Dradis v2.6 - Tool for sharing information during security testing !

"Dradis is a tool for sharing information during security testing. While plenty of tools exist to help in the different stages of the test, not so many exist to share interesting information captured. When a team of testers is working on the same set of targets, having a common repository of...

Tlxdgs.com Hacked By ATH cReW "Teo DownTurn" & "Unknown Hacker" !

Tlxdgs.com Hacked By ATH cReW "Teo DownTurn" & "Unknown Hacker" ! Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Barracuda Networks Launches Bug Bounty Program for Security Products

Barracuda Networks announced on Tuesday that it will pay over $3,100 to anyone who can hack into its security products. This bug bounty program is the first of its kind from a pure-play security vendor. “This initiative reflects our commitment to our customers and the security community at large,...

Shenzhenfdi.cn Hacked By CHEETA

Shenzhenfdi.cn Hacked By CHEETA Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Penetration Tester XSSer v1.0 - New Version Download

All of you web application penetration testers, check out this release of XSSer version 1.0! From this release, the author plans to rename XSSer to "The Mosquito". Our first post regarding XSSer can be found here. "XSSer is an open source penetration testing tool that automates the process of...

CYB3R_SWATI Hack two more sites Today...

CYB3RSWATI Hack two more sites Today... Links: https://www.liuhao.gov.cn/swati.html Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Videoznaika.ru Hacked by N3TWORM AHG

Videoznaika.ru Hacked by N3TWORM AHG Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Update : Havij v1.13 automated SQL Injection tool - New version

Update : Havij v1.13 automated SQL Injection tool - New version "Havij is an automated SQL Injection tool that helps penetration testers to find and exploit SQL Injection vulnerabilities on a web page. It can take advantage of a vulnerable web application. By using this software user can perform...

Death_c0der and Hell Hacker are back with Bcspeakers.net Defacement !

Deathc0der and Hell Hacker are back with Bcspeakers.net Defacement ! After a Long time Deathc0der and Hell Hacker Hack : Welcome Back Sit :- Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Indian Site maplebearindirapuram.co.in Hacked By CYB3R_SWATI

Indian Site Hacked By CYB3RSWATI Link : Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

LinkedIn Members Targeted by Botnet Malware

Members of LinkedIn who clicked on fake connection requests sent users to a Website that displayed “PLEASE WAITING…4 SECONDS” before redirecting them to Google. During those 4 seconds, the Website downloaded Zeus data-theft malware onto their PCs. Read the full article. eWEEK...

Design/Logic Flaw

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3435

The CVE-2008-3435 issue affects the LinkedIn Browser Toolbar (version 3.0.3.1100 and earlier) where the update mechanism does not properly verify authenticity, enabling a man-in-the-middle to deliver a Trojan horse update and execute arbitrary code. Documented impact is arbitrary code execution v...

KLA10244 ACE vulnerability in LinkedIn Browser Toolbar

Improper update verification was found in the LinkedIn Browser Toolbar. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a man-in-the-middle attack. Original advisories - Related products LinkedIn-Internet-Explorer-Toolb...

CVE-2008-3435: Improper Control of Generation of Code

LinkedIn Browser Toolbar 3.0.3.1100 and earlier does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

LinkedIn Toolbar IEContextMenu Buffer Overflow (CVE-2007-3955)

A buffer overflow vulnerability exists in LinkedIn Internet Explorer Toolbar. LinkedIn is a popular business-oriented networking site. This vulnerability is due to errors in the LinkedIn Internet Explorer Toolbar IEContextMenu ActiveX Control when handling overly long arguments sent to the search...

LinkedIn IE工具栏IEContextMenu控件远程溢出漏洞

BUGTRAQ ID: 25032 LinkedIn是一个联网工具，帮助用户在线寻找各类工作或业务联系人。 LinkedIn的IEToolbar.IEContextMenu.1 ActiveX控件实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 LinkedIn工具栏的IEToolbar.IEContextMenu.1（LinkedInIEToolbar.dll）控件在处理Search方式时将VARIANT用作了varBrowser参数，如果用户受骗访问了恶意网页的话就可能触发缓冲区溢出，导致在用户浏览器会话中执行任意指令。 LinkedIn IE Toolbar...

Buffer overflow

Buffer overflow in the IEToolbar.IEContextMenu.1 ActiveX control in LinkedInIEToolbar.dll in the LinkedIn Toolbar 3.0.2.1098 allows remote attackers to execute arbitrary code via a long second argument varBrowser argument to the search method. NOTE: some of these details are obtained from third...