download ! Steals: MSN Messenger Windows Messenger Windows Live Messenger Yahoo Messenger 5.x and 6.x Google Talk ICQ Lite 4.x/5.x/2003 AOL Instant Messenger v4.6,6.x,Pro Trillian Miranda GAIM/Pidgin MySpace IM PaltalkScene Outlook Express Microsoft Outlook 2000...
ecshop modify any user password vulnerability of the CSRF exploit-vulnerability warning-the black bar safety net
ecshop in the design of the authentication mechanism when there is a problem, resulting in malicious users can steal other user's password, this process can be byxssand csrf to achieve Vulnerability exp: html body form action="http://www.chinasg.tk/ecshop/user.php" method="POST" INPUT TYPE="text"...
"ecshop修改任意用户密码漏洞"的CSRF利用
简要描述： ecshop在设计认证机制的时候存在一个问题，导致恶意用户可以窃取其他用户的密码，这个过程可以通过xss和csrf实现 Demo For:http://www.wooyun.org/bug.php?action=view&id=395 详细说明： 利用csrf和xss可以突破官方所说的“障碍” xss版本已经有人说明 这里给出csrf版本 漏洞证明： document.forms0.submit; 构造该网页，用户在登录情况下访问该网页将导致email以及一些其他安全信息丢失...