Sony Pictures Facebook Page & Website Hacked again !

Sony Pictures Facebook Page & Website Hacked again ! The hacking group Anonymous has confirmed that they have once again hacked Sony Pictures, gaining access to their Facebook account and website. Anonymous did threaten Sony for supporting the controversial SOPA bill and now it seems that the...

FuseTalk Forums 3.2 Cross Site Scripting

Exploit Title: FuseTalk Forums v3.2 Cross Site Scripting Date: 2.01.2012 Author: Sony Software Link: http://www.fusetalk.com/ Google Dorks: inurl:/login.cfm?windowed=yes Version: v3.2, maybe another version Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Unfixed XSS vulnerability at scripts.sil.org

Security researcher Sony, has submitted on 01/01/2012 a cross-site-scripting XSS vulnerability affecting scripts.sil.org, which at the time of submission ranked 54942 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...

Unfixed XSS vulnerability at www.analogx.com

Security researcher Sony, has submitted on 28/12/2011 a cross-site-scripting XSS vulnerability affecting www.analogx.com, which at the time of submission ranked 106615 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 28/12/2011. It is currently...

Unfixed XSS vulnerability at profiles.massmedboard.org

Security researcher Sony, has submitted on 25/12/2011 a cross-site-scripting XSS vulnerability affecting profiles.massmedboard.org, which at the time of submission ranked 688777 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is...

Unfixed XSS vulnerability at secure.smugmug.com

Security researcher Sony, has submitted on 16/12/2011 a cross-site-scripting XSS vulnerability affecting secure.smugmug.com, which at the time of submission ranked 1822 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/12/2011. It is currently...

What will 2012 bring? We can't know for sure

Stuxnet and the specter of sophisticated, state-sponsored attacks were still dominating the news a year ago, as 2010 ended and we welcomed the New Year. Soon enough, however, there would be a new phenomenon to contend with: hacktivists. As the attack on HBGary Federal and Sony showed, faceless...

Data Breaches for All

Sony’s online gaming platform, The PlayStation Network PSN, disappeared for more than a month starting in April, and no amount of double X and O-ing or right joysticking could save it. The reason? A massive attack on PSN’s network knocked the gaming giant offline and exposed the data of more than...

Unfixed XSS vulnerability at www.kino.ru

Security researcher Sony, has submitted on 14/12/2011 a cross-site-scripting XSS vulnerability affecting www.kino.ru, which at the time of submission ranked 100043 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently...

2 Buffer Overflows in Wireless Manager Sony VAIO

High-Tech Bridge SA Security Research Lab has discovered 2 buffer overflow vulnerabilities in Wireless Manager Sony VAIO which can be exploited to execute arbitrary code on vulnerable system. 1 Buffer Overflow in Wireless Manager Sony VAIO: CVE-2012-0985 1.1 The method SetTmpProfileOption in...

From Sony's DRM Rootkit to CarrierIQ: Why Commercial Rootkits Make Us So Mad

The half life of the CarrierIQ “rootkit” scandal proved to be a little more than a week. That’s about how long it took for Trevor Eckhart, a young, Connecticut-based Android developer to begin raising questions about some stealth software he discovered running on Android phones by HTC and...

Blekko.com Cross Site Scripting

Date: 24.11.2011 Author: Sony Site: http://blekko.com My blog and PoC: http://st2tea.blogspot.com/2011/11/blekkocom-web-search-engine-cross-site.html What is blekko.com? You can read here: http://en.wikipedia.org/wiki/Blekko So..our xss in the profile website link...

Unfixed XSS vulnerability at blekko.com

Security researcher Sony, has submitted on 24/11/2011 a cross-site-scripting XSS vulnerability affecting blekko.com, which at the time of submission ranked 4425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/01/2012. It is currently unfixed...

Sony Blu-Ray Player Detection

Binary data 6100.prm...

DHS Names Weatherford as Deputy Under Secretary for Cybersecurity

Department of Homeland Security DHS Secretary Janet Napolitano appointed Mark Weatherford today as the National Protection and Programs Directorate’s NPPD new Deputy Under Secretary for Cybersecurity, according to a press release on the DHS’ site. The role was created by the Directorate in...

Sony Detects Suspicious Behavior, Locks 93,000 Online Accounts

Sony locked the accounts of some 93,000 individuals on the Playstation Network PSN, the Sony Entertainment Network SEN, and Sony Online Entertainment SOE services following a mass log-in attempt using username-password combinations obtained from an unnamed source. The attack affected less than on...

Sony hacked again - 93,000 accounts compromised with brute-force attack

Sony hacked again - 93,000 accounts compromised with brute-force attack Sony has warned users against a massive bruteforce attack against PlayStation and Sony network accounts. The attack – which used password and user ID combinations from an unidentified third-party source – succeeded in...

Sony hacked again - 93,000 accounts compromised with brute-force attack

Sony hacked again - 93,000 accounts compromised with brute-force attack Sony has warned users against a massive bruteforce attack against PlayStation and Sony network accounts. The attack – which used password and user ID combinations from an unidentified third-party source – succeeded in...

Comm100 Forums Arbitrary Redirect

Date: 8.10.2011 Author: Sony Software Link: http://comm100.com/ Google Dorks: Forum Powered by Comm100 Blog : http://st2tea.blogspot.com .................................................................. Demo: http://hosted.comm100.com/Forum/Default.aspx?siteid=10000 Before:...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...