Report: Romanian Authorities Bust VoIP Hacking Group

Authorities in Romania have disrupted a large hacking ring accused of stealing Voice over IP VoIP data from hacked servers and using it to place bogus calls to premium rate numbers. Agence France Presse reported on Tuesday that 42 people were arrested in the sting, breaking up a network that was...

Feds Bust Black Market ID Theft Ring

Thirty-eight defendants from across the United States have been charged with participating in a multimillion-dollar black market travel agent ring that used the stolen identities of thousands of victims to purchase airline tickets for customers. Read the full article. Dark Reading...

SMS Crime Ring Busted in Malaysia

Malaysian cops have busted an alleged text message spam scam ring thought to have fleeced locals for hundreds of thousands of dollars. The group are suspected of raking in RM6.4m $1.9m between 2006 and April 2010 using fictitious lottery winnings as a bait for an advanced fee fraud. Read the full...

Xilisoft Blackberry Ring Tone Maker Crash

Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cost: 9.95 USD Author: chap0 Site: http://www.setfreesecurity.com Email:...

Xilisoft BlackBerry Ring Tone Maker - .wma Local Crash

Xilisoft BlackBerry Ring Tone Maker - .wma Local Crash !/usr/bin/perl Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cos...

Xilisoft BlackBerry Ring Tone Maker - '.wma' Local Crash

!/usr/bin/perl Exploit Title: Xilisoft Blackberry Ring Tone Maker .wma Local Crash Date: March 29, 2010 Software Link: http://www.xilisoft.com/blackberry-ringtone-maker.html Version: 1.0.12 build-0326 Tested on: Windows XP SP3 / Windows 7 Cost: 9.95 USD Author: anonymous Site:...

A Closer Look at the Koobface Gang

The Koobface botnet is the tip of the iceberg for the malicious operations of the online crime ring. Here are the top 10 things you didn’t know about the Koobface gang. Read the full article. ZDNet...

Intel® Desktop Boards Privilege Escalation

Summary: Software running administrative ring 0 privilege can under certain circumstances change code running in System Management Mode. Description: A new BIOS update is available for selected Intel desktop motherboards to ensure proper configuration settings. These changes would prevent a...

Rising AntiVirus 2008/2009/2010 Local Privilege Escalation Exploit

RsNtGdi.sys not verify the Irp-UserBuffer address. Exploit code will restore all of the kernel SSDT hook Rising AntiVirus 2008 / 2009 / 2010 none include "stdafx.h" include "windows.h" enum SystemModuleInformation = 11 ; typedef struct ULONG Unknown1; ULONG Unknown2; PVOID Base; ULONG Size; ULONG...

Microsoft Windows NT/2000/2003/2008/XP/Vista/7 - 'KiTrap0D' User Mode to Ring Escalation (MS10-015)

Exploit-DB Mirror: https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11199.zip KiTrap0D.zip E-DB Note: Make sure to run "vdmallowed.exe" pre-compiled inside the subfolder. Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...

Windows NT User Mode to Ring 0 Escalation Vulnerability

Exploit for unknown platform in category local exploits ======================================================= Windows NT User Mode to Ring 0 Escalation Vulnerability ======================================================= Microsoft Windows NT GP Trap Handler Allows Users to Switch Kernel Stack...

Microsoft Windows NT200020032008XPVista7 - KiTrap0D User Mode to Ring Escalation (MS10-015)

Microsoft Windows NT200020032008XPVista7 - KiTrap0D User Mode to Ring Escalation MS10-015 Exploit-DB Mirror: https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11199.zip KiTrap0D.zip E-DB Note: Make sure to run "vdmallowed.exe" pre-compiled inside the subfolder...

U.S. Takes Down $9 Million RBS WorldPay Hacking Ring

U.S. and international prosecutors have taken down a criminal ring that they allege was responsible for an ATM scam last year that stole about $9 million from RBS WorldPay. The criminals were able to evade the company’s encryption system used on payroll debit cards and withdraw money from ATMs in...

kernel: KVM: x86: Disallow hypercalls for guest callers in rings > 0

The kvmemulatehypercall function in arch/x86/kvm/x86.c in KVM in the Linux kernel 2.6.25-rc1, and other versions before 2.6.31, when running on x86 systems, does not prevent access to MMU hypercalls from ring 0, which allows local guest OS users to cause a denial of service guest kernel crash and...

AIX 610002 : U828342

The remote host is missing AIX PTF U828342 which is related to the security of the package devices.common.IBM.tokenring.rte You should install this PTF for your system to be up-to-date. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0;...

PHP-Ring管理员Cookie绕过认证漏洞

BUGTRAQ ID: 30624 PHP-Ring是一个web ring系统，站点可通过webring系统增加访问量和指向站点的链接。 PHP-Ring没有安全地处理cookie。管理登录成功后，脚本会创建一个cookie显示用户所登录管理区域的剩余部分，但这个cookie不包含任何口令，因此用户可以伪造类似于合法登录的管理员cookie获得非授权访问。 以下是/admin/wradmin.php中的有漏洞代码： $cookie = $COOKIEadmin; //check for cookie if $cookie == "" OR $GETstop == 1 OR...

phpring-insecure.txt

...:::::PHP-Ring Webring System v0.9.1 Insecure Cookie Handling Vulnerability ::::.... Virangar Security Team www.virangar.net www.virangar.ir -------- Discoverd By :virangar security teamhadihadi special tnx to:MR.nosrati,black.shadowes,MR.hesy,Zahra & all virangar members & all hackerz greetz:t...

Authentication flaw

admin/wradmin.php in PHP-Ring Webring System aka uPHPringwebsite 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-3602

admin/wradmin.php in PHP-Ring Webring System aka uPHPringwebsite 0.9.1 allows remote attackers to bypass authentication and gain administrative access by setting the admin cookie to 1...

CVE-2008-3602

The CVE-2008-3602 entry concerns PHP-Ring Webring System (aka uPHP_ring_website) version 0.9.1. A flaw in admin/wr_admin.php allows remote attackers to bypass authentication and obtain administrative access by setting the admin cookie to 1. This is a cookie-based authentication bypass that enable...