[SECURITY] Fedora 20 Update: proftpd-1.3.4d-4.fc20

ProFTPD is an enhanced FTP server with a focus toward simplicity, security, and ease of configuration. It features a very Apache-like configuration syntax, and a highly customizable server infrastructure, including support for multiple 'virtual' FTP servers, anonymous FTP, and permission-based...

Default application configuration files are available for download

h3. Summary of The Bug By browsing to the following URL path user would be able to download any files under /confluence/WEB-INF/... code/s/1519/3/1.0//WEB-INF/...code The above URL will be accessible by any users including anonymous even to an instance that does not allow anonymous access h5. Not...

OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

OAuth Administration screen is visible to anonymous users

If anonymous user access is enabled under "Global Permission", user can access to "OAuth Administration" page without the need to log-in. Here is the URL to the page: /plugins/servlet/oauth/view-consumer-info This page display Confluence administrators menu on the sidebar and other information su...

freeFTPd 1.0.10 (PASS Command) - SEH Buffer Overflow Vulnerability

No description provided by source. !/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV != 2 "Usage $0 host...

Anonymous Hacker 'Kahuna' sentenced to 3 years in prison for hacking Police websites

An Anonymous Hacker and Online hacktivist who was responsible for hacking into the City of Springfield's website and others Police websites has been sentenced to 3 years in federal prison. John Anthony Borell III, a 22-year-old man from Ohio with the online handle @ItsKahuna started advertising h...

Anonymous Hacker 'Kahuna' sentenced to 3 years in prison for hacking Police websites

An Anonymous Hacker and Online hacktivist who was responsible for hacking into the City of Springfield’s website and others Police websites has been sentenced to 3 years in federal prison. John Anthony Borell III, a 22-year-old man from Ohio with the online handle @ItsKahuna started advertising h...

Penetration Testing Browser Bundle: PenQ

PenQ is an open source, Linux-based penetration testing browser bundle we built over Mozilla Firefox. It comes pre-configured with security tools for spidering, advanced web searching, fingerprinting, anonymous browsing, web server scanning, fuzzing, report generating and more. Penetration Testin...

FBI used Anonymous and Lulzsec Hackers to attack foreign governments

Sentencing for former LulzSec leader Hector Xavier Monsegur, better known as "Sabu" , has again been delayed. Monsegur pleaded guilty to a dozen criminal counts two years prior and stands to face more a maximum sentence of more than 124 years. Another Lulzsec Hacker Jeremy Hammond has claimed tha...

FBI used Anonymous and Lulzsec Hackers to attack foreign governments

Sentencing for former LulzSec leader Hector Xavier Monsegur, better known as "Sabu" , has again been delayed. Monsegur pleaded guilty to a dozen criminal counts two years prior and stands to face more a maximum sentence of more than 124 years. Another Lulzsec Hacker Jeremy Hammond has claimed tha...

freeFTPd 1.0.10 Buffer Overflow

!/usr/bin/perl freeFTPd 1.0.10 anonymous-auth PASS SEH buffer overflow PoC by Wireghoul - www.justanotherhacker.com Date: 20130820 Tested on: XPSP3 Similar exploits: EDB 23079 1330 1339 Greetz corelan, TecR0C, mrme, jjkakakk if scalar@ARGV != 2 "Usage $0 host port\n"; exit; use IO::Socket::INET;...

DEBIAN-CVE-2013-2157

OpenStack Keystone Folsom, Grizzly before 2013.1.3, and Havana, when using LDAP with Anonymous binding, allows remote attackers to bypass authentication via an empty password...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

IceWarp Web Mail <= 10.4.5 Information Disclosure Vulnerability - Active Check

IceWarp Web Mail is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

INSTEON Hub 2242-222 - Lack of Web and API Authentication

Trustwave SpiderLabs Security Advisory TWSL2013-023: Lack of Web and API Authentication Vulnerability in INSTEON Hub Published: 8/01/13 Version: 1.0 Vendor: INSTEON http://www.INSTEON.com/ Product: Hub Version affected: 2242-222 model discontinued Product description: Home automation controller f...

FreeBSD NFS privilege escalation

It's possible to access files with credentials of any user if anonymous NFS acccess is allowed...

Anonymous Offline File-Sharing and Communications System: PirateBox

PirateBox creates offline wireless networks designed for anonymous file sharing, chatting, message boarding, and media streaming. You can think of it as your very own portable offline Internet in a box! When users join the PirateBox wireless network and open a web browser, they are automatically...

Leaked credentials of Congress members by Anonymous hacker are inaccurate

Anonymous claimed it had stolen and leaked over 2,000 usernames and passwords for Hill staffers in an anti-PRISM protest, calling the move a pivotal moment for Congress. The Twitter handle @OpLastResort which claims to be affiliated with the famous hacktivist group posted the data and also tweete...

Leaked credentials of Congress members by Anonymous hacker are inaccurate

Anonymous claimed it had stolen and leaked over 2,000 usernames and passwords for Hill staffers in an anti-PRISM protest, calling the move a pivotal moment for Congress. The Twitter handle @OpLastResort which claims to be affiliated with the famous hacktivist group posted the data and also tweete...