Unity 3D Forums Hacked by OurMine Hacking Group

By Waqas The OurMine hackers are back in the news again. This time the group hacked and defaced the official domain of Unity 3D Forums leaving a deface page along with a note over the weekend. The hack which took place on 30th April allowed the Saudi Arabia-based OurMine hacking group to...

New Clues Surface on Shamoon 2's Destructive Behavior

Researchers on Monday reported progress in piecing together some of the missing pieces of the Shamoon 2 puzzle that have been eluding them when it comes to lateral network movement and execution of the Disttrack malware component used in past campaigns. Shamoon 2 uses a combination of legitimate...

Threat Outbreak Alert RuleID28316: Email Messages Distributing Malicious Software on March 15, 2017

Medium Alert ID: 53040 First Published: 2017 March 15 17:52 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID28316 may contain the following files: Name | Si...

Destructive StoneDrill Wiper Malware On The Loose

There have been a handful of wiper malware attacks in the wild in the last decade with Shamoon’s destruction of more than 35,000 workstations at Saudi Aramco in 2012 and the Dark Seoul attacks on Sony Pictures Entertainment the most high profile. However, since last fall, Shamoon has resurfaced...

Researchers Uncover New Leads Behind Shamoon2

In a fresh analysis of the Shamoon2 malware, researchers from Arbor Networks’ Security Engineering and Response Team ASERT say they have unearthed new leads on the tools and techniques used in the most recent wave of attacks. Shamoon2 surfaced in November, approximately four years after the...

منو داق - السعودية - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application منو داق - السعودية published at the 'play' market has multiple vulnerabilities...

Saudi phone book & Caller Id - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Saudi phone book & Caller Id published at the 'play' market has multiple vulnerabilities...

Threat Outbreak Alert RuleID25195: Email Messages Distributing Malicious Software on September 22, 2016

Medium Alert ID: 49002 First Published: 2016 September 22 19:22 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID25195 may contain the following files: Name ...

Threat Outbreak Alert RuleID23888: Email Messages Distributing Malicious Software on July 19, 2016

Medium Alert ID: 47133 First Published: 2016 July 19 19:34 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID23888 may contain the following files: Name | Siz...

Twitter Ex-CEO Dick Costolo Got Hacked!

The same group of teenage hackers that hacked Facebook CEO Mark Zuckerberg's Twitter and Pinterest accounts have hacked another the Twitter account of another high-profile person. This time, it's Twitter's ex-CEO, Dick Costolo. The hacker group from Saudi Arabia, dubbed OurMine, compromised Twitt...

SAUDI SOFTECH gallery.php parameters gid a SQL injection vulnerability

No description provided by source...

Saudi Softech 5.0.1 Cross Site Scripting / SQL Injection

Exploit Title : SAUDI SOFTECH MST - SQL Injection / Cross Site Scripting Exploit Author : Persian Hack Team Vendor Homepage : http://www.saudisoftech.com/ Category: Webapps Tested on: Win Date: 2016/06/05 Version : V.5.0.1 PoC: 1-1-Get SQL Injection Demo :...

phpMyChat-Plus 1.94-b8 - SQL Injection Vulnerability

phpMyChat-Plus 1.94-b8 - SQL Injecti0n Vulnerability ===================================================== phpMyChat-Plus 1.94-b8 - SQL Injecti0n Vulnerability ===================================================== Exploit Title: phpMyChat-Plus 1.94-b8 SQL Injecti0n Vulnerability SQLMAP ! Date:...

saudiarabia.angloinfo.com XSS vulnerability

Vulnerable URL: http://saudiarabia.angloinfo.com/search/?q=%22%2F%3E%3CscRiPT%3Ealert%28%22XSSPOSED%22%29%3B%3C%2FscriPT%3E=Search Details: Description| Value ---|--- Patched:| Yes, at 26.07.2017 Latest check for patch:| 26.07.2017 09:28 GMT Vulnerability type:| XSS Vulnerability status:| Publicl...

saudi.gov.sa XSS vulnerability

Vulnerable URL:...

Hacktivist Group Anonymous (#OpISIS) Takes Down Islamic State (ISIS) Social Media Accounts

The hacktivist group Anonymous has launched a massive cyber attack against the Islamic State of Iraq and Syria ISIS — the radical Islamic terrorist group who were responsible for the terrorist attack against the Paris offices of satirical magazine Charlie Hebdo. With huge social media presence,...

Traidnt Up 3.0 CSRF Vulnerability

No description provided by source. Title : TRAIDNT UP Version 3.0 - CSRF Add Admin Script : TRAIDNT UP Version 3.0 Language : Php Download : http://www.traidnt.net http://www.traidnt.net/vb/attachment.php?attachmentid=519880&d=1285278011 Date : 2010/12/25 Version : 3.0 Dork : Powered by TRAIDNT U...

PhotoPost <= 4.6 (PP_PATH) Remote File Include Vulnerability

No description provided by source. ==================================================================== PhotoPost = 4.6 PPPATH Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz http://www.popphoto.com/...

Magic News Pro <= 1.0.3 (script_path) Remote File Include Vulnerability

No description provided by source. ==================================================================== Magic News Pro = 1.0.3 scriptpath Remote File Inclusion Exploit ==================================================================== Critical Level : Dangerous By Saudi Hackrz...

In-link <= 2.3.4 (ADODB_DIR) Remote File Include Vulnerabilities

No description provided by source. ================================================================= in-link =2.3.4 adodb-postgres7.inc.php Remote File Inclusion Exploit ================================================================ Critical Level : Dangerous By Saudi Hackrz...