LodaRAT Windows Malware Now Also Targets Android Devices

A previously known Windows remote access Trojan RAT with credential-stealing capabilities has now expanded its scope to set its sights on users of Android devices to further the attacker's espionage motives. "The developers of LodaRAT have added Android as a targeted platform," Cisco Talos...

June 11, 2019—KB4503291 (OS Build 10240.18244)

None None...

May 28, 2019—KB4499162 (OS Build 15063.1839)

None None...

May 23, 2019—KB4499182 (Preview of Monthly Rollup)

None None...

[SECURITY] [DLA 1563-1] tzdata new upstream version

Package : tzdata Version : 2018g-0+deb8u1 tzdata upstream released version 2018g. Notables changes since 2018e previous version available in jessie include: - Morocco switched to permanent +01 on 2018-10-27. - Volgograd moved from +03 to +04 on 2018-10-28. - Fiji ends DST 2019-01-13, not...

Who’s who in the Zoo

ZooPark is a cyberespionage operation that has been focusing on Middle Eastern targets since at least June 2015. The threat actors behind the operation infect Android devices using several generations of malware, with the attackers including new features in each iteration. We label them from v1-v...

morocco.tanqeeb.com XSS vulnerability

Vulnerable URL: https://morocco.tanqeeb.com/ar/jobs/search?country=50=%22%3E%3Csvg%2Fonload%3Dalert%28%2FOPENBUGBOUNTY%2F%29%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 09.11.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unkno...

imlil.morocco.topdestination.co.uk XSS vulnerability

Vulnerable URL: http://imlil.morocco.topdestination.co.uk/?page=%22%3E%3CScRipT%3EalertOPENBUGBOUNTY%3C%2FScrIpT%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not...

WordPress Photocrati Theme 4.x.x SQL Injection

Exploit Title: wordpress theme photocrati 4.X.X SQL INJECTION Google Dork: Designed by Photocrati also powered by Photocrati Date: 23 / 09 / 2011 Exploit Author: ayastar Email : [email protected] Software Link: http://www.photocrati.com Version: 4.X.X Tested on: windows 7 -------- details |...

Design/Logic Flaw

The Morocco Weather aka com.mobilesoft.meteomaroc application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6697

The Morocco Weather aka com.mobilesoft.meteomaroc application 3.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6697

The CVE-2014-6697 entry concerns the Morocco Weather Android app (com.mobilesoft.meteomaroc) version 3.1. The vulnerability is that the app does not verify X.509 certificates for SSL servers, enabling man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted cert...

Super Mod System 3.0 - (s) SQL Injection Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : Super Mod System 3.1 5 Site : http://www.classified-software.co.uk/ Demo : http://www.classified-software.co.uk/super-mod-system-v3/...

PHP Links <= 1.3 smarty.php Remote File Inclusion Vulnerability

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : Houssamix From H-T Team = Script : PHP Links from DeltaScripts = 1.3 ...

Joomla Component com_extplorer <= 2.0.0 RC2 Local Directory Traversal

No description provided by source. -------------------------------------------------------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo ---------------------------------------------------------...

AllMyGuests <= 0.4.1 (cfg_serverpath) Remote File Include Vulnerability

No description provided by source. ============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected signin.php Critical leve...

Joomla Component joomlaXplorer <= 1.6.2 - Remote Vulnerabilities

No description provided by source. ------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix = Script : Joomla and Mambo Component joomlaxplorer = versi...

V3 Chat Live Support 3.0.4 - Insecure Cookie Handling Vulnerability

No description provided by source. ! ! ! OOOO O OOOOOOOOO ! ! O O O O O ! ! O O O ! ! O OOOO OOOO OOOOOO OOOO OOO OO O OOOO OO OO OOOO ! ! O OOO OOO O O O O OO O O O O OO O O O ! ! O OO OO O O OOOOOO O O O O O O OOOOOO ! ! O O OOOO O O O O O O O O O O O...

phpShop <= 0.8.1 - Remote SQL injection / Filter Bypass Vulnerabilities

No description provided by source. Vendor : PHPShop Webiste : http://www.phpshop.org Version : v0.8.1 Author: the redc0ders / theredc0dersatgmaildotcom Condition: magicquotegpc = off , in php.ini setting Details : ========== Vulnerable Code in index.php near lines 98 - 128 code // basic SQL injec...

SDP Downloader 2.3.0 - (.ASX File) Local Heap Overflow PoC

No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...