Malicious Package

Overview npmkoopwwww is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

ProtOSINT - A Python Script That Helps You Investigate Protonmail Accounts And ProtonVPN IP Addresses

ProtOSINT is a Python script that helps you investigate ProtonMail accounts and ProtonVPN IP addresses. Description This tool can help you in your OSINT investigation on Proton service for educational purposes only. ProtOSINT is separated in 3 sub-modules: 1 Test the validity of one protonmail...

Hyperledger: many commands can be manipulated to delete identities or affiliations

Introduction: The Faric-ca data in http body and authorization header for many commands that send from client to server are protected by signature. But I find the identity and affiliation commands still have the risk to be manipulated. Hacker can manipulate most other commands to delete identitie...

paydeal.net Open Redirect vulnerability

Open Bug Bounty ID: OBB-491099 Description| Value ---|--- Affected Website:| paydeal.net Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4 CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:C/C:N/I:L/A:N Disclosure Standard:| Coordinated Disclosure based on ISO 2914...

come2play.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-459608 Description| Value ---|--- Affected Website:| come2play.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Bargains and brotherhood: The underground Digital Souks of the Middle East

The release of our report “Digital Souks: A glimpse into the Middle Eastern and North African underground” marks the 12th in our Cybercriminal Underground Economy Series CUES. Having previously published several papers covering the Japanese, French, German, North American, Chinese, Russian and...

Cry Ransomware Using UDP, Imgur, Google Maps

Ransomware purporting to come from a phony government agency, something called the Central Security Treatment Organization, has been making the rounds, researchers say. The ransomware, which is already known by a number of names including Cry, CSTO ransomware, or Central Security Treatment...

Virut and Waledac Botnets Spamming from Shared Machines

In an analysis of Virut botnet samples, Symantec researchers observed the malware downloading Waledac variants, suggesting that the gangs responsible for each botnet may be cooperating with one another through some sort of affiliate program, or, at the very least, that the two threats coexist and...

Sql injection

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

CVE-2009-2308

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

CVE-2009-2308

CVE-2009-2308 affects PunBB’s Affiliation (aka Affiliates) module (version 1.1.0 and earlier). The vulnerability arises in affiliates.php, where remote attackers can trigger SQL injection through the (1) in or (2) out parameter, enabling arbitrary SQL execution. Exploitation details or in-the-wil...

CVE-2009-2308

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...

CVE-2009-2308: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in affiliates.php in the Affiliation aka Affiliates module 1.1.0 and earlier for PunBB allow remote attackers to execute arbitrary SQL commands via the 1 in or 2 out parameter...