Adware Spotted Spreading Via Google App Engine

Spammy websites distributing adware as Java or other kinds of software updates are nothing new but researchers have recently noticed two sites pushing that malware to users through sites that leverage Google’s App Engine. Both sites were started just over a week ago and make use of the appspot.co...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

Counter.php Redirecting to Sites Peddling Styx Exploit Kit

The Counter.php strain of malware has been spotted in the past redirecting users to a handful of malicious sites and now appears to be leveraging that ability to send victims to websites serving up the Styx exploit kit. According to a post on Securelist today, Vincente Diaz, a researcher with...

ShopEx某接口缺陷可遍历所有用户网站

简要描述： ShopEx某接口缺陷,可遍历所有网站 详细说明： 问题出现在shopex 网店使用向导页面 http://guide.ecos.shopex.cn/step2.php?refer=eyJjZXJ0aV9pZCI6MTA1MSwiY2FsbGJhY2tfdXJsIjoiaHR0cDpcL1wvd3d3LmVrYWlkaWFuLmNvbVwvIn0= refer base64解密为 "certiid":'1051',"callbackurl":"http://www.joyogame.net/" 我们修改certiid 即可遍历所有使用了ShopEx程序的网站...

German Video Game 'Crytek' Websites go offline after Security Breach

It seems that German Video Game company 'Crytek' has been the latest victim of hacking attacks on its website and few forums, and caused Crytek's family of websites to go offline. According to the company, "Our Crytek.com, Mycryengine.com, Crydev.net and MyCrysis.com sites were all subject to a...

German Video Game 'Crytek' Websites go offline after Security Breach

It seems that German Video Game company 'Crytek' has been the latest victim of hacking attacks on its website and few forums, and caused Crytek's family of websites to go offline. According to the company, "Our Crytek.com, Mycryengine.com, Crydev.net and MyCrysis.com sites were all subject to a...

Russian Cyber Criminals selling hacked websites access in Underground stores

Underground sites more commonly offer access to networks of compromised machines or stolen credit card information. Webroot has uncovered a criminal underground store dedicated to selling access to more than tens of thousands of hacked legitimate websites. Their customers can buy an administrator...

Innovation CMS uploadImageFile_do. jsp page file upload vulnerability-vulnerability warning-the black bar safety net

Brief description: Innovation CMS any upload JSP executable script file vulnerability, affecting a large number of office, municipal government website. Detailed description: Before the vulnerability is reported in a cnvd, it should be cnvd requirements to the vulnerability reported to the tick. ...

Russian Cyber Criminals selling hacked websites access in Underground stores

Underground sites more commonly offer access to networks of compromised machines or stolen credit card information. Webroot has uncovered a criminal underground store dedicated to selling access to more than tens of thousands of hacked legitimate websites. Their customers can buy an administrator...

第三方JEECMS存在远程命令执行漏洞导致批量政府站受影响（附影响站点打包）

简要描述： Jeecms是基于java技术研发的站群管理系统，稳定、安全、高效、跨平台、无限扩展是jeecms 的优点，系统支持mysql、oracle、sqlserver、db2等主流数据库。 搜索引擎的都被我爬了，一网打尽，所以不要在提交了，嘿嘿。。。 详细说明： 很可惜，存在远程命令执行漏洞，Struts2... 漏洞证明： http://www.whrsks.gov.cn/jeecms/RegisterInput.jspx = whrsksb001\admintomcat http://www.jnh.gov.cn/jncms/RegisterInput.jspx = NULL...

Apache Struts 2 vulnerability in-depth analysis-vulnerability warning-the black bar safety net

With the Apple developer site of the fall, has been exposed a week of Apache Struts2 vulnerabilities once again become a hot topic, today there is news that due to the vulnerability being exploited, Taobao's database has been stolen, although Taobao official denied this, but from the dark clouds...

WordPress-wp-FileManager-File-Download vulnerability using the method-vulnerability warning-the black bar safety net

Vulnerability details: the http://packetstormsecurity.com/files/121637/WordPress-wp-FileManager-File-Download.html Find vulnerabilities in websites: access to/wp-content/plugins/wp-filemanager/incl/libfile. php?& amp;path=../../&filename=wp-config. php&action=download, download wp-config, which...

http-xssed NSE Script

This script searches the xssed.com database and outputs the result. See also: http-stored-xss.nse http-dombased-xss.nse http-phpself-xss.nse Script Arguments slaxml.debug See the documentation for the slaxml library. http.host, http.max-body-size, http.max-cache-size, http.max-pipeline,...

Updated opera packages replace code signing certificate

Opera 12.16 contains a replaced code signing certificate. Opera Software recently experienced an attack on the internal infrastructure. Following best practices, Opera Software is replacing signing certificates in Opera with newly issued certificates. Certificates in Opera include the code signin...

MGASA-2013-0202 Updated opera packages replace code signing certificate

Opera 12.16 contains a replaced code signing certificate. Opera Software recently experienced an attack on the internal infrastructure. Following best practices, Opera Software is replacing signing certificates in Opera with newly issued certificates. Certificates in Opera include the code signin...

[Chrome Password Decryptor v4.6] Recover all stored passwords from Google Chrome

Chrome Password Decryptor is the FREE tool to instantly recover all stored passwords from Google Chrome browser. It automatically detect the default Chrome profile path for the current user and displays all the stored login passwords in clear text after decrypting them. It also shows all the...

Replaced code signing certificate

Opera Software recently experienced an attack on the internal infrastructure. Following best practices, Opera Software is replacing signing certificates in Opera with newly issued certificates. Certificates in Opera include the code signing certificate for desktop binaries and the signing...

JVN#07192063: EC-CUBE vulnerable to cross-site scripting

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site scripting vulnerability. Note that this vulnerability is different from JVN98665228. Impact An arbitrary script may be executed on the user's web browser. Solution Apply the update ...

JVN#34900750: EC-CUBE vulnerable to code injection

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a code injection vulnerability. Impact Arbitrary PHP code may be executed with the privilege of the application on the server where it resides. Solution Apply the update or patch Apply the updat...