[theHarvester v2.2a] Tool for Gathering

theHarvester is a tool for gather emails, subdomains, hosts, employee names, open ports and banners from different public sources like search engines, PGP key servers and SHODAN computer database. This tool is intended to help Penetration testers in the early stages of the penetration test in ord...

Tunisians Voice - Nawaat Portal hacked

Kosova Warriors Group deface a subdomain https://events.nawaat.org/ of Nawaat Portal.. Its an independent collective blog hosted by Tunisians. It gives a voice to all those who, through their civic engagement, take the cover and spread. Our editorial decisions are guided by among other concerns...

Mynet.com Cross Site Scripting

Exploit Title: Mynet XSS ALL Date: 10.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ---------------- http://cevaplar.mynet.com/ search box http://cevaplar.mynet.com/Search.aspx?q=%22%3E%3Cimg%20src=x%20onerror=prompt%28document.cookie%29;%3E " ----------------...

Resellerclub and Directi Registrars Hacked

Resellerclub and Directi Registrars Hacked Various Domains and Sudomains of two largest Reseller focused Registrars in the world got hacked by GrayHatz turkish Group of hackers. ResellerClub is one of the largest private label Web Solutions Providers globally. ResellerCLub's products represent an...

Philips Electronics got hacked, Database Stolen by Hackers

Philips Electronics got hacked, Database Stolen by Hackers Another big site got hacked today, its Philips Electronics - had revenues of €25.42 billion in 2010, making it one of the largest electronics companies in the world. It employs around 114,500 people across more than 60 countries. The defa...

NASA Subdomains FCKEditor - Multiple Vulnerabilities

Document Title: =============== NASA Subdomains FCKEditor - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=400 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 400 Produc...

NASA Subdomains FCKEditor - Multiple Vulnerabilities

Document Title: =============== NASA Subdomains FCKEditor - Multiple Vulnerabilities References Source: ==================== http://vulnerability-lab.com/getcontent.php?id=400 Release Date: ============= 2012-01-28 Vulnerability Laboratory ID VL-ID: ==================================== 400 Produc...

Multi Gather DNS Forward Lookup Bruteforce

Brute force subdomains and hostnames via wordlist. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Multi Gather DNS Forward Lookup Bruteforce', 'Description' = %q Brute force subdomains and...

BackBox - Linux distribution based website Hacked

BackBox - Linux distribution based website Hacked BackBox is a Linux distribution based on Ubuntu Lucid 10.04 LTS developed to perform penetration tests and security assessments. Designed to be fast, easy to use and to provide a minimal yet complete desktop environment thanks to its own software...

BackBox - Linux distribution based website Hacked

BackBox - Linux distribution based website Hacked BackBox is a Linux distribution based on Ubuntu Lucid 10.04 LTS developed to perform penetration tests and security assessments. Designed to be fast, easy to use and to provide a minimal yet complete desktop environment thanks to its own software...

URL Spoofing vulnerabilities in browsers and search engines

Hello 3APA3A! I continue the topic, which I begun in previous two advisories about URL Spoofing vulnerability http://websecurity.com.ua/3079/ in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3096/, which also can exists in bots of other search engines. And I tel...

SeaMonkey < 1.1.15 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.15. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2009-01 - Cookies marked HTTPOnly are...