aidSQL: A Tool to Find Vulnerable Spots in Web Sites !

aidSQL is a PHP application provided for detecting security holes in your websites. It is a modular application, meaning that you can develop your very own plugins for SQL injection detection & exploitation. Sample usage of aidsql: ./aidSQL --url=www.sample123.com We find it similar to nikto,...

Lolz ! I've won three million Euros from Bill Gates !

Excuse me for typing breathlessly, faithful Naked Security reader, but I have some incredible news to share. I have just been informed that I have won three million Euros from none other than the Bill Gates Foundation! I had no idea that the Bill and Melinda Gates Foundation, which normally fight...

UConn Co-op website hacked !

Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...

Millions of Honda/Acura owners affected by hacked Honda database !

The Japanese motor company, Honda, today issued an alert to U.S. customers concerning a security breach resulting from a hacked database. The database that was managed by a third-party marketing group contained confidential information, including names of car owners, personal e-mail addresses, an...

315 Websites hacked By Tunisian Hacker - The 077 ( HamDi HaCKer )

315 Websites hacked By Tunisian Hacker - The 077 HamDi HaCKer Websites Hacked : Full List here - Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Adaptive Security Analyzer IIS : A Tool to Protect Windows Based Web Servers !

Adaptive Security Analyzer IIS or the ASA IIS protects Windows-based web servers from known and unknown vulnerabilities like Directory Traversal, Buffer Overflow, Parser Evasion, High-bit Shellcode, Remote Data Services, In addition to the above, it also protects them from various types of intern...

Windows zero-day flaw bypasses UAC !

A new zero-day attack against Windows, capable of bypassing the User Access Control protections introduced in Windows Vista and designed to prevent malware from gaining administrative access without user authorisation, has been discovered in the wild. The proof-of-concept implementation of the...

Carriers Enhance Mobile Security to Combat Attacks and Breaches

Carriers, developers, and phone makers are rolling out new services and features to protect mobile devices from malicious attacks and data breaches. As people increasingly use smartphones for email, banking, and document access, the wireless industry is addressing mobile device security. Accordin...

FBI Investigates Gawker Media Hack Claimed by Gnosis

The FBI is investigating the massive hack of Gawker Media. Reports indicate that FBI agents met with Gawker Media CEO Nick Denton on Monday following the hacking incident, which was claimed by a group called Gnosis. The Gawker website was paralyzed, temporarily forcing the gossip site to stop...

Free phone Calls To Land-line And Cellphones Anywhere In the World

There have been many services offering free international VOIP calls and most of them rely upon ad-supported funding to get things going, most of such services have closed there doors but there are still a few left. One such service Evaphone allows users to enjoy free international PC-To-Phone...

Nmap for Android Phones !!

droidmap is an android application for root users that implements some functions of NMAP in a GUI in Android. This program comes with installer scripts for the installation of the required NMAP application that must be run to install the program to your phone. Please note that the installation...

The OWASP HTTP Post Tool ! Download Now

The OWASP HTTP Post Tool allows you to test your web applications to ensure its stability from HTTP GET and HTTP POST attacks. This tool was programmed by the author to over come the short comings of other HTTP attack tools such as Slowloris and PyLoris. In other words this QA tool was created to...

CYB3R_SWATI Hack two more sites Today...

CYB3RSWATI Hack two more sites Today... Links: https://www.liuhao.gov.cn/swati.html Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Videoznaika.ru Hacked by N3TWORM AHG

Videoznaika.ru Hacked by N3TWORM AHG Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Vulnerability Broker Draws Line in Disclosure Sand

Looking to put pressure on software vendors who procrastinate on fixing security flaws, the world’s biggest broker of vulnerability data is drawing a line in the sand. Starting August 4, TippingPoint’s Zero Day Initiative ZDI will enforce a six-month deadline for patches on all vulnerabilities...

kernel: O_EXCL creates on NFSv4 are broken

NFSv4 in the Linux kernel 2.6.18, and possibly other versions, does not properly clean up an inode when an OEXCL create fails, which causes files to be created with insecure settings such as setuid bits, and possibly allows local users to gain privileges, related to the execution of the...

Cybercriminals hijack Twitter trending topics to serve malware

From ZDNet Dancho Danchev A currently ongoing malware attack across Twitter is abusing the momentum offered by Twitter’s trending topics in order to trick users into visiting bogus exclusive video sites and infect them with malware. The campaign, spreading since last week, is relying on a growing...

iDefense Security Advisory 12.09.08: Microsoft Internet Explorer 5.01 EMBED tag Long File Name Extension Stack Buffer Overflow Vulnerability (iDefense Exclusive)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iDefense Security Advisory 12.09.08 http://labs.idefense.com/intelligence/vulnerabilities/ Dec 09, 2008 I. BACKGROUND Internet Explorer is a graphical web browser developed by Microsoft Corp. that has been included with Microsoft Windows since 1995. F...

PT-2007-6496 · Microsoft · Activesync

Name of the Vulnerable Software and Affected Versions: Microsoft ActiveSync version 4.1 Description: The issue concerns the use of weak encryption, specifically XOR obfuscation with a fixed key, when sending the user's PIN/Password over the USB connection from the host to the device. This might...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...