New Linux Distro Promoted as Anonymous-OS

A new Ubuntu Linux distribution is being marketed as “Anonymous-OS” and comes pre-loaded with tools for hacking and protecting anonymity online. However, it is unclear whether the new operating system was created by the anarchic hacking group, or even has its endorsement. Anonymous-OS Version 0.1...

Wordpress Kish Guest Posting Plugin 1.0 (uploadify.php) Unrestricted File Upload Vulnerability

-------------------------------------------------------------------------------- Wordpress Kish Guest Posting Plugin 1.0 uploadify.php Unrestricted File Upload -------------------------------------------------------------------------------- author............: Egidio Romano aka EgiX...

LibGuides Cross Site Scripting

Exploit Title: LibGuides "tag search" Cross Site Scripting Date: 6.02.2012 Author: Sony Software Link: http://www.springshare.com/libguides/ Google Dorks: inurl:searchtags.php?iid= or intext:Powered by Springshare Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

zFTPServer Suite 6.0.0.52 - 'rmdir' Directory Traversal

!/usr/bin/perl Advisory: zFTPServer Suite 6.0.0.52 'rmdir' Directory Traversal Author: Stefan Schurtz Contact: [email protected] Affected Software: Successfully tested on zFTPServer Suite 6.0.0.52 Vendor URL: http://www.zftpserver.com/ Vendor Status: fixed CVE-ID: CVE-2011-4717 PoC-Version: 0....

MIT Server Tangled Up In Drive-by Download Campaign

A server at the Massachusetts Institute of Technology MIT was being used to serve up attacks in a coordinated drive-by download campaign, according to research done by anti-virus firm Bitdefender. According to a post on their Malware City blog, a server named CSH-2.MIT.EDU is hosting a script tha...

Linux Kernel 2.6.17 x86|i386 Local root Exploit

Exploit for linux platform in category local exploits 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0...

X.Org xorg 1.4 < 1.11.2 - File Permission Change

/ xchmod.c -- Xorg file permission change vulnerability PoC Author: vladz http://vladz.devzero.fr Date: 2011/12/15 Software: www.x.org Version: Xorg 1.4 to 1.11.2 in all configurations. Xorg 1.3 and earlier if built with the USECHMOD preprocessor identifier Tested on: Debian 6.0.2 up to date with...

UNESCO E-platform domain got hacked by Fatal Error Crew

UNESCO E-platform domain got hacked by Fatal Error Crew The E-Platform domain of one of the Biggest Organisation United Nations Educational, Scientific and Cultural Organization UNESCO got hacked and defaced by Fatal Error Crew hackers . Mirror of hack is available here...

PHP 5.3.8 open_basedi() Bypasser

Exploit for linux platform in category local exploits email protected /...

Microsoft Office Word 2007 Denial of Service (Memory Corruption?) (SH-012-20110922)

No description provided by source. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ?php ------------------------------------------------------------------------------ Microsoft Office Word 2007 Denial of Service Memory Corruption? author: shinnai mail: shinnaiatautisticidotorg site:...

[SECURITY] Fedora 16 Update: kturtle-4.7.1-2.fc16

Educational Programming Environment...

[SECURITY] Fedora 16 Update: marble-4.7.1-1.fc16

Marble is a Virtual Globe and World Atlas that you can use to learn more about Earth: You can pan and zoom around and you can look up places and roads. A mouse click on a place label will provide the respective Wikipedia article. Of course it's also possible to measure distances between locations...

AdvancedDvdPlayer Local Exploit

Exploit for windows platform in category local exploits / Not so usual exploit method Local Heapoverflow exploit An Advanced Exploit For An AdvancedDvdPlayer ; 02-10-2011 AdvancedDvdPlayer 3.03 Download Link : http://download.cnet.com/Advanced-DVD-Player/3000-21394-10310889.html?tag=mncol;3 Teste...

Polipo 1.0.4.1 - POST/PUT HTTP Header Processing Denial of Service

source: https://www.securityfocus.com/bid/49908/info Polipo is prone to a denial-of-service vulnerability. Remote attackers can exploit this issue to cause the application to crash, denying service to legitimate users. Polipo 1.0.4.1 is vulnerable; other versions may also be affected...

UNITED Security Summit 2011, 19-20 September - San Francisco

UNITED Security Summit 2011 , 19-20 September - San Francisco The UNITED Security Summit is focused on innovation and collaboration in the security community. Bringing together security decision makers, practitioners, commercial vendors, open source projects and academia, the Summit highlights...

UNITED Security Summit 2011, 19-20 September - San Francisco

UNITED Security Summit 2011, 19-20 September - San Francisco The UNITED Security Summit is focused on innovation and collaboration in the security community. Bringing together security decision makers, practitioners, commercial vendors, open source projects and academia, the Summit highlights...

ATutor 2.0.2 - Multiple Vulnerabilities

ATutor 2.0.2 - Multiple Vulnerabilities ATutor 2.0.2 Multiple Remote Vulnerabilities SQLi/XSS/PD Vendor: ATutor Inclusive Design Institute Product web page: http://www.atutor.ca Affected version: 2.0.2 build r10589 Summary: ATutor is an Open Source Web-based Learning Content Management System LCM...

300 Military and Government Accounts leaked by P0keu

300 Military and Government Accounts leaked by P0keu In a tweet , P0keu posted a link to PasteBin which appears to be e-mail accounts and passwords of 300 military and government accounts used the same password as their actual e-mails, then the contents of their e-mail account will also be expose...

WLAN Security Megaprimer DVD Released - 10+ hours of Wi-Fi Hacking and Pwnage !

WLAN Security Megaprimer DVD Released - 10+ hours of Wi-Fi Hacking and Pwnage ! With over 40+ HD videos containing 12+ hours of Wireless Ownage, this DVD weighs in at around 4.2 Gigabytes! SecurityTube.net just released a 4.2 GB DVD containing over 40+ HD quality videos of their WLAN Security...

UP Rajarshi Tandon Open University Allahabad Website Hacked

UP Rajarshi Tandon Open University Allahabad Website Hacked Website of UP Rajarshi Tandon Open University Allahabad Hacked last night. Link https://www.uprtou.ac.in/ Hacker wrote message on the site "SECURE YOUR WEBSITE.. OR ELSE GET HACKED BY SOMEONE...The Education system in India sucks.. Till...