BF, LE and IAA vulnerabilities in InstantCMS

Hello 3APA3A! As I've announced earlier http://seclists.org/fulldisclosure/2013/Nov/219, I conducted a Day of bugs in WordPress 3. At 30.11.2013 I disclosed many new vulnerabilities in WordPress. I've disclosed 10 holes they were placed at my site for your attention. And this is translation of th...

Information Leakage and Backdoor vulnerabilities in WordPress

Hello 3APA3A! As I've announced earlier http://seclists.org/fulldisclosure/2013/Nov/219, I conducted a Day of bugs in WordPress 3. At 30.11.2013 I disclosed many new vulnerabilities in WordPress. I've disclosed 10 holes they were placed at my site for your attention. And this is translation of th...

SAMSPADE 1.14 BUFFER OVERFLOW

Exploit Title: SAMSPADE 1.14 BUFFER OVERFLOW Date: 10-12-2013 Exploit Author: VISHAL MISHRA & NIDHI VERMA Vendor Homepage: http://www.samspade.org/ Software Link: http://www.majorgeeks.com/mg/getmirror/samspade,1.html Version: 1.1.4 beta Tested on: WINDOWS XPsp2 TARGET: windows xpsp2...

Invision Power Board <= 3.3.4 PHP masscaner via Bing.com Shell Uploader

This is a PHP masscaner for IPB Edit then u will see this .\php\php.exe ipbmass.php word . Replace word with the word do you want to searc for forums . Save the file then double click on run.bat . The scanner will grep the urls with IPB forums then try to upload shell backdoor . The proccess of...

ScMM DSL Modem/Router Backdoor Detection

The remote device is a DSL Modem/Router with a backdoor running on port 32764. It is possible for an attacker to run arbitrary commands or access configuration details including passwords on the device. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid71807;...

Hacking Wireless DSL routers via Administrative password Reset Vulnerability

If you want to hack a Netgear and Linkys Wireless Routers, there is a quick backdoor entry available, that allow an attacker to reset the admin panel password to defaults. Eloi Vanderbeken, a hacker and reverse-engineer from France has discovered an administration password Reset vulnerability in...

Linksys Backdoor Port 32764 Probes On The Rise

The SANS Institute’s Internet Storm Center reports a surge in probes against port 32764, which matches the port used by an alleged backdoor in Linksys routers that was reported over the New Year’s Day holiday. “At this point, I urge everybody to scan their networks for devices listening on port...

DROPOUTJEEP: NSA's Secret program to access any Apple iPhone, including microphone & camera

In the era of Smartphones, Apple’s iPhone is the most popular device that exists, which itself gives the reason to target it. According to leaked documents shared by Security researcher Jacob Appelbaum, a secret NSA program code named DROPOUTJEEP has nearly total access to the Apple’s iPhones,...

Netgear/Linksys Routers Backdoor

The remote Linksys/Netgear Router has a backdoor on port 32764. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SerComm Network Device Backdoor Detection

This module can identify SerComm manufactured network devices which contain a backdoor, allowing command injection or account disclosure. Module Options msf use auxiliary/scanner/misc/sercomm/backdoorscanner msf undefinedbackdoorscanner show actions ...actions... msf undefinedbackdoorscanner set...

TP-LINK /userRpmNatDebugRpm26525557/linux_cmdline.html 后门漏洞

No description provided by source...

RSA denied accusations of inserting secret backdoor for the NSA

None...

MetInfo m topology enterprise website management system is inserted Backdoor-vulnerability warning-the black bar safety net

About“MetInfo m topology enterprise website management system” MetInfo enterprise website management system using PHP+Mysql schema, full Station built-in SEO search engine optimization mechanism, support user since defined interface languageglobal various language, has enterprise website common o...

NSA paid $10 Million bribe to RSA Security for Keeping Encryption Weak

If you own a world-renowned Security Product or a Service, National Security Agency NSA is ready to pay you 10 Million or more bribe for keeping intentional backdoor for them. According to an exclusive report published by Reuters, there is a secret deal between the NSA and respected encryption...

DedeCMS 5.7 后门漏洞

No description provided by source...

Joomla! Component Projoom NovaSFH 3.0.2 - 'upload.php' Arbitrary File Upload

source: https://www.securityfocus.com/bid/65438/info Projoom NovaSFH plugin for Joomla! is prone to an arbitrary-file-upload vulnerability because it fails to adequately sanitize user-supplied input. An attacker may leverage this issue to upload arbitrary files; this can result in arbitrary code...

China APT Hackers Target Diplomats in Ke3chang Campaign

European diplomats and ministries of foreign affairs have been targeted during recent G20 meetings by Chinese-speaking hackers conducting espionage campaigns using malware to siphon secrets from compromised computers. The latest incidents came in August when spear phishing messages spiked with...

Belkin NetCam backdoor

Unchangable account...

Belkin WiFi NetCam video stream backdoor with unchangeable admin/admin credentials

Product: Product NetCam WiFi Camera With Night Vision, purchased August 2013 Summary: Live video stream is accessible with user/password of admin/admin. The user/password combination admin/admin cannot be changed by the user. This "feature" is undocumented. To reproduce: 1. Connect webcam to...

D-Link Releases Router Firmware Updates for backdoor vulnerability

In October, A Security researcher 'Craig Heffner' discovered a backdoor vulnerability CVE-2013-6027 with certain D-Link routers that allow cyber criminals to alter a router setting without a username or password. Last week, D-Link has released new version of Firmware for various vulnerable router...