HackBack - A DIY Guide for those without the patience to wait for whistleblowers

HackBack - A DIY Guide for those without the patience to wait for whistleblowers. Papers exploit for Multiple platform | | | | | | | | | | | | || |/ |/ | |/ / | \ / |/ | |/ / | | | | | | | | | | | | || || ||,|||\ |/ ,|||\ A DIY Guide for those without the patience to wait for whistleblowers --...

Monkey HTTP Server 0.1.4 File Disclosure Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5792/info Monkey HTTP server is prone to a directory-traversal bug that may allow attackers to access sensitive files. By passing a malicious query to a vulnerable server, an attacker can potentially gain access to...

Microsoft Windows 9x File Handle Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/1796/info The file sharing SMB service in Windows enables client applications to access and modify files from a server on the network. The SMB service within Windows 95/98 allocates 0x4004 bytes to store file handles...

LeadMind Pop Messenger 1.60 Illegal Character Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/11230/info LeadMind Pop Messenger is reported prone to a remote denial of service vulnerability. The issue exists because the messenger application fails to gracefully handle certain characters that are received. A remote...

FTC Asking DEF CON to Help Catch Robocallers

The United States Federal Trade Commission is sick and tired of illegal robocalling, and it’s hosting a contest this year at the DEF CON hacker conference in Las Vegas in an attempt to do something about it. The consumer protection agency’s weariness likely stems from the more than 150,000...

Grams - First Search Engine for Underground Black Markets

We often talk about Underground communities, illegal websites or black markets, but as they are ‘Underground’ in nature i.e. Hidden websites running under Onion Network, many of us don't know how to reach the one we are searching for and if hopefully found, then its difficult to figure out a...

Windows Domain Credentials Phishing Tool

While performing a Pen test for a client i needed to catch a domain user name and password, there are several ways to gain users passwords and it really depends on a lot of factors on how to get it in my case i didn’t had time to wait for the user to enter his credentials and get it using a key...

25 Million 'NAVER' Accounts Breached using Stolen Data

A 31-year-old South Korean has been recently accused by the police for the allegation of infiltrating and hacking the accounts of 25 million users of Naver, one of the popular search portal in South Korea. On Wednesday, the Asian National Police Agency revealed that the suspect purchased the...

Underground Marketplace 'Utopia' Seized by Dutch Police, 5 suspects arrested

After Silk Road, another underground online marketplace 'Utopia' has been seized by Dutch National Police, where users could buy illegal drugs and guns for home delivery. The police started their investigation under Codename 'Operation Commodore' in 2013, and finally seized Utopia's Germany-based...

'Chaos Computer Club' filed criminal complaint against German government Over Mass Spying

After the revelation of former NSA contractor Edward Snowden, we all very well knew the impact of it on the world, but nobody would have estimated that the impact will be so worst. The revelation, not only defaced NSA, but also its counterpart GCHQ, and various other governments which were servin...

Microsoft and Google Collaborate on Effort to Clean Web of Cild Abuse Images

Microsoft and Google are cooperating in an effort to make it much more difficult for child predators to find illegal images online by blocking search results for about 100,000 search terms. The companies also are collaborating on methods to better identify illegal abuse images and remove them mor...

varnish -- DoS vulnerability in Varnish HTTP cache

Varnish Cache Project reports: If Varnish receives a certain illegal request, and the subroutine 'vclerror' restarts the request, the varnishd worker process will crash with an assert. The varnishd management process will restart the worker process, but there will be a brief interruption of servi...

Silk Road : 8 more suspected users arrested in US, UK, Sweden

Authorities in Britain, Sweden, and the United States have arrested eight more people in the wake of the shutdown of the Silk Road, online illegal drug marketplace which helped dealers sell drugs under the cloak of anonymity. Millions of Dollars worth of Bitcoins Electronic currency had been seiz...

Bitcoin Talk forum hacked; Database for Sale by Hacker; Website currently down

Bitcoin Talk, the popular Bitcoin discussion forum, has been hacked and as it stands the site is currently unreachable. Bitcointalk has been down for nearly 6 hours. The forums have been allegedly hacked and Defaced by "The Hole Seekers" and selling 150,000 emails and hashed passwords stolen from...

Bitcoin Talk forum hacked; Database for Sale by Hacker; Website currently down

Bitcoin Talk, the popular Bitcoin discussion forum, has been hacked and as it stands the site is currently unreachable. Bitcointalk has been down for nearly 6 hours. The forums have been allegedly hacked and Defaced by “The Hole Seekers” and selling 150,000 emails and hashed passwords stolen from...

FBI Shuts Down Online Drug, Hacking Market Silk Road

The FBI has taken down the infamous Silk Road underground drug market, arresting Ross William Ulbricht in San Francisco yesterday and charging him not only with the distribution of illegal drugs including heroin and LSD, but also with a number of computer hacking crimes. Ulbricht, who was known a...

SKCMS the presence of arbitrary file upload vulnerability can be directly getshell-a vulnerability warning-the black bar safety net

Upload vulnerability, without background permission to upload directly, without filtering, the result file is illegal uploads! SKCMS/upload/swfupload/load. asp www.0day5.com/SKCMS/upload/swfupload/load.asp ! SKCMS/upload/filemanagerjson. asp ! !...

phpcms v9 arbitrary file read vulnerability exp-vulnerability warning-the black bar safety net

? php / PHPcms V9 arbitrary file read vulnerability Detection Tool @author the Return of the Blog: www.creturn.com Email: [email protected] Note that this app only to learn reference, shall not be used for illegal interactions Otherwise the consequences conceited, and I is independent of! /...

Oracle Java jre/bin/awt.dll storeImageArray()函数非法数组索引任意代码执行漏洞

Oracle Java Runtime Environment是一款为JAVA应用程序提供可靠的运行环境的解决方案 Oracle Java JRE 7 Update 24及之前版本jre/bin/awt.dll中的原生storeImageArray函数存在一个非法数组索引漏洞，允许攻击者构建恶意WEB页或恶意文件，诱使用户打开，可以用户进程上下文执行任意代码 0 Oracle Java JRE 7 Update 24及之前版本 厂商解决方案 Oracle Java JRE 7 Update 25已经修复此漏洞，建议用户下载更新： http://oracle.com/java...

PRISM like Surveillance system in France to intercept billions of communications

The US isn't the only western country with an Digital eye i.e PRISM like surveillance program, designed to monitor internet and phone communications. French is leading member at European Parliament and they voted to launch an in-depth inquiry against the US's based PRISM surveillance project. The...