From one upload to Maxthon within the network-vulnerability warning-the black bar safety net

From one upload to Maxthon within the network The first is to find a sub-domain name of the upload custom. maxthon. cn In the upload icon when only verifies the content-type is not on file after the judgment ! 1532ed2be1f9d7260dd9085f527ba9e0. png Simple modification packages to get to the shell ...

Design/Logic Flaw

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

CVE-2011-3377

The web browser plug-in in IcedTea-Web 1.0.x before 1.0.6 and 1.1.x before 1.1.4 allows remote attackers to bypass the Same Origin Policy SOP and execute arbitrary script or establish network connections to unintended hosts via an applet whose origin has the same second-level domain, but a...

NASA 'Space your Face' domain hacked

Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name "p0ison-r00t" deface a sub domain of NASA https://spaceyourface.nasa.gov/. The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using...

NASA 'Space your Face' domain hacked

Another basic security loop-hole in NASA website lead to a Hack. This time hacker going by name "p0ison-r00t" deface a sub domain of NASA http://spaceyourface.nasa.gov/. The hacked sub domain running a web application using flash, that allow visitors to create some funny videos of Space using...

Australian Nokia Sub Domain Defaced by Hackers

Australian Nokia Sub Domain Defaced by Hackers Latest News coming from Zone-H that Australian Nokia Sub Domain Defaced by Hacker going with codename - "aldyfrz" an Indonesian hacker. Reason of Hacking is Unclear and Security Breach possibly just Damage the Site. The Hacker Sub domain of Nokia is ...

Honda Thailand Defaced By Spydevilz / Mr. Paparosse

Honda Thailand Defaced By Spydevilz / Mr. Paparosse Honda Thailand sub domain got hacked by Hacker called Spydevilz and Mr. Paparosse. The team of Hackers include 3spi0n, Mr.PaPaRoSSe, ExDeaTH, Legend Coder, x-Leader, t0wN, JiHAD Hackers. Message posted by Hackers on page that "Do not stop your...

DirectAdmin ADD Sub Domain CSRF Exploit

Exploit for php platform in category web applications !/usr/bin/perl Title : DirectAdmin Web Control Panel � 2005 JBMC Software Author : OnurTURKESHAN Homepage : http://www.directadmin.com/ tested on : Windows 7 Seni Unutmayacagiz MIRIM- system"cls"; print "...

Microsoft FUSE Labs Sub-domain defaced by Hmei7

Microsoft FUSE Labs Sub-domain defaced by Hmei7 Hacker named "Hmei7 " defaced the official sud-domain of Microsoft FUSE Labs https://fuse.microsoft.com/ as shown above. He wrote a taunt on the home page with signature "are you microsoft?? , hackedby Hmei7 ". Mirror of hack at Zone-H is here...

Microsoft FUSE Labs Sub-domain defaced by Hmei7

Microsoft FUSE Labs Sub-domain defaced by Hmei7 Hacker named "Hmei7" defaced the official sud-domain of Microsoft FUSE Labs as shown above. He wrote a taunt on the home page with signature "are you microsoft?? , hackedby Hmei7". Mirror of hack at Zone-H is here...

United Nations Sub-Domain of Swaziland hacked by Cocain Team Hackers

United Nations Sub-Domain of Swaziland hacked by Cocain Team Hackers Swaziland sub domain of United Nations website Got defaced by Cocain Team Hackers. Mirror of hack also posted on Zone-H. Last hacks By Cocain Team Hackers are : Official site of NDRRMC hacked by Cocain TeaM Egyptian Consulate in...

Apple Website Hacked by HodLuM

Apple Website Hacked by HodLuM One of the Apple Sub-Domain claimed to be Defaced By HodLuM as shown above. The Deface Link is just an IMAGE uploaded to Apple domain. Hacker use "N00BZ" word for all Hacker including Anonymous , Lulzsec, Turkish hackers, Inj3t0rs and Exploit-DB's. AOL Postmaster...

Apple Website Hacked by HodLuM

Apple Website Hacked by HodLuM One of the Apple Sub-Domain claimed to be Defaced By HodLuM as shown above. The Deface Link is just an IMAGE uploaded to Apple domain. Hacker use "N00BZ " word for all Hacker including Anonymous , Lulzsec, Turkish hackers, Inj3t0rs and Exploit-DB's. AOL Postmaster...

Mod-X Cross Site Request Forgery / Cross Site Scripting

Got bored and decided to break the new website of the company I work for. Throughout I'll be dropping two new exploits that were chained to allow the changing of the administrative password of a default mod-x install. This is not a full review of mod-x, my main goal was just to break something, s...

CVE-2005-0585

Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...

CVE-2005-0585: Undefined Security Weakness

Firefox before 1.0.1 and Mozilla before 1.7.6 truncates long sub-domains or paths for display, which may allow remote malicious web sites to spoof legitimate sites and facilitate phishing attacks...

ISC BIND 8.3.x - OPT Record Large UDP Denial of Service

// source: https://www.securityfocus.com/bid/6161/info ISC BIND is vulnerable to a denial of service attack. When a DNS lookup is requested on a non-existant sub-domain of a valid domain and an OPT resource record with a large UDP payload is attached, the server may fail. / bindoptdos.c OPT DoS...

ISC BIND < 8.3.4 Multiple Remote Vulnerabilities

The remote name server, according to its version number, is affected by the following vulnerabilities : - When running the recursive DNS functionality, this server is vulnerable to a buffer overflow attack that may let an attacker execute arbitrary code on the remote host. - It is vulnerable to a...