Massive Hack At Gawker Yields Trove of Passwords

A massive hack of systems belonging to online publishing giant Gawker Media has put gigabytes of sensitive information related to Gawker founder Nick Denton and the company’s operations online. But a trove of millions of hashed account passwords could be an even bigger problem for untold numbers ...

Nmap for Android Phones !!

droidmap is an android application for root users that implements some functions of NMAP in a GUI in Android. This program comes with installer scripts for the installation of the required NMAP application that must be run to install the program to your phone. Please note that the installation...

Week in Security: More Wikileaks Fallout, Cybersecurity Buzz and Browser Updates

The words “cyber war” were in the headlines this week, as controversy and debate about the leak of confidential diplomatic cables by Wikileaks reached a fever pitch. As speculation turned to the fallout from the ongoing publication of documents, the U.S. government laid the groundwork to prevent...

WordPress Twitter Feed Plugin 'url' Parameter Cross Site Scripting Vulnerability

The Twitter Feed Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective...

Twitter Locks Out Wikileaks DDoS Group As Attacks Spread

Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service DoS attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its founder,...

Understanding the Dangers of Stuxnet in Industrial Control Systems

Stuxnet is a sophisticated virus specifically designed to attack supervisory control and data acquisition SCADA systems manufactured by Siemens, a German industrial giant. These systems are commonly used to manage water supplies, power plants, and other industrial facilities, making the worm...

Twitter Feed for WordPress Plugin 'url' Parameter XSS

The version of the Twitter Feed for WordPress plugin installed on the remote host does not sanitize input to the 'url' parameter of the 'magpie/scripts/magpiedebug.php' script before using it to generate dynamic HTML. An attacker can leverage this issue to inject arbitrary HTML or script code int...

CBI was actually Hacked By Hamza (Zombie_KSA) !

CBI was actually Hacked By Hamza ZombieKSA CBI was Hacked By Hamza, Know as ZombieKSA. He is from Kingdom of Saudi Arabia. ZombiEKsA he is famous Pakistani Hacker , member of PAKbugs ! have hacked alot BiG sites ! Including 3 Indian banks, 4 Indian police websites ! Indian CID !! and Now CBI also...

Xplico v0.6.1 - Network Forensic Analysis Tool (NFAT)

"The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn't a network protocol analyzer. Xplico is...

WordPress Twitter Feed Plugin - Cross-Site Scripting Vulnerability

Twitter Feed "url" parameter plugin is prone to a cross-site scripting vulnerability. It fails to properly clean up user-supplied input. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based...

Twitter Feed <= 0.3.1 - XSS

The Peadig's Twitter Feed: Embedded Timeline WordPress Plugin WordPress plugin was affected by a XSS security vulnerability...

WordPress Plugin Twitter Feed - 'url' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45294/info The Twitter Feed Plugin for WordPress is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Kernel-2.6.18.194 / e15 / 2010 Local Root Exploit !

Kernel-2.6.18.194 / e15 / 2010 Local Root Exploit ! ==================================================== kernel-2.6.18.194 /e15 / 2010 Local Root Exploit ==================================================== Author: Hackeri-AL Email : h-al at hotmail dot it Group : UAH / United ALBANIA Hackers Web...

Winzip 15.0 WZFLDVW.OCX Text Property Denial Of Service

Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

WinZip 15.0 - WZFLDVW.OCX Text Property Denial of Service

Exploit Title: Winzip WZFLDVW.OCX text property access violation Author: fady mohamed osman Software Link : http://www.winzip.com/downwz.htm Version: 15.0 Build 9334 Tested on: Win XP Sp2 CVE : N/A Website : http://www.darkmasters.co.cc/ Twitter : http://twitter.com/FadyOsman 'Wscript.echo...

Dradis v2.6 - Tool for sharing information during security testing !

"Dradis is a tool for sharing information during security testing. While plenty of tools exist to help in the different stages of the test, not so many exist to share interesting information captured. When a team of testers is working on the same set of targets, having a common repository of...

Vigilant Hacker-Activist Allegedly Searched and Seized

It is being reported that the internet hacker-activist calling himself the Jester who claimed responsibility for the DDoS attacks on Wikileaks Sunday has been the subject of a search and seizure by local law enforcement officials. The raid reportedly took place Monday according to a blog posted...

HTTPS Everywhere : Another Tool to Protect from Firesheep !

HTTPS Everywhere is a Firefox extension produced as a collaboration between The Tor Project and the Electronic Frontier Foundation. It encrypts your communications with a number of major websites. The EFF launched a new version of HTTPS Everywhere, a security tool that offers enhanced protection...

Tlxdgs.com Hacked By ATH cReW "Teo DownTurn" & "Unknown Hacker" !

Tlxdgs.com Hacked By ATH cReW "Teo DownTurn" & "Unknown Hacker" ! Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Facebook Glitch Locks Out Accounts

A bug in an account verification system used by Facebook resulted in a wave of account suspensions Tuesday that had users locked out of the world’s largest social network and scratching their heads over the reason. Facebook discovered a bug in a system designed to detect and disable fake accounts...