More than 100000 Wireless Routers have Default Backdoor

A recently reported flaw that allowed an attacker to drastically reduce the number of attempts needed to guess the WPS PIN of a wireless router isn't necessary for some Arcadyan based routers anymore. Last year it was exposed that the WiFi Protected Setup WPS PIN is susceptible to a brute force...

Innominate MGuard Weak HTTPS and SSH Keys

Overview An independent research group comprised of Nadia Heninger, Zakir Durumeric, Eric Wustrow, and J. Alex Halderman identified an insufficient entropy vulnerability in Innominate’s mGuard network appliance product line. By impersonating the device, an attacker can obtain the credentials of...

Roman Andreev wins Facebook Hacker Cup 2012

Roman Andreev wins Facebook Hacker Cup 2012 25 of the world's best hackers gathered for Facebook's 2nd annual Hacker Cup event being held at its offices in Menlo Park. Roman Andreev from Russia completed one problem correctly in 1 hr 4 min and won Facebook's Hacker Cup to get his name placed on a...

Verkehrsbetrieb - SQL Injection Vulnerability

Document Title: =============== Verkehrsbetrieb - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=138 Release Date: ============= 2012-01-24 Vulnerability Laboratory ID VL-ID: ==================================== 138 Product &...

Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities

Document Title: =============== Airport Koeln/Bonn - Blind SQL Injection Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=174 Release Date: ============= 2012-01-20 Vulnerability Laboratory ID VL-ID: ==================================== 17...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

FlipDot HackerSpace Kassel - 2011 StartUP Slides

Document Title: =============== FlipDot HackerSpace Kassel - 2011 StartUP Slides References: =========== Download: http://www.vulnerability-lab.com/resources/videos/374.flv View: http://www.youtube.com/watch?v=yOBjGFLArdU Release Date: ============= 2012-01-06 Vulnerability Laboratory ID VL-ID:...

Report: Anonymous Targets Neo-Nazis

The Anonymous Internet collective’s campaign against groups with whom they disagree surged into 2012 with “Operation Blitzkrieg,” which is targeting Neo-Nazi groups in Germany. Their latest effort includes a Wikileaks-style Website, Nazi-leaks.net, to uncover and expose the identities of...

Microsoft to Release Emergency Fix for ASP.NET DoS Flaw

UPDATED Microsoft on Thursday plans to release an emergency out-of-band update to address a vulnerability in ASP.NET that could allow an attacker to consume all of the resources on a vulnerable server with a single specially designed HTTP request. The vulnerability affects a wide range of Web...

Why US Aircrafts Drop Spy Devices in Syrian ?

Why US Aircrafts Drop Spy Devices in Syrian ? Last week Iranian engineer claim to hijack U.S. drone by hacking GPS system using GPS spoofing. On December 14, residents of a small town in northern Syria reported seeing unidentified aircraft circling overhead, and dropping several small items...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

2 Bit Counter - Schaltanlage Deutsche Post

Document Title: =============== 2 Bit Counter - Schaltanlage Deutsche Post References: =========== Download: http://www.vulnerability-lab.com/resources/videos/358.wmv View: http://www.youtube.com/watch?v=pUC-JQRIEws Release Date: ============= 2011-12-15 Vulnerability Laboratory ID VL-ID:...

TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181

TC-SA-2011-02: Multiple web-vulnerabilities in iTop version 1.1.181 Published: 2011/11/16 Version 1.0 Affected products: iTop version 1.1.181, 1.2.0-RC-282 maybe earlier versions as well http://sourceforge.net/projects/itop/ References: CVE-2011-4275 - Multiple web-vulnerabilities in iTop...

blueHOMES hacked - 500k users data and Password in Plain text leaked

blueHOMES hacked - 500k users data and Password in Plain text leaked Some Anonymous Hacker hack the French property and property Germany Dealers website blueHOMES.com . About 500,000 Users data claim to be hacked by Hacker and also database include all customer passwords in plaintext, including...

BOOKSolved 1.2.2 File Disclosure

...BOOKSolved 1.2.2 l Remote File Disclosure Vulnerability ...Discovered by bd0rk ...Contact: bd0rkathackermail.com or follow me on twitter ...Greetz: inj3ct0r-Team, x0r32, Perle, Siber King ...Tested on: Ubuntu-Linux ...MEZ-Time: 08:17 ...Vendor: http://www.usolved.net/ ...Download:...

WordPress CevherShare Plugin 2.0 SQL Injection

Exploit for php platform in category web applications = WordPress CevherShare 2.0 plugin SQL Injection Vulnerability = Bugfounder: bd0rk = Contact: bd0rkathackermail.com = Greetings: Perle, Martin K., Carsten R., x0r32 = Affected-Software: WordPress CevherShare 2.0 plugin = Vendor:...

German Web-Servers HTTP Flooding DDoS

A Distributed Denial of Service DDoS threat by a Bitcoin Mining botnet has been reported...

YieldManager Ad Network Serving Malvertising

One of the world’s largest advertising networks, YieldManager, has been serving ransomware to websites from all over the world. The malvertising campaign was first detected by Armorize’s HackAlert scanning farm. While the websites affected are international, the exploit server itself, at the...

German Gema website hacked by Anonymous Hackers

German Gema website hacked by Anonymous Hackers The GEMA website was hacked by Anonymous. Here is a screenshot who was circulating now the whole web presence disappeared. Whoever wants to playback or perform music in public in Germany will become, as a rule by doing this, a customer of GEMA. GEMA...

AOK GesundheitsKasse - SQL Injection Vulnerability

Document Title: =============== AOK GesundheitsKasse - SQL Injection Vulnerability Release Date: ============= 2011-07-31 Vulnerability Laboratory ID VL-ID: ==================================== 157 Common Vulnerability Scoring System: ==================================== 7.3 Product & Service...