RIG Exploit Kit Landing Page

RIG exploit kit is a web exploit kit that operates by delivering malicious payload to the victim's computer. Successful infection will allow the attacker to download additional malware to the target...

Rig Exploit Kit Source Code Leaked

A spitting match between developers of the Rig Exploit Kit and one of its resellers resulted in a partial leak of the kit’s source code in a hacker forum. Rig is less than a year old and is spread primarily in malvertising campaigns, pushing Flash, Java and Microsoft Silverlight exploits; some...

Popular Science Website Infected, Serving Malware

The website of widely read Popular Science magazine is reportedly hosting a malicious script that is redirecting site visitors to a third-party domain containing an exploit kit, which is infecting users by uploading files containing malware to their machines. To give an idea of the scope of this...

Second jQuery Hack of Week Reported

Update A day after a compromise of the jQuery website was disclosed, the open source JavaScript library is dealing with a second attack. JQuery Foundation board member Ralph Whitbeck confirmed via email to Threatpost that a new compromise was under way and the organization was taking steps to...

jQuery Official Website Compromised To Serve Malware

The official website of the popular cross-platform JavaScript library jQuery jquery.com has been compromised and redirecting its visitors to a third-party website hosting the RIG exploit kit, in order to distribute information-stealing malware. JQuery is a free and open source JavaScript library...

jQuery.com Hacked, Redirecting to RIG Exploit Kit

Owners of websites built using the jQuery library are being warned of an attack against the toolkit’s website which is redirecting visitors to a third-party site hosting the RIG exploit kit. JQuery is a free and open source JavaScript library used for a number of things, including building AJAX...

RIG Exploit Kit Website Redirection

A website redirection vulnerability has been reported in PHP. A remote attacker can exploit this vulnerability to infect users with the RIG exploit kit...

RIG Exploit Kit Pushing Cryptowall Ransomware

With Cryptolocker quite possibly on its way to becoming yesterday’s ransomware news after the successful takedown of part of its distribution infrastructure, alternatives are already available. Cryptowall is the latest to grab some attention and traction on victimized computers. Cisco reported on...

TYPO3 4.7 Cross Site Request Forgery

Happy Milw0rm 1337 Day!!! Congratulations all h4x0rz 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Native Instruments Guitar Rig 4 Player 4.1.1 Insecure Library Loading

/ Native Instruments Guitar Rig 4 Player v4.1.1 Insecure Library Loading Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 4.1.1.1845 Standalone Summary: GUITAR RIG 4 PLAYER is the free, modular and expandable effects processor fro...

Native Instruments Guitar Rig 4 Player v4.1.1 Insecure Library Loading Vulnerability

Summary GUITAR RIG 4 PLAYER is the free, modular and expandable effects processor from Native Instruments, combining creative effects routing possibilities with ease-of-use and pristine sound quality. The included FACTORY SELECTION library provides one stunning Amp emulation with Matched Cabinet,...

Native Instruments (Multiple Products) - DLL Loading Arbitrary Code Execution

// source: https://www.securityfocus.com/bid/44989/info Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code. An attacker can exploit these issues by enticing a legitimate user to use a vulnerable application to open a file from...

Native Instruments (Multiple Products) - DLL Loading Arbitrary Code Execution

Native Instruments Multiple Products - DLL Loading Arbitrary Code Execution // source: https://www.securityfocus.com/bid/44989/info Multiple products from Native Instruments are prone to multiple vulnerabilities that let attackers execute arbitrary code. An attacker can exploit these issues by...

Researcher Finds Cheat Flaws in ESPN Fantasy Football

ESPN’s Fantasy Football site is riddled with flaws that allow players to rig games, a security researcher says. Read the full article. The Register...

CVE-2007-4127

PHP remote file inclusion vulnerability in checkentry.php in Ralf Image Gallery RIG, aka Raphael Moll RIG Image Gallery, 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the dirabssrc parameter. NOTE: this issue is disputed by multiple third parties, who report that the...

CVE-2007-4127

CVE-2007-4127 affects Ralf Image Gallery (RIG) 1.0, where PHP remote file inclusion is possible via dir_abs_src in check_entry.php. Notes mention that exploitation may be blocked if register_globals is enabled, and CVE-2006-3210 covers earlier versions where register_globals enables RFI/Directory...

rig-rfi.txt

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: RIG Image Gallery Script Download: http://sourceforge.net/project/showfiles.php?groupid=54367 Contact: ilker Kandemir Code:...

RIG Image Gallery (dir_abs_src) Remote File Include Vulnerability

------------------------------------------------------------------------------------------------------------------- MEFISTO PreSents... Script: RIG Image Gallery Script Download: http://sourceforge.net/project/showfiles.php?groupid=54367 Contact: ilker Kandemir ilkerkandemiratmynet.com Code:...

CVE-2006-3210

Ralf Image Gallery (RIG) 0.7.4 and earlier than 1.0 is affected when register_globals is enabled. The vulnerability allows PHP remote file inclusion and directory traversal via dir_abs_src (in check_entry.php, admin_album.php, admin_image.php, admin_util.php) and dir_abs_admin_src (in admin_album...