Famous Chollima deploying Python version of GolangGhost RAT

In May 2025, Cisco Talos identified a Python-based remote access trojan RAT we call "PylangGhost," used exclusively by a North Korean-aligned threat actor. PylangGhost is functionally similar to the previously documented GolangGhost RAT, sharing many of the same capabilities. In recent campaigns,...

North Korean Hackers Target Developers with Malicious npm Packages

Threat actors with ties to North Korea have been observed publishing a set of malicious packages to the npm registry, indicating "coordinated and relentless" efforts to target developers with malware and steal cryptocurrency assets. The latest wave, which was observed between August 12 and 27,...

famous-design.com Cross Site Scripting vulnerability OBB-3500979

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

famous-comics.com Cross Site Scripting vulnerability OBB-3299957

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

famous-alumni.com Cross Site Scripting vulnerability OBB-2691040

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Friday Squid Blogging: COVID Relief Funds

A town in Japan built a giant squid statue with its COVID relief grant. One local told the Chunichi Shimbun newspaper that while the statue may be effective in the long run, the money could have been used for "urgent support," such as for medical staff and long-term care facilities. But a...

SQL Injection Vulnerability in Website Building System of Famous Torch Enterprise Management (Shanghai) Co.

Ltd, founded in 2005, is a domestic enterprise IT application service operator. A SQL injection vulnerability exists in the website building system of Famous Torch Enterprise Management Shanghai Co. Ltd, which can be exploited by attackers to obtain sensitive information from the database...

SQL Injection Vulnerability in Website Building System of Famous Torch Enterprise Management (Shanghai) Company Limited (CNVD-2020-23814)

Ltd. is a technology-based company that provides Internet application services for enterprise informatization construction. A SQL injection vulnerability exists in the website building system of Famous Torch Enterprise Management Shanghai Co. Ltd, which can be exploited by attackers to obtain...

Preventing the Top Data Center Breaches

Data center breaches can seem impossible to avoid, but good data center security can seriously reduce your risk. We look at famous breaches Equifax, Yahoo, & more...

link.famousfootwear.com Open Redirect vulnerability

Open Bug Bounty ID: OBB-355483 Description| Value ---|--- Affected Website:| link.famousfootwear.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

Girls Who Code: That's a Wrap!

The Summer Immersion Program for Girls Who Code at Akamai wrapped up this past week. The girls finished their final projects and presented them at a graduation ceremony attended by friends and family as well as supporters and mentors from Akamai. The girls were divided into five teams for their...

famous-toons-facial.com XSS vulnerability

Vulnerable URL: http://famous-toons-facial.com/?id=%22%3E%3Cimg%20src=x%20onerror=prompt%27OPENBUGBOUNTY%27%3Eneveena Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 948763 VIP...

Arabseed XCMS 1.0.9 SQL Injection

Exploit Title : Arabseed XCMS V1.0.9 SQL injection Vulnerability Exploit Author : xBADGIRL21 Vendor Homepage : http://arabseed.com/ Tested on: BACKBOX MyBlog : http://xbadgirl21.blogspot.com/ skype:xbadgirl21 Date: 07/09/2016 video Proof : https://youtu.be/ABNSN3XecHw a DESCRIPTION : + Arabseed i...

famous-mobile.com XSS vulnerability

Vulnerable URL: http://famous-mobile.com/download.php?s=%22%3E%3Csvg/onload=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 27.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 15818041 VIP website...

WordPress Famous Theme <= 2.0.5 - Shell Upload

This theme is prone to a shell upload vulnerability. It allows an attacker to execute arbitrary PHP code. Solution Update the theme...

Ucms <= 1.8 Backdoor Remote Command Execution Exploit

No description provided by source. html !-- Ucms 1.4, 1.7, 1.8+?all Non Public exploit by 2²hot²2 a.k.a D4m14n and shadowleet Contact: [email protected] Or [email protected] Short description: Ucms is a warez-cms coded by madmax, he selled the cms for 150 Euro for one cms, but it´s not...

WordPress Famous 2.0.5 Shell Upload

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Wordpress Themes Famous Arbitrary File Upload Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Unfixed XSS vulnerability at www.famous-quotations.com

Security researcher cyber, has submitted on 10/04/2007 a cross-site-scripting XSS vulnerability affecting www.famous-quotations.com, which at the time of submission ranked 297201 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 11/04/2007. It is...

Unfixed XSS vulnerability at www.famousdiscoveries.com

Security researcher Cyber-Unity, has submitted on 21/03/2007 a cross-site-scripting XSS vulnerability affecting www.famousdiscoveries.com, which at the time of submission ranked 2767907 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 22/03/2007...