TYPSoft FTP Server 1.1 - 'APPE' Remote Denial of Service

!/usr/bin/python SEH overflow exploiting a vulnerability in Typesoft-FTP APPE command. Date of Discovery: 3/16/2012 0 Day Author: Brock Haun Vulnerable Software Download: http://sourceforge.net/projects/ftpserv/ Software Version: 1.1 Target OS: Windows 7 REQUIRES VALID CREDENTIALS. Luckily,...

Iran Defense Forum users logins compromised and Leaked

Iran Defense Forum users logins compromised and Leaked Hacker with name "Le0n B3lm0nt" claimed to hack into the Iran Defense Forum website irandefence.net and leak user details of all 3,212 members including their usernames, Emails and Passwords. Iran Defense Forum is an independent forum that is...

Oracle Exadata Infiniband Switch Default Logins / Poor Configuration

Oracle Exadata Infiniband Switch default logins and world readable shadow file Hi Full-Disclosure List, I've noticed a minor issue with the 1/4 rack Oracle Exadata Solution. What is Exadata? From Oracle.com "Oracle Exadata is the only database machine that provides extreme performance for both da...

r00tw0rm leak United Nations Environment Programme database

r00tw0rm leak United Nations Environment Programme database r00tw0rm group of Hackers hack and leak the complete 82.8 MB database from The united nations environment programme UNEP, which is the voice for the environment in the united nations system. Via a tweet, r00tw0rm shout ,"United nations...

SuSE 11.1 Security Update : glibc (SAT Patch Number 4944)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

NNTP Service Cleartext Login Permitted

The remote host is running an NNTP server that advertises that it allows cleartext logins over unencrypted connections. An attacker may be able to uncover user names and passwords by sniffing traffic to the server if a less secure authentication mechanism i.e. LOGIN or PLAIN is used. C Tenable...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7663) (deprecated)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

Plum CMS Blind SQL Injection

Coder : baltazar a.k.a b4ltazar CMS name : Plum CMS Site : http://www.plum-design.net && http://www.plum.rs Dork : Powered by PlumDesign : Powered by PlumDesign site:.rs : Powered by PlumDesign site:.com Admin panel : N/A Vulnerability : Sites design with Plum CMS suffers from blind SQL injection...

WVxWorks FTP server Password Overflow

Exploit for windows platform in category remote exploits $Id: VxWorksFTPserver.rb 16850 2011-09-07 10:20:45Z Iraq $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Borlas.net 14800 Users logins, phone number & Emails Leaked by Division Crew

Borlas.net 14800 Users logins, phone number & Emails Leaked by Division Crew Division Hackers Crew hack the Database of Borlas.net Free SMS Site . Hackers leak the usernames, Passwords, emails and phone numbers of 14800 registered users. Leaked database posted on pastenbin : Part 1: Part 2: Part ...

SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035

Check for the Version of glibc,pam-modules,libxcrypt,pwdutils OpenVAS Vulnerability Test SuSE Update for glibc,pam-modules,libxcrypt,pwdutils SUSE-SA:2011:035 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free softwar...

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees

Thehacker12 Dumps Logins for 20,000 Customers and U.S. Employees ThEhAcKeR12 has hacked into an events management company and obtained sensitive information belonging to 20,000 individuals, many of whom were United States government employees or contractors. Hacker posted an Excel spreadsheet...

SuSE9 Security Update : glibc suite (YOU Patch Number 12813)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

SuSE 10 Security Update : glibc (ZYPP Patch Number 7659)

The implementation of the blowfish based password hashing method had a bug affecting passwords that contain 8bit characters e.g. umlauts. Affected passwords are potentially faster to crack via brute-force methods. CVE-2011-2483 SUSE's crypt implementation supports the blowfish password hashing...

421 FTP hacked and logins leaked by PiraX hackers

421 FTP hacked and logins leaked by PiraX hackers PiraX hacking Crew today Leak the Username / Passwords of 421 FTP's via Pastebin link. Message By Hackers "The LulzBoat may be sunken but PiraX keeps 'a goin'! Have fun! ". Found this article interesting? Follow us on Twitter  and LinkedIn to rea...

Anonymous Hacks FBI Contractors IRC Federal

Anonymous Hacks FBI Contractors IRC Federal Anonymous Hackers today leak some files of IRC Federal via a tweet. They've gotten access to contracts, internal documents, development schematics, logins and more. The Download Link released by Anonymous is ,106.91 MB. Mirror also available now on...

Massive Phishing Attack in Progress on Tumblr

There is an ongoing phishing attack playing out right now on the Tumblr network and it already has succeeded in stealing the login credentials of several thousand users, according to researchers who have been following the activity. The attack relies on a fake login page and some promises of free...

BrainNET ISP/TV Provider hacked by ProDom Security

BrainNET ISP/TV Provider hacked by ProDom Security ProDom Security Hackers Hacks into Brain.net.pk an ISP/TV Provider . Hacker dump data on free file hosting sites : URL: https://www.multiupload.com/0KWDE7ZJBB . There are 3 file in archive : README = Readme File cracked.txt = Login's Cracked so...

BrainNET ISP/TV Provider hacked by ProDom Security

BrainNET ISP/TV Provider hacked by ProDom Security ProDom Security Hackers Hacks into Brain.net.pk an ISP/TV Provider . Hacker dump data on free file hosting sites : URL: https://www.multiupload.com/0KWDE7ZJBB . There are 3 file in archive : README = Readme File cracked.txt = Login's Cracked so...

MIT (ILP) hacked by Cyber_Owner

MIT ILP hacked by CyberOwner 5 Days before MIT's website https://ilp.mit.edu/ was got hacked by a hacker named CyberOwner . This was reported by Korben. According to screenshot it seems that the site ILP International Liaison Program at MIT has been hacked. The flaw would be a SQL injection flaw...