Windows Meterpreter Shell, Bind TCP Inline (x64)

Connect to victim and spawn a Meterpreter shell. Requires Windows XP SP2 or newer. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework module MetasploitModule CachedSize = 203846 include Msf::Payload::TransportConfig...

Microsoft Windows JavaScript Spread Operator Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Windows. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the processing...

MSRT July 2016 – Cerber ransomware

As part of our ongoing effort to provide better malware protection, the July 2016 release of the Microsoft Malicious Software Removal Tool MSRT includes detection for Win32/Cerber, a prevalent ransomware family. The inclusion in MSRT complements our Cerber-specific family detections in Windows...

Spread Signs - External URLs, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Spread Signs published at the 'play' market has multiple vulnerabilities...

Joomla then exposed to high-risk 0day vulnerability for remote command execution-vulnerability warning-the black bar safety net

Joomla security team emergency release of the 3. 4. 6 version fixes a high-risk 0day vulnerability. It is reported that the vulnerability from being found to the security patches released, it has been more than two days, at present also has been through other channels in the spread. You can...

Automattic: CSV Injection in polldaddy.com

Hello, We can inject commands in any fields of a member in an email group =210 for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim download...

Trello: CSV Injection

Hello, We can inject commands in the name field of a board =210 for example, and when it's exported to CSV it will be evaluated to 20 in the corresponding cell, this enables an attacker to spread malware and execute system level commands on a victim's machine if the victim downloaded the CSV file...

Koler Android Ransomware Learns to Spread via SMS

Users of Android operating system are warned of a new variant of Android malware Koler that spreads itself via text message and holds the victim’s infected mobile phone hostage until a ransom is paid. Researchers observed the Koler Android ransomware Trojan, at the very first time, in May when th...

Sofi WebGui <= 0.6.3 PRE (mod_dir) Remote File Inclusion Vulnerability

No description provided by source. :::::::-. ... ::::::. :::. ;;, ';, ;; ;;;;;;;, ;;; ' . ' $$, $$$$ $$$ $$$ Y$c$$ 888,o8P'88 .d888 888 Y88 MMMMP YmmMMMM MMM YM Discovered by dun \ dunatstrcpy.pl Sofi WebGui = 0.6.3 PRE Remote File Inclusion Vulnerability Script site:...

Spread The Word Multiple SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/13737/info Spread The Word is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Successful...

Threat Outbreak Alert: Fake Product Purchase Order Email Messages on October 1, 2013

Medium Alert ID: 31068 First Published: 2013 October 1 14:04 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order for the recipient. The text in the email message attempts to convince the recipient to open the...

Android malware 'Priyanka' spreading rapidly through WhatsApp messenger

An Android malware is spreading around WhatsApp messenger called 'Priyanka'. It changes all your groups names to Priyanka, and may also change your contact names to Priyanka. Apparently, the malware doesn’t actually harm Android devices, but it is very annoying and it spreads manually, relying on...

Researchers Uncover PinkStats APT Toolkit

The arsenal of tools that attack groups use to do their business is seemingly endless, and many of them remain unknown for years before they’re discovered. Often, it’s not until a tool has been compromised or sold on the open market that researchers get a close look at it, but that’s been changin...

Shylock banking malware spreads via Skype

The banking Trojan known as Shylock has been updated with new functionality, including the ability to spread over Skype. The program was discovered in 2011 that steals online banking credentials and other financial information from infected computers. Shylock, named after a character from...

New Version of Shylock Malware Spreading Through Skype

There is a new version of the Shylock malware that is now capable of spreading through Skype. The new version is spreading mainly in the U.K., Europe and the U.S. and is playing off the fact that Microsoft is about to kill its Messenger application in favor of Skype. The new version of Shylock ha...

9 million PCs infected with ZeroAccess botnet

In recent months, we've seen the rootkit family Win32/Sirefef and Win64/Sirefef also known as ZeroAccess Botnet update its command and control protocol and grow to infect more computers while connecting to over one million computers globally. Before, disclosed that it creates its own hidden...

New Ramnit Variant Is Stealing Facebook Credentials

The Ramnit worm, which was first detected more than 18 months ago, has continued to evolve and now has spawned a version that is targeting victims’ Facebook credentials, and with great success. Researchers at Seculert in Israel have found a variant of Ramnit that is stealing those credentials and...

Shocker: Scammers Exploit Death of Former Libyan Ruler

In one of the least surprising computer security news events of 2011, the death of longtime Libyan leader, and self-proclaimed “African King of Kings” Colonel Muammar Qaddafi spawned a slew of online scams. Within hours of Qaddafi’s capture and death at the hands of Libyan rebels, security firms...

Cyber war against Israel have taken very dangerous turn

Cyber war against Israel have taken very dangerous turn The Cyber war between Egypt and Israel have taken very dangerous turn by setting normal internet users as target for botnet attacks. Since week ago some Egyptian hackers attacked so many Israeli's gov communities and organizations on the...

#OpGoogle - Operation Google started by Anonymous Hackers !

OpGoogle - Operation Google started by Anonymous Hackers ! OPGoogle Operation Google : Mar 6 At 18:00 GMT+1. IRC CHAN : oPGoogle . GUIDES : https://bit.ly/gFFTM5 . The complete press release as shown below : OpGoogle INDEX 1. English - done 2. Spanish - done 3. German - not yet, translators...