New Linux Malware Campaign Exploits Oracle Weblogic to Mine Cryptocurrency

Cybersecurity researchers have uncovered a new malware campaign targeting Linux environments to conduct illicit cryptocurrency mining and deliver botnet malware. The activity, which specifically singles out the Oracle Weblogic server, is designed to deliver a malware strain dubbed Hadooken,...

Bitcoin Bomb Scare Associated with Sextortion Scammers

This blog was written by Jaeson Schultz. Organizations across the country are on edge today after a flurry of phony bomb threats hit several public entities Thursday, such as universities, schools and news outlets, among others. The attackers distributed malicious emails claiming to have placed...

DomainHostingView v1.61 - Show domain hosting information

DomainHostingView is a utility for Windows that collects extensive information about a domain by using a series of DNS and WHOIS queries, and generates HTML report that can be displayed in any Web browser. The information displayed by the report of DomainHostingView includes: the hosting company ...

Latest Microsoft Malware Takedown Causes Waves in Security Community

Microsoft’s latest takedown of a malware operation, announced Monday and involving the infrastructure of several malware families, has, like many of the company’s actions, elicited strong opinions on both sides of the issue from security researchers, activists and others with a stake in the game...

WordPress Sites Targeted by Mass Brute-force Botnet Attack

US-CERT is aware of an ongoing campaign targeting the content management software WordPress, a free and open source blogging tool and web publishing platform based on PHP and MySQL. All hosting providers offering WordPress for web content management are potentially targets. Hackers reportedly are...

Interspire Shopping Cart Insecure Permissions

========= Product: Interspire Shopping Cart ========= Problem: config/config.php MUST be httpd-readable inter-domain read access permitted, which is a problem on shared hosting ========= About product: What is Interspire Shopping Cart? Interspire Shopping Cart is the most feature rich, all-in-one...

Pakistan hosting company hacked by "3thical noob"

Pakistan hosting company hacked by "3thical noob" Link : https://hostconnectors.com/ Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

namesXSS.txt

names.co.uk is an English registrar and web hosting company. Their frames-based hosting option has an XSS vulnerability allowing injection of arbitrary Javascript. For example: http://www.weddingbiz.co.uk/%22%3E%3Cframe%20src%3D%22javascript%3Aalert%281%29%22%20 According to webhosting.info,...

[Full-Disclosure] Kayako eSupport v2.3.1 Support Tracker XSS Vulnerability

http://www.google.com/search?q=22Powered+By+kayako+eSupport22+22search+the+entire+knowledgebase22 1290 customers according to Google. http://support.kayako.com/index.php?a=knowledgebase&j=questiondetails&i=2&nav=XSS&nav2=General20eSupport20Q&A Vendor notified by their access log files and this...