395 matches found
Google Bans GPS Spy App, Developer Cries Foul
Malware may be difficult to define but, as former U.S. Supreme Court Justice Potter Stewart famously quipped about pornography “you know it when you see it.” At least that’s the position being taken by Google and anti malware firms about two applications designed for mobile phones running Google’...
Free PHP Photo Gallery Script Remote File Inclusion
Exploit Title: Free PHP photo gallery script Remote File inclusion Vulnerability Date: 2010/07/21 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpgalleryscript.org download Script: http://phpweby.com/downloads/gallery Tested on:...
PHP-Fusion Remote Command Execution
Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script: http://www.phpfusion-ar.com/downloads.php?catid=1&downloadid=91...
PHP-Fusion - Remote Command Execution
PHP-Fusion - Remote Command Execution Exploit Title: PHP-Fusion Remote Command Execution Vulnerability Date: 2010/07/19 Author: ViRuS Qalaa Email: [email protected] My Sites : www.pal-mafia.com & www.vbspiders.com Script home: http://www.phpfusion-ar.com download Script:...
Rogue iPhone Apps Explored at Black Hat
Lax security screening at Apple’s App Store and a design flaw are putting iPhone users at risk of downloading malicious apps that could steal data and spy on them, a Swiss researcher warns at Black Hat DC. Read the full article. cnet...
BlackBerry, Other Smartphone Users Easy Spy Targets
iPhone lovers and other smartphone users should take heed: A security researcher showed ways to spy on a BlackBerry user during a presentation Wednesday, including listening to phone conversations, stealing contact lists, reading text messages, taking and viewing photos and figuring out the...
Update Protection against Recent Malware Threats (1-Sep-09)
The update includes new protections against 9 recent malware threats:Backdoor-Trojan: Backdoor.Win32.Dreamy.bcTrickler: Trojan-Dropper.Win32.Agent.aqpnTrickler: Trojan-Downloader.Win32.Banload.bvkTrojan: Sus.BancDl-BTrojan: Trojan-Spy.Win32.VB.btmTrojan: Trojan-Downloader.Win32.VB.necTrojan:...
Swiss Coder Publicises Government Spy Trojan
A software engineer who created Trojans for the Swiss authorities to intercept Voice-over-IP VoIP phone calls has published the source code to his programs in order to draw attention to the surveillance threat posed by such software. Read the full story idg.no...
ASPX Spy (CVE-2008-1436; CVE-2009-0078; CVE-2009-0079; CVE-2009-0080)
ASPX Spy, is an ASPX program that allows easy control over a compromised web server. Using this program, an attacker can upload files through the web browser and execute them. A remote attacker may exploit web application vulnerabilities that will allow him to upload the ASPX Spy tool to a target...
DDoS Attacks Cripple U.S. and Korean Sites
From The New York Times Choe Sang-Hun Cyberattacks that have crippled the Web sites of several major American and South Korean government agencies since the July 4th holiday weekend appear to have been launched by a hostile group or government, South Korea’s main government spy agency said on...
Oracle Application Server Spy Servlet SID Enumeration
This module makes a request to the Oracle Application Server in an attempt to discover the SID. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Oracle Application Server Spy Servlet SID...
Webroot SpySweeper Enterprise Check
This plugin checks that the remote host has Webroot Spy Sweeper Enterprise installed and properly running, and makes sure that the latest Vdefs are loaded. SPDX-FileCopyrightText: 2008 Jeff Adams / Tenable Network Security Some text descriptions might be excerpted from a referenced sources, and a...
Unfixed XSS vulnerability at spy-world.org
Security researcher SeYMeN, has submitted on 08/06/2008 a cross-site-scripting XSS vulnerability affecting spy-world.org, which at the time of submission ranked 1701147 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2008. It is currently...
P2P Share Spy 2.2 Local Password Disclosure Exploit
No description provided by source. / P2P Share Spy 2.2 Local Exploit by Kozan Application: P2P Share Spy 2.2 Vendor: Rebrand Software - www.rebrandsoftware.com Vulnerable Description: P2P Share Spy 2.2 discloses passwords to local users. Discovered & Coded by: Kozan Credits to ATmaCA Web :...
Alibaba's Alipay controls exploit research-vulnerability warning-the black bar safety net
About Alibaba Alipay controls vulnerability, the network is also controversial. Some say that vulnerability exists, and some say does not exist, give me also don't know the letter who. However, no investigation has no say, or let our own go looking for the answer to the question. We first take a...
CVE-2007-5778
Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...
Information disclosure
Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...
CVE-2007-5778
CVE-2007-5778 affects Mobile Spy (Retinax Studios). The vulnerability arises from storing login credentials in cleartext under the RetinaxStudios registry key and transmitting login data over cleartext HTTP, enabling credential exposure through registry access or network sniffing. The connected P...
CVE-2007-5778
Mobile Spy 1 stores login credentials in cleartext under the RetinaxStudios registry key, and 2 sends login credentials and log data over a cleartext HTTP connection, which allows attackers to obtain sensitive information by reading the registry or sniffing the network...
PT-2007-6745 · Retina X Studios · Mobile Spy
Name of the Vulnerable Software and Affected Versions: Mobile Spy affected versions not specified Description: The issue concerns the storage and transmission of sensitive information. Specifically, it involves storing login credentials in cleartext under a specific registry key and sending login...