‘DarkLeaks’ Black Market — Anonymously Selling Secrets for Bitcoins

An all new anonymous online underground black market website, DarkLeaks, has been introduced on the Internet where Whistleblowers, blackmailers, hackers and any individual can trade/sell sensitive and valuable data/secrets anonymously in exchange for Bitcoin payments. DarkLeaks is a decentralized...

Inside nls_933w.dll, the Equation APT Persistence Module

CANCUN – The names called out like beacons from the screen: Samsung; Seagate; Western Digital; Hitachi; Maxtor. Hardware makers were in the crosshairs of the Equation APT group and it was perhaps the worst possible scenario imagined by researchers looking at the frightening and extensive storehou...

Rig Exploit Kit Source Code Leaked

A spitting match between developers of the Rig Exploit Kit and one of its resellers resulted in a partial leak of the kit’s source code in a hacker forum. Rig is less than a year old and is spread primarily in malvertising campaigns, pushing Flash, Java and Microsoft Silverlight exploits; some...

Cisco IOS Measurement, Aggregation, and Correlation Engine Denial of Service Vulnerability

A vulnerability in the Measurement, Aggregation, and Correlation Engine MACE feature of Cisco IOS Software could allow an unauthenticated, remote attacker to cause an affected device to reload. The vulnerability is due to a race condition between process switching and Cisco Express Forwarding...

Researchers: PlugX More Prominent Than Ever

Existing in some form since 2008, the popular remote access tool PlugX has as notorious a history as any malware, but according to researchers the tool saw a spike of popularity in 2014 and is the go-to malware for many adversary groups. Many attacks, especially those occurring during the latter...

February 2015 Updates

Today, as part of Update Tuesday, we released nine security bulletins– three rated Critical and six rated Important in severity, to address 56 unique Common Vulnerabilities and Exposures CVEs in Microsoft Windows, Microsoft Office, Internet Explorer, and Microsoft Server software. We encourage yo...

KLA10474 Multiple vulnerabilities in Microsoft products

Multiple critical vulnerabilities have been found in Microsoft products. Malicious users can exploit these vulnerabilities to fain privileges, bypass security restrictions or cause denial of service. Below is a complete list of vulnerabilities 1. A double-free and other unknown vulnerability can ...

Microsoft Windows Kernel Font Driver CVE-2015-0060 Denial of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability that occurs in the Windows kernel. An attacker can exploit this issue to cause the system to stop responding, denying service to legitimate users. Technologies Affected Microsoft Windows 7 for 32-bit Systems SP1...

Cryptowall 3.0 Slims Down, Removes Exploits From Dropper

A slimmed down version of Cryptowall is in circulation, and this one contains no built-in exploits, confirming a growing trend that most ransomware will be spread almost exclusively via exploit kits. Kits such as Angler, Nuclear, and most recently Hanjuan, have been busy incorporating Flash...

ThinkSAAS最新版漏洞打包

简要描述： SQL注入+文件包含+... 向xfkxfk牛学习，多个漏洞打包，希望走一个大厂商流程。 详细说明： 最新版中tsUrlCheck函数引发了多个漏洞 \thinksaas\tsFunction.php function tsUrlCheck$parameter $parameter = trim$parameter; //echo $parameter;exit; $arrStr = strsplit$parameter; $strOk = '%-1234567890abcdefghijklmnopqrstuvwxyz'; foreach $arrStr as $key =...

TurboMail /mailmain 弱密码漏洞

No description provided by source. !/usr/bin/env python coding: utf-8 import re import random import threading from pocsuite.net import req from pocsuite.poc import POCBase, Output from pocsuite.utils import register class MyThreadthreading.Thread: def initself,func,args,name='':...

openSUSE Security Update : flash-player (openSUSE-SU-2015:0150-1)

Adobe Flash Player was updated to 11.2.202.440 bsc914463, APSA15-01, CVE-2015-0311. More information can be found on https://helpx.adobe.com/security/products/flash-player/apsa15-01.html An update of flashplayer executable binary for i386 is currently not available. Disabled! %NASLMINLEVEL 70300 ...

CapTipper - Malicious HTTP traffic explorer tool

CapTipper is a python tool to analyze, explore and revive HTTP malicious traffic. CapTipper sets up a web server that acts exactly as the server in the PCAP file, and contains internal tools, with a powerful interactive console, for analysis and inspection of the hosts, objects and conversations...

Adobe Auto-Update Flash Player Zero Day Patch

Adobe on Saturday began patching a zero-day vulnerability in Flash Player, exploits for which have been included in the notorious Angler Exploit Kit. This is the second of two previously unreported critical flaws in the software that have been patched in the last five days. Adobe last Thursday se...

Flash Player <= 16.0.0.287 Unspecified Code Execution (APSA15-01 / APSB15-03)

According to its version, the Adobe Flash Player installed on the remote Windows host is equal or prior to 16.0.0.287. It is, therefore, affected by the following vulnerabilities : - A use-after-free error exists that allows an attacker to crash the application or execute arbitrary code...

Flash Player <= 16.0.0.257 Information Disclosure (APSB15-02)

According to its version, the installation of Adobe Flash Player installed on the remote Windows host is equal or prior to 16.0.0.257. It is, therefore, affected by a memory leak that can allow bypassing of memory randomization mitigations, aiding in further attacks. %NASLMINLEVEL 70300 C Tenable...

MS KB3033408: Update for Vulnerabilities in Adobe Flash Player in Internet Explorer

The remote host is missing KB3033408. It is, therefore, affected by a memory leak that can allow bypassing of memory randomization mitigations, aiding in further attacks. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid80948; scriptversion"1.13";...

Exploit Pack - Open Source Security Project for Penetration Testing and Exploit Development

Exploit Pack, is an open source GPLv3 security tool, this means it is fully free and you can use it without any kind of restriction. Other security tools like Metasploit, Immunity Canvas, or Core Iimpact are ready to use as well but you will require an expensive license to get access to all the...

KLA10447 Multiple vulnerabilities in Java SE

Multiple serious vulnerabilities have been found in Oracle products. Malicious users can exploit these vulnerabilities to cause loss of integrity, denial of service and obtain sensitive information. Below is a complete list of vulnerabilities 1. Vectors relsted to Swing, Hotspot, JAX-WS,...

ICS-CERT Advisory Warns of Schneider, Emerson Vulnerabilities

Industrial HMI software from Schneider Electric has been updated to patch a buffer overflow vulnerability that could be exploited by a remote attacker. The buffer overflow vulnerability was found in the Wonderware InTouch Access Anywhere Server v10.6 and v11. The server is human machine interface...