232 matches found
Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection
Joomla! Component Most Wanted Real Estate 1.1.0 - SQL Injection Exploit Title: Joomla! Component Most Wanted Real Estate v1.1.0 - SQL Injection Google Dork: inurl:index.php?option=commostwantedrealestate Date: 18.02.2017 Vendor Homepage: http://mostwantedrealestatesites.com/ Software Buy:...
Debian DLA-745-1 : most security update
The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debian's version of most was susceptible for a shell injection attack that could be exploited to run arbitrary commands on the user's computer. For Debian 7 'Wheezy', these...
[SECURITY] [DLA 745-1] most security update
Package : most Version : 5.0.0a-2.2 CVE ID : CVE-2016-1253 Debian Bug : 848132 The most pager can automatically open files compressed with gzip, bzip2 and in Debian LZMA. Alberto Garcia discovered that Debians version of most was susceptible for a shell injection attack that could be exploited to...
DLA-745-1 most - security update
Bulletin has no description...
37-Year-Old 'Syrian Electronic Army' Hacker Pleads Guilty in US court
One of the FBI's Most Wanted Hackers who was arrested in Germany earlier this year has pleaded guilty to federal charges for his role in a scheme that hacked computers and targeted the US government, foreign governments, and multiple US media outlets. Peter Romar, 37, pleaded guilty Wednesday in ...
Creators of SpyEye Virus Sentenced to 24 Years in Prison
In Brief Two International hackers, Aleksandr Andreevich Panin and Hamza Bendelladj, have been sentenced to a combined 24 years and 6 months in prison for their roles in developing and distributing SpyEye banking trojan, a powerful botnet similar to the infamous ZeuS malware. Both hackers were...
The 7 Most Wanted Iranian Hackers By the FBI
The Federal Bureau of Investigation FBI has lengthened its Most Wanted List by adding seven Iranian hackers who are accused of attacking a range of US banks and a New York dam. On Thursday, the United States Department of Justice DoJ charged seven Iranian hackers with a slew of computer hacking...
chromium-browser: navigation bypass in Chrome Instant
The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...
Google Chrome Instant Feature Security Restriction Bypass Vulnerability
Google Chrome is a web browsing tool developed by Google. A security vulnerability exists in versions prior to Google Chrome 48.0.2564.109 due to the Chrome Instant feature not ensuring that NTP navigation targets are in the most frequently viewed or suggested list. A remote attacker can exploit...
CVE-2016-1625
The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...
UBUNTU-CVE-2016-1625
The Chrome Instant feature in Google Chrome before 48.0.2564.109 does not ensure that a New Tab Page NTP navigation target is on the most-visited or suggestions list, which allows remote attackers to bypass intended restrictions via unspecified vectors, related to instantservice.cc and...
These Are The FBI's Most Wanted Hackers — Total $4.2 Million Reward
The US State Department and the Federal Bureau of Investigation are willing to pay a total $4.2 Million for information leading to the arrest and/or conviction of top 5 most wanted cyber criminals accused of conducting frauds of hundreds of millions of dollars. Evgeniy Bogachev,30; Nicolae Popesc...
FBI Offers $3 Million Reward For Arrest Of Russian Hacker
The US State Department and the Federal Bureau of Investigation announced Tuesday a $3 Million reward for the information leading to the direct arrest or conviction of Evgeniy Mikhailovich Bogachev, one of the most wanted hacking suspects accused of stealing hundreds of millions of dollars with h...
Information disclosure
The Most Popular Ringtones aka com.bbs.mostpopularringtones application 32 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...
CVE-2014-5583
CVE-2014-5583 affects the Android app “The Most Popular Ringtones” (com.bbs.mostpopularringtones) version 32. The vulnerability is that the app does not verify X.509 certificates when establishing SSL connections, enabling man-in-the-middle attackers to spoof servers and obtain sensitive informat...
FBI offering $100,000 reward for information on Most Wanted Cyber Criminals
The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information from the public regarding their whereabouts. The men are wanted in connection with hacking and fraud crimes both within the US as well as internationally. Rewards ranging fro...
OSForensics – Digital investigations faster
OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...
XerXes - Most powerful dos tool
XerXes - Most powerful dos tool XerXes is one of the most powerful private dos tool. This tools was used by The Jester to Hits WikiLeaks Site DoS Attack. Get Source Code here : / XerXes - Most powerful dos tool - THN https://www.thehackernews.com / include stdio.h include stdlib.h include string....
HTB22841: SQL Injection in Comment Rating wordpress plugin
Vulnerability ID: HTB22841 Reference: http://www.htbridge.ch/advisory/sqlinjectionincommentratingwordpressplugin.html Product: Comment Rating wordpress plugin Vendor: Bob King http://wealthynetizen.com/ Vulnerable Version: 2.9.23 Vendor Notification: 08 February 2011 Vulnerability Type: SQL...
DZCP (deV!L`z Clanportal) 1.5.4 - Local File Inclusion
Vulnerability ID: HTB22656 Reference: http://www.htbridge.ch/advisory/lfiindzcp.html Product: DZCP Vendor: dzcp.de http://www.dzcp.de Vulnerable Version: 1.5.4 Vendor Notification: 13 October 2010 Vulnerability Type: Local File Inclusion Status: Fixed by Vendor Risk level: High Credit: High-Tech...