7016 matches found
User Friendly SVN 'login' Cross Site Scripting Vulnerability
User Friendly SVN is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
DEF CON SOHOpelessly Broken Wireless Router Hacking Contest
Home and small office wireless routers are feature-rich networking devices, providing consumers and mom-and-pop shops with much more than an Internet gateway. Some, for example, have a print server function, while others store personal files—and very few are secure out of the box. Hackers and...
Threat Outbreak Alert RuleID10801: Email Messages Distributing Malicious Software on July 25, 2014
Medium Alert ID: 35047 First Published: 2014 July 25 13:56 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID10801 may contain the following files: Name | Siz...
Exploit-Selling Firm Kept Internet Explorer Zero-Day Vulnerability Hidden for 3 Years
A French information security company VUPEN has recently disclosed that it held onto a serious Internet Explorer IE vulnerability for at least three years before revealing it at the Pwn2Own hacker competition held in March this year. The critical zero-day vulnerability affected versions 8, 9, 10...
Researchers Demonstrate Zero-Day Vulnerabilities in Tails Operating System
The critical zero-day security flaws, discovered in the privacy and security dedicated Linux-based Tails operating system by the researcher at Exodus Intelligence that could help attackers or law enforcements to de-anonymize anyone’s identity, actually lie in the I2P software that’s bundled with...
Warning — Zero-Day Vulnerabilities Identified in Tails Operating System
The critical zero-day security flaws has been discovered in the privacy and security dedicated Linux-based operating system “Tails” that could be used by an attacker to unmask your identity. Tails, which is been used and recommended by the global surveillance whistleblower Edward Snowden to remai...
VUPEN Security Research - Microsoft Windows "DirectShow" Privilege Escalation Vulnerability (Pwn2Own 2014)
VUPEN Security Research - Microsoft Windows "DirectShow" Local Privilege Escalation Vulnerability Pwn2Own 2014 Website : http://www.vupen.com Twitter : http://twitter.com/vupen I. BACKGROUND --------------------- "Microsoft Windows is a series of software operating systems and graphical user...
How Russian Hackers Placed "Digital Bomb" Into the NASDAQ
Four years ago, NASDAQ servers were compromised by Russian hackers, who were somehow able to insert a "digital bomb" into the systems of NASDAQ stock exchange, which would have been able to cause several damage to the computer systems in the stock market and could bring down the entire structure ...
Apache 2.4.7 httpd mod_status Heap Buffer Overflow Vulnerability
Exploit for linux platform in category dos / poc URL: http://svn.apache.org/r1610499 Log: Merge 1610491 from trunk: SECURITY CVE-2014-0226: Fix a race condition in scoreboard handling, which could lead to a heap buffer overflow. Thanks to Marek Kroemeke working with HP's Zero Day Initiative for...
Project Zero - A Team of Star-Hackers Hired by Google to Protect the Internet
Today Google has publicly revealed its new initiative called “Project Zero,” a team of Star Hackers and Bug Hunters with the sole mission to improve security and protect the Internet. A team of superheroes in sci-fi movies protect the world from Alien attack or bad actors, likewise Project Zero i...
Announcing Project Zero
Posted by Chris Evans, Researcher Herder Security is a top priority for Google. We’ve invested a lot in making our products secure, including strong SSL encryption by default for Search, Gmail and Drive, as well as encrypting data moving between our data centers. Beyond securing our own products,...
EFF Sues NSA, ODNI Over Zero-Day Disclosure Processes
The Electronic Frontier Foundation wants a peek behind the curtain of the government’s Vulnerabilities Equities Process. The advocacy group on Tuesday filed a Freedom of Information Act FOIA lawsuit against the National Security Agency and the Office of the Director of National Intelligence hopin...
Wordpress Count per Day Plugin 3.2.3 XSS Vulnerability
No description provided by source. Exploit Title: wordpress Count per Day Cross Site Scripting Vulnerability Google Dork:inurl:/wp-content/plugins/count-per-day Date: 08/24/2012 Author: Crim3R Version 3.2.3 Vendor Home : http://downloads.wordpress.org/plugin/count-per-day.3.2.3.zip Tested on: all...
Wordpress TimThumb 2.8.13 WebShot - Remote Code Execution (0-day)
No description provided by source...
Linux Kernel < 2.6.20.2 - IPv6_Getsockopt_Sticky Memory Leak PoC
No description provided by source. / Linux Kernel IPV6GetsockoptSticky Memory Leak Proof Of Concept dreyer 07-2007 Osu, Tatakae, Sexy Pandas! Dumps to stdout the memory mapped between INI and END. CVE: CVE-2007-1000 BID: 22904 Affected: Linux Kernel 2.6.20.2...
DESlock+ <= 3.2.6 - Local Kernel ring0 link list zero SYSTEM Exploit
No description provided by source. / deslock-list-zero-v2.c Copyright c 2008 by [email protected] DESlock+ = 3.2.6 local kernel ring0 link list zero SYSTEM exploit by mu-b - Fri 28 Dec 2007 - Tested on: DLMFENC.sys 1.0.0.26, DLMFDISK.sys 1.2.0.27 - Microsoft Windows 2003 SP2 - Microsoft Windows...
Flatnuke <= 2.7.1 (level) Remote Privilege Escalation Exploit
No description provided by source. !/usr/bin/env perl Flatnuke = 2.7.1 level Privilege Escalation 0-day Exploit Description ----------- Flatnuke contains one flaw that may allow a user to become administrator. The issue is due to 'sections/noneLogin/section.php' script not properly sanitizing use...
Joomla Joaktree Component 1.0 - SQL Injection Vulnerability
No description provided by source. / ! Joomla! Joaktree component SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information +...
CA Internet Security Suite 2010 - KmxSbx.sys Kernel Pool Overflow (0day)
No description provided by source. / Exploit Title: CA Internet Security Suite 2010 KmxSbx.sys Kernel Pool Overflow 0-day Exploit Date: 2010-11-28 Author: Nikita Tarakanov CISS Research Team Software Link: http://shop.ca.com/ca/products/internetsecurity/internetsecuritysuite.asp Version: up to...
WordPress Count per Day Plugin 3.2.5 (counter.php) - XSS Vulnerability
No description provided by source. !/usr/bin/ruby Exploit Title: WordPress Count per Day 3.2.5 CSRF Google Dork: inurl:/wp-content/plugins/count-per-day Date: 18.03.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...