1282 matches found
Moodle 2.7 - Persistent Cross-Site Scripting
Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up: http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xs...
Moodle 2.7 - Persistent Cross-Site Scripting Vulnerability
Exploit for php platform in category web applications Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up:...
Microsoft Exec Says Company Has Never Been Asked to Backdoor a Product
One of Microsoft’s top security executives said the company has never been asked by the United States government to build a backdoor into any of its products, and if the company was asked, it would fight the order in the courts. Since the Edward Snowden revelations began last summer, there have...
Moodle 2.7 Cross Site Scripting
Title: Moodle 2.7 Persistent XSS Vendor: https://moodle.org/ Moodle advisory: https://moodle.org/mod/forum/discuss.php?d=264265 Researched by: Osanda Malith Jayathissa @OsandaMalith E-Mail: osandacatunseen.is Original write-up: http://osandamalith.wordpress.com/2014/07/25/moodle-2-7-persistent-xs...
Five Year Old Phishing Campaign Unveiled
UPDATE: A previous version of this story reported that Cyphort found 300,000 stolen credentials on a Gmail server. This figure was incorrectly reported by the firm and has been corrected to the adjusted number, 2,500 stolen credentials, in this story. Details have been disclosed on a five-year-ol...
Skype Technologies Skype 0.92/1.0/1.1 Insecure Temporary File Creation Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14293/info Skype is affected by an insecure temporary file creation vulnerability. Exploitation would most likely result in loss of data or a denial of service if critical files are overwritten in the attack. Other attack...
Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll)
No description provided by source. / Exploit Title: Skype = 4.2.0.169 DLL Hijacking Exploit wab32.dll Date: August 25, 2010 Author: Glafkos Charalambous glafkos@astalavistadotcom Version: Latest Skype v4.2.0.169 Tested on: Windows 7 x64 Ultimate Vulnerable extensions: .skype Greetz: Astalavista,...
Skype 3.6.216 Voicemail URI Handler Remote Denial of Service Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/26588/info Skype is prone to a remote denial-of-service vulnerability because of a NULL-pointer dereference flaw. Successfully exploiting this issue allows remote attackers to crash the application, denying service to...
Skype for Linux <= 2.1 Beta - Multiple Strange Behavior
No description provided by source. Title: Skype for Linux =2.1 Beta multiple strange behavior Author: Emanuele Gentili Emgent, Emanuele Acri Crossbower Contacts: [email protected], [email protected] Published: 2010-01-04 Software Link: http://www.skype.com/intl/it/download/skype/linux/...
Skype Technologies Skype 1.5 NSRunAlertPanel Remote Format String Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/20218/info Skype is prone to a remote format-string vulnerability because the application fails to properly sanitize user-supplied input before using it in the format-specification argument of a formatted-printing functio...
MyBB User Profile Skype ID Plugin 1.0 - Stored XSS
No description provided by source. Exploit Title: Profile Skype ID MyBB Plugin Stored XSS Date: 14/12/2012 Exploit Author: limb0 Vendor Homepage: http://www.dragonknightz.net/ Software Link: http://mods.mybb.com/view/user-profile-skype-id Version: 1.0 Category:Web Security Tested on: Linux...
Windows Gather Skype Saved Password Hash Extraction
This module finds saved login credentials for the Windows Skype client. The hash is in MD5 format that uses the username, a static string "\nskyper\n" and the password. The resulting MD5 is stored in the Config.xml file for the user after being XOR'd against a key generated by applying 2 SHA1...
Skype leaves Sensitive User Data Unencrypted Locally On Computers
An application should always encrypt users' sensitive data, either it is local or stored on company servers, but still many popular services failed to provide fully secured solutions to their users. Cristian Dinu DrOptix and Dragoş Gaftoneanu, Romanian programmers at Hackyard Security Group, a...
Syrian Electronic Army Hacks Skype Twitter Account With Anti-Surveillance Message
The Syrian Electronic Army took advantage of the relative calm of New Year’s Day to make a loud statement about the NSA’s surveillance program and Microsoft’s alleged participation in it. The group compromised the Twitter account and blog of Microsoft’s Skype service and posted anti-surveillance...
Skype's Official Twitter, Facebook and Blog Hacked by Syrian Electronic Army
None...
Internet Download Manager 6.17 (.ef2) Memory Corruption
Exploit for windows platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site...
Windows Gather Skype, Firefox, and Chrome Artifacts
Gathers Skype chat logs, Firefox history, and Chrome history data from the target machine. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'csv' class MetasploitModule 'Windows Gather Skype, Firefox, and Chrom...
Warning: "A new message from Skype Voicemail Service" spam leads to Zeus Malware
Skype has been targeted by cyber criminals again this week. Users are receiving a new Spam Email with subject "You received a new message from the Skype voice mail service.", that actually leads to Zeus Malware. Zeus is a Trojan horse that attempts to steal confidential information from the...
Warning: "A new message from Skype Voicemail Service" spam leads to Zeus Malware
None...
Law Enforcement Requests Report: No Skype Data Turned Over
Microsoft’s report on compliance with law enforcement requests for data demonstrates a status quo for the software giant from the last reporting period. While the number of requests from law enforcement dropped worldwide in the first six months of 2013, Microsoft complied with 79 percent of...