7202 matches found
This Simple Trick Requires Only Your Phone Number to Hack your Email Account
We all have been receiving spam phone calls and messages on almost daily basis from scammers who want to pilfer your money and personal information, but a new type of social engineering hack that makes use of just your mobile number to trick you is a little scarier. Security firm Symantec is...
OPM Breach Dates Back to December
The attack on the Office of Personnel Management that was disclosed earlier this month began as early as December 2014 and likely was the end result of a social engineering attack that enabled the hackers to gain valid user credentials and move around OPM’s network. During a hearing on Capitol Hi...
Content Construction Kit (CCK) - Less Critical - Open Redirect - SA-CONTRIB-2015-126
The Content Construction Kit CCK project is a set of modules that allows you to add custom fields to nodes using a web browser. CCK uses a "destinations" query string parameter in URLs to redirect users to new destinations after completing an action on a few administration pages. Under certain...
FiverrScript CSRF Vulnerability (Add New Admin) Vulnerability
Exploit for php platform in category web applications Exploit Title: FiverrScript CSRF Vulnerability add New admin Author: Mahmoud Gamal @Zombiehelp54 Google Dork: intext:Powered by FiverrScript Date: 10/06/2015 Exploit Author: Scriptolution Vendor Homepage: http://scriptolution.com Software Link...
[SECURITY] Fedora 22 Update: freecad-0.15-4.fc22
FreeCAD is a general purpose Open Source 3D CAD/MCAD/CAx/CAE/PLM modeler, a imed directly at mechanical engineering and product design but also fits a wider range of uses in engineering, such as architecture or other engineering specialties. It is a feature-based parametric modeler with a modular...
Reverse Engineering Malicious Software: REMnux Distro
REMnux v6 – A Linux Toolkit for Reverse-Engineering and Analyzing Malware – has been released. REMnux v6 updates the tools that were present in the earlier revisions of the distro and introduces several new ones. Moreover, it implements major architectural changes behind the scenes to allow REMnu...
PentestBox - Portable Penetration Testing Distribution for Windows Environments
PentestBox is not like other Penetration Testing Distributions which runs on virtual machines. It is created because more than 50% of penetration testing distributions users uses windows. So it provides an efficient platform for Penetration Testing on windows platform. Check out demo video: Easy ...
[SECURITY] [DLA 236-1] wordpress security update
Package : wordpress Version : 3.6.1+dfsg-1deb6u6 CVE ID : CVE-2014-9031 CVE-2014-9033 CVE-2014-9034 CVE-2014-9035 CVE-2014-9036 CVE-2014-9037 CVE-2014-9038 CVE-2014-9039 CVE-2015-3438 CVE-2015-3439 CVE-2015-3440 Debian Bug : 783347 783554 770425 In the Debian squeeze-lts version of Wordpress,...
From the client game bug looking of security risks-vulnerability warning-the black bar safety net
Although the now app development a growing trend in web applications, large-scale software also makes extensive use of the existing framework with the existing frameworks and engines improve, the vast majority of security issues have been resolved. But encountered some customization needs,...
Третья конференция r0 Crew
Всем доброго времени суток! Рады сообщить, что 23.05.2015 состоится третья конференция форума reverse4you.org R0-Crew Conference. Основная тематика конференции: Реверс-инжиниринг. Низкоуровневое программирование. Поиск уязвимостей. Место проведения осталось прежним, это учебный центр «Славутич»...
Penn State Offline Following Advanced Two-Year Cyberattack
Penn State University President Eric J. Barron announced Friday that the university disconnected its networks from the public Internet after sustaining an intrusion into the College of Engineering that had lasted longer than two years. It will be a matter of days before Penn State brings its...
CSRF/XSS In Ultimate Profile Builder by CMSLive Wordpress Plugin
================================================================ CSRF/Stored XSS Vulnerability in Ultimate profile Builder Plugin ================================================================ . contents:: Table Of Content Overview ======== Title :CSRF and Stored XSS Vulnerability in Ultimate...
CSRF/XSS In Manage Engine Asset Explorer
=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...
DidierStevensSuite
It is an offensive tool for reverse-engineering and malware anal...
Rockwell Automation Patches Buffer Overflow in ICS App
There is a stack buffer overflow in a Rockwell Automation application that’s used to enable communications in industrial control applications used in manufacturing, energy, water,and other environments. The vulnerability is in the RSLinx Classic product and it can be used to crash the application...
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery
=============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer =============================================================================== . contents:: Table Of Content Overview ======== Title :CSRF/Stored XSS...
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery
Manage Engine Asset Explorer 6.1.0 Build: 6110 - Cross-Site Request Forgery =============================================================================== CSRF/Stored XSS Vulnerability in Manage Engine Asset Explorer ===============================================================================...
Pirelli Router P.DG-A4001N WPA Key Reverse Engineering Rev 2
!/usr/bin/env python -- coding: utf-8 -- ''' @license: GPLv3 @author : Eduardo Novella @contact: ednoloainf.upv.es @twitter: @enovella ----------------- Target : ----------------- Vendor : ADB broadband Pirelli Router : Model P.DG-A4001N ISP : Arnet Telecom Argentina, MEO Portugal Possible-target...
Debian Security Advisory DSA 3250-1 (wordpress - security update)
Multiple security issues have been discovered in Wordpress, a weblog manager, that could allow remote attackers to upload files with invalid or unsafe names, mount social engineering attacks or compromise a site via cross-site scripting, and inject SQL commands. More information can be found in t...
