“Can you try a game I made?” Fake game sites lead to information stealers

The background and the IOCs for this blog were gathered by an Expert helper on our forums and Malwarebytes researchers. Our thanks go out to them. A new, malicious campaign is making the rounds online and it starts simple: Unwitting targets receive a direct message DM on a Discord server asking...

Unfixed Redirect vulnerability at avn.innity.com

Security researcher hexon, has submitted on 22/11/2010 a Redirect vulnerability affecting avn.innity.com, which at the time of submission ranked 48950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed. If you...

Unfixed Redirect vulnerability at avp.innity.com

Security researcher hexon, has submitted on 22/11/2010 a Redirect vulnerability affecting avp.innity.com, which at the time of submission ranked 48950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed. If you...

Unfixed XSS vulnerability at blog.coupledb.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting blog.coupledb.com, which at the time of submission ranked 6359990 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/12/2011. It is...

Unfixed XSS vulnerability at www.bioon.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting www.bioon.com, which at the time of submission ranked 34642 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

Unfixed XSS vulnerability at www.tools.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting www.tools.com, which at the time of submission ranked 439058 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

Unfixed XSS vulnerability at rs-code.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting rs-code.com, which at the time of submission ranked 2133539 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

Unfixed XSS vulnerability at ratnagalih.com

Security researcher hexon, has submitted on 19/11/2010 a cross-site-scripting XSS vulnerability affecting ratnagalih.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

Unfixed XSS vulnerability at www.downloads.de

Security researcher hexon, has submitted on 07/07/2010 a cross-site-scripting XSS vulnerability affecting www.downloads.de, which at the time of submission ranked 124278 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/10/2010. It is currentl...

Havij Persistent <=v1.10 XSS Vulnerability

Exploit for php platform in category web applications ========================================== Havij Persistent =v1.10 XSS Vulnerability ========================================== Exploit Title: Havij Persistent XSS =v1.10 Date: 15/6/2010 Author: hexon Version: 1.10 and below Tested on: Windows...

Fixed XSS vulnerability at keep-tube.com

Security researcher hexon, has submitted on 13/04/2010 a cross-site-scripting XSS vulnerability affecting keep-tube.com, which at the time of submission ranked 23079 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/07/2010. It is currently...