info.vmware.com Cross Site Scripting

Advisory: info.vmware.com – Cross-Site Script Vulnerability XSS Advisory ID: VMware Support Request 14479234605 Author: Roberto Garcia Affected Software: Successfully tested on info.vmware.com Vendor URL: htt://info.vmware.com Vendor Status: informed ========================== Vulnerability...

'Anonymous Philippines' hacks Hundreds of Chinese Government Websites

A Philippine Hacker group claiming ties with the hacktivist collective Anonymous defaced early Monday several Chinese Government websites. "Anonymous Philippines" claimed responsibility for defacing more than 200 Chinese websites in retaliation for Beijing's aggressive actions in the West...

Iranian Ajax Security Team targets US Defense Industry

The Iranian hacking group, which calls itself the “Ajax Security Team”, was quite famous from last few years for websites defacement attacks, and then suddenly they went into dark since past few months. But that doesn't mean that the group was inactive, rather defacing the websites, the group was...

KALI Linux Mailing List Website Hacked Using Heartbleed Vulnerability

When it comes to Digital Forensics, Penetration and Security testing, we mostly relies on Kali Linux distribution also known as Backtrack, which is designed for security professionals and packed with more than 300 security testing tools. But Today, Mailing List sub-domain of Kali Linux get hacked...

Oracle Demantra 12.2.1 - Persistent Cross-Site Scripting

Details: The TaskSender area is vulnerable to a stored cross-site scripting vulnerability. Impact: An attacker could exploit this flaw to get active HTML or script code executed in an authenticated user’s browser. Cross-site Scripting may be used to perform attacks such as session hijacking by...

Bangladeshi Hackers defaced BCCI website after Board approves ICC takeover proposal

Apart from various Government websites falling victim to Hacking attacks, the latest to be targeted by hackers belongs to the world's richest cricket Board, the Board of Control for Cricket in India BCCI. Late night on 26th January 65th Republic Day of India, the official website of Indian...

Syrian Electronic Army kept their promise; Microsoft's Office blog hacked

Yesterday Night Microsoft has faced another targeted attack by the Syrian Electronic Army SEA, a group supposed to be aligned with Syrian President Bashar al-Assad. The SEA group is popular for its advance phishing attack and using the same technique they also hacked into the Official Twitter...

MIT University website defaced by Anonymous hackers in honor of Aaron Swartz

Today is January 11, 2014 and the last year on the same day a 26-year-old, young hacker, Reddit cofounder and the digital Activist, Aaron H. Swartz committed suicide. He found dead in his Brooklyn, New York apartment, where he had hanged himself.Swartz was indicted by a federal grand jury in July...

Weak Password Used to Access Hypervisor, Deface OpenSSL Site

The OpenSSL Project blames a weak password used at its hosting provider for its recent site defacement. The organization that hosts the ubiquitous open source encryption implementation updated a notice on its website yesterday informing users that attackers used the weak credential to gain contro...

OpenSSL Hacked and Defaced

UPDATE: A Turkish hacking group compromised and defaced over the weekend the website of OpenSSL, an open-source SSL and TLS encryption implementation resource. The website Zone-H is hosting a mirror of the defacement, in which the hacking group responsible for the attack posted the following...

Rise in website Defacement attacks by Hackers around the World

Last week we noticed a rise in cyber attacks particularly - website Defacement attacks on many governments and organizations of different countries by the hackers around the world. Targeted countries include Singapore, Mexico, Philippines, Australia, Egypt, United States, Syria and many more. Out...

Rise in website Defacement attacks by Hackers around the World

Last week we noticed a rise in cyber attacks particularly - website Defacement attacks on many governments and organizations of different countries by the hackers around the world. Targeted countries include Singapore, Mexico, Philippines, Australia, Egypt, United States, Syria and many more. Out...

Critical vulnerability in Twitter allows attacker to upload Unrestricted Files

Security expert Ebrahim Hegazy, Cyber Security Analyst Consultant at Q-CERT, has found a serious vulnerability in Twitter that allows an attacker to upload files of any extension including PHP. When an application does not validate or improperly validates file types before uploading files to the...

12-year-old Boy admits to hacking major Government sites for aiding Anonymous Hackers

12-year-old Canadian has pleaded guilty to breaking into multiple major government and police websites in the name of the hacker collective Anonymous. Surprisingly, this Fifth Grade student wreaked computer havoc during the Quebec student uprising in 2012, traded pirated information to Anonymous...

12-year-old Boy admits to hacking major Government sites for aiding Anonymous Hackers

12-year-old Canadian has pleaded guilty to breaking into multiple major government and police websites in the name of the hacker collective Anonymous. Surprisingly, this Fifth Grade student wreaked computer havoc during the Quebec student uprising in 2012, traded pirated information to Anonymous...

Qatar is Down ! Syrian Electronic Army hijacks major Qatar websites

The Syrian Electronic Army SEA is at it again. The hacktivist group, who are known to back Syrian President Bashar al-Assad, has hacked many high profile Qatar based websites, including the Google, Facebook, Aljazeera and Government - Military websites. Starting at about 4:25 am GMT 5:30+, the...

Qatar is Down ! Syrian Electronic Army hijacks major Qatar websites

The Syrian Electronic Army SEA is at it again. The hacktivist group, who are known to back Syrian President Bashar al-Assad, has hacked many high profile Qatar based websites, including the Google, Facebook, Aljazeera and Government - Military websites. Starting at about 4:25 am GMT 5:30+, the...

Antivirus firm ESET and BitDefender website Hijacked by Pro-Palestinian Hackers

A pro-Palestinian hacktivist group 'KDMS Team', who recently managed to briefly hijack the Metasploit website of security firm Rapid7 and become popular after Hacking World's largest Web Hosting Network Leaseweb website and antivirus vendors AVG, Avira as well as mobile messaging service WhatsApp...

Antivirus firm ESET and BitDefender website Hijacked by Pro-Palestinian Hackers

A pro-Palestinian hacktivist group 'KDMS Team', who recently managed to briefly hijack the Metasploit website of security firm Rapid7 and become popular after Hacking World's largest Web Hosting Network Leaseweb website and antivirus vendors AVG, Avira as well as mobile messaging service WhatsApp...

Metasploit website Hacked just by sending a spoofed DNS change request via Fax to Domain Registrar

A group of Pro-Palestine hackers 'KDMS Team' today has been able to hijack the Metasploit website simply by sending a fax and hijacked their DNS records. Rapid7 is a leading Security Company and Creator of world's best penetration testing software called 'Metasploit'. The company confirmed via...