Operation Cupcake : MI6 hacks al-Qaeda website !

As part of its cyber-warfare operations, British spy agency MI6 has hacked into an al-Qaeda online magazine and replaced ''bomb-making'' instructions with a recipe for cupcakes, a media report said. The operation was launched by MI6 in an attempt to disrupt efforts by al-Qaeda in the Arabian...

FreeBSD/x86 encrypted setuid(0) execve /bin/sh 51 bytes

/ Title : 51 bytes FreeBSD/x86 encrypted setuid0 execve /bin/sh Date : Sun May 29 08:07:11 UTC 2011 Author; mywisdom email protected Web : devilzc0de.org Gopher: gopher://sdf.org/1/users/wisdomc0 Blog : http://myw1sd0m.blogspot.com/ Tested on: FreeBSD 8.2-RELEASE i386 special thanks to...

Ronaldinho website hacked by Osama bin Laden supporter !

Ronaldinho website hacked by Osama bin Laden supporter ! Ronaldinho's website has been hacked by someone appearing to support Osama bin Laden. GloboEsporte.com reports the hacker posted a photo of bin Laden and statements supporting Islam, as well as comments in Arabic attacking Ronaldinho's...

Fake Mac OSX AV Continues To Spread

Attacks targeted at users of Apples Mac OSX may be more common than previously thought, according to a post on Kaspersky Lab’s Securelist blog. A recent spate of attacks that use infected Google Image searches to compromise user machines is also serving up fake anti-virus to users of OSX, accordi...

Bin Laden Home Videos Feed Google Image Attacks

Online scammers are recycling video and images released in the wake of the U.S. special forces raid on Osama bin Laden’s Pakistani compound to fuel Web based attacks that have been linked to rogue anti virus installations and botnets, according to Kaspersky Lab. Screenshot stills taken from home...

CommerceSQL LFI Vulnerability

Exploit for php platform in category web applications Exploit Title: CommerceSQL LFI Vulnerability . Author: xConsoLe Home: http://dztools.net Vendor or Software Link: http://www.commercesql.com/ Category:: Local File Include d0rk: intext:Couldn't exec sth! at ./admin/htmllib.pl line d0rk:...

Report: bin Laden Raid Yields Treasure Trove of Data

The Wall Street Journal is reporting that Navy Seals hauled off a treasure trove of data, including computers, hard drives and portable storage devices, following their successful raid on the compound of Osama bin Laden – a raid that culminated with the death of the terrorist leader. Navy SEALS...

Malware and Spam Campaigns Related to Bin Laden Not Finding Many Takers

As has become their custom, attackers and malware authors jumped on the death of Osama Bin Laden Monday, using black hat SEO, Facebook scams and Twitter spam. However, unlike other recent major news events, the attempts to lure people into clicking on malicious links or downloading Trojaned files...

Hackers exploit Bin Laden death on Facebook !

Hackers exploit Bin Laden death on Facebook ! A tip to the newbies starting out, reads a post from a man at the Black Hat World forums, now's a good time to make some money out of Bin Laden's death. The news is awash with reports about Bin Laden shot by the US and then buried at sea. Twitter and...

Bin Laden's Hideout On Google The Whole Time?

UPDATED: Osama bin Laden may have been the U.S.’s most wanted fugitive for the last decade, but his comfortable mansion on the outskirts of Islamabad, Pakistan was there for all to see – providing they had Google Earth and knew where to look. In the wake of U.S. President Barack Obama’s surprise...

Web, E-mail and Facebook Exploit Osama bin Laden's Death

Spammers have jumped on Sunday’s news of the death of Osama bin Laden, lacing new spam e-mail runs and search engine optimized Web pages with news of the Al Qaeda chief’s demise at the hands of U.S. special forces. Researchers at Kaspersky Lab began detecting spam e-mail campaigns and search engi...

Oracle fcgi-bin/echo Cross Site Scripting

Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...

XSS in Oracle default fcgi-bin/echo

Long ago, I wrote about an XSS vulnerability in Oracle fcgi-bin/echo : http://lists.grok.org.uk/pipermail/full-disclosure/2010-October/076794.html http://www.securityfocus.com/archive/1/514181 The issue may now be fixed in the latest versions of Oracle web servers:...

PT-2011-1681

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

CVE-2010-4732: Improper Control of Generation of Code

cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to execute arbitrary code by using a config.html 2.conf action to...

CVE-2010-4730: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in cgi-bin/read.cgi in WebSCADA WS100 and WS200, Easy Connect EC150, Modbus RTU - TCP Gateway MB100, and Serial Ethernet Server SS100 on the IntelliCom NetBiter NB100 and NB200 platforms allows remote authenticated administrators to read arbitrary files via a...

PT-2011-1680

Name of the Vulnerable Software and Affected Versions WebSCADA WS100 and WS200 versions affected versions not specified Easy Connect EC150 versions affected versions not specified Modbus RTU - TCP Gateway MB100 versions affected versions not specified Serial Ethernet Server SS100 versions affecte...

CVE-2011-0923

The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...

CVE-2011-0923: Improper Input Validation

The client in HP Data Protector does not properly validate EXECCMD arguments, which allows remote attackers to execute arbitrary Perl code via a crafted command, related to the "local bin directory."...

PT-2011-2766

Name of the Vulnerable Software and Affected Versions HP Data Protector affected versions not specified Description The issue is related to the improper validation of EXEC CMD arguments by the client in HP Data Protector. This allows remote attackers to execute arbitrary Perl code via a crafted...