New Report Finds U.S. Hosting Providers Infested With Malware, Botnets

The United States used to be the leading industrial nation in the world, producing the best cars, TVs, clothes and deep-fried Twinkies. Those days are gone, but the U.S. can still claim primacy in one important area: the most malware-infested, phishing-friendly hosting provider. The newest report...

Vsftpd FTP Server Download Site Compromised

Someone was able to compromise a version of the vsftpd secure FTP server recently, inserting a simple backdoor that gives the attacker a shell on compromised machines. The bad version of the server has been removed and the creator of the app has moved it to a different hosting provider as a...

Massive Phishing Attack in Progress on Tumblr

There is an ongoing phishing attack playing out right now on the Tumblr network and it already has succeeded in stealing the login credentials of several thousand users, according to researchers who have been following the activity. The attack relies on a fake login page and some promises of free...

[slackware-security] mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.0, 13.1, 13.37, and -current to fix security issues. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/mozilla-firefox-5.0-i486-1slack13.37.txz: Upgraded. This release contains security fixes and improvements. For...

BrainNET ISP/TV Provider hacked by ProDom Security

BrainNET ISP/TV Provider hacked by ProDom Security ProDom Security Hackers Hacks into Brain.net.pk an ISP/TV Provider . Hacker dump data on free file hosting sites : URL: https://www.multiupload.com/0KWDE7ZJBB . There are 3 file in archive : README = Readme File cracked.txt = Login's Cracked so...

Attackers Using Amazon Cloud to Host Malware

Attackers are beginning to host their malicious domains and drive-by download sites, and most recently researchers have discovered a number of domains on Amazon’s cloud platform that are being used to install malware as part of a spam and phishing campaign designed to steal banking credentials an...

Nmap NSE net: http-domino-enum-passwords

Attempts to enumerate the hashed Domino Internet Passwords that are by default accessible by all authenticated users. This script can also download any Domino ID Files attached to the Person document. SYNTAX: domino-enum-passwords.idpath: the path where downloaded ID files should be saved If not...

Invisionix Roaming System Remote metasys 0.2 - Local File Inclusion

Invisionix Roaming System Remote metasys 0.2 - Local File Inclusion nvisionix Roaming System Remote metasys 0.2 LFI Vulnerability Site ................... : http://sourceforge.net/projects/irsr/ Download ............... : http://space.dl.sourceforge.net/project/irsr/irsr/irsr-0.2/irsr-0.2.ZIP...

[slackware-security] apr/apr-util

New apr and apr-util packages are available for Slackware 11.0, 12.0, 12.1, 12.2, 13.0, 13.1, 13.37, and -current to fix a security issue in apr and a crash bug in apr-util. Here are the details from the Slackware 13.37 ChangeLog: patches/packages/apr-1.4.5-i486-1slack13.37.txz: Upgraded. This...

Amazon Web Service Down, No Timeline for Remedy

Amazon Web Service’s AWS Elastic Compute Cloud EC2, based in Northern Virginia, went offline early this morning, taking with it a number of popular sites including, news aggregator Reddit and question and answer site and TechCrunch darling, Quora.The Web hosting firm’s Relational Database Service...

SibeX hosting system SQL Injection Vulnerability

Exploit for php platform in category web applications +Exploit Title: SibeX hosting system SQL Injection Vulnerability +Author : ^Xecuti0n3r + Date : 13.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Site designed & maintained by Sibex Systems" + Category : Web Apps SQl...

SibeX Hosting System SQL Injection

+Exploit Title: SibeX hosting system SQL Injection Vulnerability +Author : ^Xecuti0n3r + Date : 13.04.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"Site designed & maintained by Sibex Systems" + Category : Web Apps SQli Choose any site that comes up when you enter the dor...

Microsoft .NET Framework x86 JIT compiler Stack Corruption Remote Code Execution Vulnerability

Description The .NET Framework is prone to a remote code-execution vulnerability. Successful exploits may allow an attacker to execute arbitrary code with the privileges of the currently logged-in user. Failed attacks will cause denial-of-service conditions. In a web hosting environment,...

Advanced Image Hosting 2.2 (index.php) SQL Injection Vulnerability

Exploit for php platform in category web applications InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : email protected Data : 2011-04-01 Google dork: "Powered by: AIH v2.2" Category: Webapps Tested on: Window...

Advanced Image Hosting 2.2 - index.php SQL Injection

Advanced Image Hosting 2.2 - index.php SQL Injection ========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link :...

Advanced Image Hosting 2.2 SQL Injection

========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : [email protected] Data :...

Advanced Image Hosting 2.2 - 'index.php' SQL Injection

========================================== Advanced Image Hosting v2.2 SQLi Vulnerability ========================================== InformatioN Title : Advanced Image Hosting v2.2 SQLi Vulnerability Author : keracker Vendor or Software Link : http://yabsoft.com Email : [email protected] Data :...

Pligg CMS 1.1.3 Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became...

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Pligg CMS 1.1.3 - Multiple Vulnerabilities Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable;...

Pligg CMS 1.1.3 - Multiple Vulnerabilities

Exploit title: Pligg CMS file existence exploration/shared hosting privilege escalation H.ackAck.net Found by: Jelmer de Hen 15/03/2011 I released some Pligg exploits: http://h.ackack.net/the-pligg-cms-0dayset-1.html 22/03/2011 a patch became evailable; patching took 7 days:...