AT-TFTP Server 1.8 - Directory Traversal

/ / / / / // | / // \ | / / / / / /// / / / / / / / // / / / |/ / // / ,tftp Transfers files to and from a remote computer running the TFTP service. TFTP -i host GET | PUT source destination -i Specifies binary image transfer mode also called octet. In binary image mode the file is moved...

A Closer Look at Work at Home Scams

A recent chat with an individual who was almost tricked into helping organized criminals launder thousands of dollars stolen through e-banking fraud displayed one of the more clever and convincing money mule recruitment Web sites encountered. Read the full article. KrebsonSecurity...

Dmx Ready v2 lite Database Disclosure Exploit

Exploit for perl platform in category web applications ============================================= Dmx Ready v2 lite Database Disclosure Exploit ============================================= !/usr/bin/perl -w Dmx Ready v2 lite Database Disclosure Exploit Found & Coded: indoushka Date: 25/07/201...

Catholic Diocese Loses $600K to Online Thieves

Organized cyber thieves stole more than $600,000 from the Catholic Diocese of Des Moines, Iowa earlier this month with the help of dozens of unwitting co-conspirators hired through work-at-home job scams, at least one of whom was told the money was being distributed to victims of the Catholic...

Fedora Update for openconnect FEDORA-2010-12253

Check for the Version of openconnect OpenVAS Vulnerability Test Fedora Update for openconnect FEDORA-2010-12253 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

Unfixed XSS vulnerability at www.2work-at-home.com

Security researcher nullbyt3, has submitted on 21/07/2010 a cross-site-scripting XSS vulnerability affecting www.2work-at-home.com, which at the time of submission ranked 133172 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/10/2010. It is...

Elite Gaming Ladders v3.5 SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================================== Elite Gaming Ladders v3.5 SQL Injection Vulnerability ===================================================== - Elite Gaming Ladders v3.5 SQL Injection Vulnerability - ---Date : 2010-06-19...

CVE-2010-0546

Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder...

Design/Logic Flaw

Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder...

CVE-2010-0546

Folder Manager in Apple Mac OS X 10.5.8, and 10.6 before 10.6.4, allows local users to delete arbitrary folders via a symlink attack in conjunction with an unmount operation on a crafted volume, related to the Cleanup At Startup folder...

AT&T Show How Not to Handle a Data Breach

There’s an ongoing argument in barrooms, pubs and wherever else soccer fans gather about who is the best player in the world. The general consensus right now is Lionel Messi, the Argentinian genius, but others can build a case for Wayne Rooney, Didier Drogba or even Cristiano Ronaldo. A similar...

Goatse Hacker Member Arrested on Drug Charges

A hacker in the Goatse Security group that discovered the AT&T iPad-related flaw was arrested following the execution of an FBI search warrant of his home in Arkansas. Read the full article. CNet...

AT&T iPad Hack May Be Worse Than Initially Thought

Researchers looking into the security of GSM phone networks are suggesting that the recent breach, which saw tens of thousands of e-mail addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications than a bit of extra spam: attackers can use the information to...

The Pitfalls of Website Vulnerability Research and Disclosure

Vulnerability disclosure is in the spotlight again. First it was Tavis Ormandy disclosing a vulnerability in Microsoft Windows before Microsoft had a fix available. Now a group called Goatse Security has disclosed a vulnerability in an AT&T website that affects Apple iPad 3G owners. The Wall Stre...

FBI Probes AT&T iPad Goatse Email Leak

The U.S. Federal Bureau of Investigation has opened an investigation into the leak of an estimated 114,000 Apple iPad user e-mail addresses including those of Chief of Staff Rahm Emanuel, ABC ABC News anchor Diane Sawyer and NY Mayor Michael Bloomberg. Read the full article. IDG News Service...

Fedora Update for liboggz FEDORA-2010-9253

Check for the Version of liboggz OpenVAS Vulnerability Test Fedora Update for liboggz FEDORA-2010-9253 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Facebook: The Money Mule Farm

Scammers and phishers are continuing to adapt their recruitment tactics, now going so far as to create special Facebook groups for their work-at-home scams. Phishers have been using social networks such as Facebook, MySpace and Twitter for years now as fertile hunting grounds not only for new...

WinDirectAudio Proof Of Concept

/usr/bin/perl Title: WinDirectAudio .WAV PoC +Date : May 21, 2010 +version : v1.0 +Author : ahwak2000 +Contact : z.u5athotmail.com +Geetz 2 : germayax +tested on : windows xp sp2&sp3 EN my $junk = "\x41" x 5000; openmyfile,' ahwak2000.wav'; print myfile $junk."\r\n"; print "\nEvil WAV file create...

Joomla Percha Gallery 1.6 Beta Local File Inclusion

==================================================================================================================== o Joomla Component Percha Gallery Local File Inclusion Vulnerability Software : comperchagallery version 1.6 Beta Vendor : http://www.percha.com/ Author : AntiSecurity NoGe Vrs-hCk...

Press Release Script - 'page.php?id' SQL Injection

In The Name Of Allah The Mercifull Tybe: SQL Injection Vulnerabilities Vendor: www.v-eva.com + Software: Press Release Script + author: R3d-D3v!L + TEAM: ArAB!AN !NFORMAT!ON SeCuR!TY ----4.!.5 ? contact: Xathotmail.co.jp - ? Date: 14.Jan.2010 ? T!ME: 05:15 am GMT ? Home: © Offensive Security ?...