Friday Squid Blogging: Peru and Chile Address Squid Overfishing

Peru and Chile have a new plan. As usual, you can also use this squid post to talk about the security stories in the news that I haven't covered. Read my blog posting guidelines here...

colgate.com.pe XSS vulnerability

Vulnerable URL: http://www.colgate.com.pe/es/pe/oc/search-results?tag="' alertdocument.domain Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 976799 VIP website status:| No Coordinated Disclosure Timeline:...

peru.wcs.org XSS vulnerability

Vulnerable URL: https://peru.wcs.org/en-us/WCS-Peru/Search.aspx?Search=Staff%27;;...

houseinsectsofperu-com-pe.com XSS vulnerability

Vulnerable URL: http://houseinsectsofperu-com-pe.com/tagproducts.php?idtag=35'" Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website status:| No Check houseinsectsofperu-com-pe.com...

peru.gob.pe XSS vulnerability

Vulnerable URL: http://www.peru.gob.pe/transparencia/peptransparenciaosceexoneracionesframe.asp?identidad=" Details: Description| Value ---|--- Patched:| No Latest check for patch:| 02.10.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 119444 VIP website status...

google.com.pe XSS vulnerability

Vulnerable URL: https://www.google.com.pe/url?q=https://myaccount.google.com/signin?continue=https://goo.gl/bFrRLW Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 232 VIP website status:| Yes Check google.com.pe...

houseinsectsofperu.org XSS vulnerability

Vulnerable URL: http://houseinsectsofperu.org/tagproducts.php?idtag=%27%22%3E%3Cmarquee/onstart=prompt%28/OPENBUGBOUNTY/%29%3E Details: Description| Value ---|--- Patched:| Yes, at Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| Unknown / Not calculated VIP website...

ZTE ADSL ZXV10 W300 Authorization / Disclosure / Backdoor

Exploit Title: ZTE ADSL ZXV10 W300 modems - Multiple vulnerabilities Discovered by: Karn Ganeshen Vendor Homepage: www.zte.com.cn Versions Reported: W300V2.1.0fER7PEO57 and W300V2.1.0hER7PEO57 CVE-ID: CVE-2015-7257 CVE-2015-7258 CVE-2015-7259 Note: Large deployment size, primarily in Peru, used b...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Design/Logic Flaw

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-6909

CVE-2014-6909 affects the Coca-Cola FM Peru Android app (com.enyetech.radio.coca_cola.fm_pe) version 2.0.41716, which does not verify X.509 certificates from SSL servers. This allows Man‑in‑the‑Middle attackers to spoof servers and obtain sensitive information via a crafted certificate. The base ...

CVE-2014-6909

The Coca-Cola FM Peru aka com.enyetech.radio.cocacola.fmpe application 2.0.41716 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

United Socialist Party of Venezuela's twitter account hacked

LulzSec Peru hack the official twitter account @partidopsuv of the United Socialist Party of Venezuela PSUV, in the evening hours of Thursday. Hackers start twitting from hacked account, "No to communism. Corrupt Chavez get out." In a blog post Party people announce that their twitter account is...

Peru Domains Registrar hacked and 207116 Domain panel credentials leaked

A huge hack carried out today ! One of the biggest Peru Domain registrar company punto.pe hacked by Lulzsecperu declared by a tweet and Complete database of 207116 websites has been leaked on internet. Leaked database include Domain panel username, encrypted password, Company descriptions. Hacked...

Desarrollo Web Peru - Default Login Access / SQL Injection Vulnerabilities

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x...

Desarrollo Web Peru Default Login

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

Joomla! Component com_osproperty 2.0.2 - Unrestricted Arbitrary File Upload

Joomla! Component comosproperty 2.0.2 - Unrestricted Arbitrary File Upload Exploit Title: Joomla comosproperty Unrestricted File Upload Google Dork: comosproperty Date: 13-07-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://www.insecurityperu.org/ &...

AutoCAD Worm Stealing Designs, Blueprints

Security researchers have come across a new worm that is meant specifically to steal blueprints, design documents and other files created with the AutoCAD software. The worm, known as ACAD/Medre.A, is spreading through infected AutoCAD templates and is sending tens of thousands of stolen document...

Trojan Mimics Chrome Installer to Steal Banking Information

Malware impersonating a Google Chrome Installer is actually stealing data while stripping software used to protect online banking transactions. The Trojan at present appears to target users in Brazil and Peru. Trend Micro researchers report in a blog post that they have discovered a malicious fil...

Siemens multiple domains hacked by Hmei7

Siemens multiple domains hacked by Hmei7 Indonesian hacker Hacker named "Hmei7" previously in news for hacking Microsoft and IBM , yesterday hack and deface 6 domains of Siemens company. Defaced websites come from different TLD which include the Ecuador, Peru, Venezuelan, Colombia and Brazil and...