opacwebaloes (Fckeditor) Remote File Upload

Exploit for asp platform in category web applications +--------------------------------------------------------------------------------------------------------------------------------+ Exploit Title : opacwebaloes rfu Fckeditor Date : 19-02-2012 Author : TeaM MosTa Version : All Dork :...

Researchers Reveal How Attackers Can Track Cell Phone Locations

New research has found information leaked by cell towers can be used to determine your cell phone’s general location. The situation was detailed by researchers from the University of Minnesota, who discovered that there is enough information leaked from the lower layers of the GSM Global System f...

R4 1.25 Overflows / Directory Traversal

Luigi Auriemma Application: R4 http://r4.rabidhamster.org/R4/ Versions: = 1.25 Platforms: Windows Bugs: A stack overflow B heap overflow C directory traversal D screenshot stack overflow Exploitation: remote Date: 09 Feb 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

Update: Hacking Group TeaMp0isoN Claims Breach of T-Mobile

The hacking group TeaMp0isoN claims to have compromised Web servers used by T-Mobile, and absconded with account information for company employees, including members of T-Mobile’s media team. The group used a post on its official Twitter account taking responsibility for the attack, which targete...

Bypass SOPA (Stop Online Piracy Act) DNS Blocking with DeSopa 1.1

Bypass SOPA Stop Online Piracy Act DNS Blocking with DeSopa 1.1 A developer who calls himself T Rizk doesn't have much faith in Congress making the right decision on anti-piracy legislation, so he's built a work around for the impending censorship measures being considered DeSOPA. The Firefox...

Sprint Disables Carrier IQ Software On Its Devices

Sprint has decided to stop using Carrier IQ’s diagnostic software in light of the ongoing controversy about user privacy, according to reports. A Sprint spokesperson told the Website MobileBurn that the carrier has “weighed customer concerns and…disabled use of the tool so that diagnostic...

Manila AT&T hackers linked to 26/11 Mumbai terror attack

Manila AT &T hackers linked to 26/11 Mumbai terror attack Police in the Philippines working with the US Federal Bureau of Investigation have arrested four people over a premium-line phone scam that targeted customers of the American telecommunications giant AT&T to funnel money to a Saudi-based...

Manila AT&T hackers linked to 26/11 Mumbai terror attack

Manila AT&T hackers linked to 26/11 Mumbai terror attack Police in the Philippines working with the US Federal Bureau of Investigation have arrested four people over a premium-line phone scam that targeted customers of the American telecommunications giant AT&T to funnel money to a Saudi-based...

Four Hacking Suspects Tied to Terrorist Group Arrested

Authorities in the Philippines teamed up with the FBI to arrest four reputed hackers they believe were working for a terrorist organization. The four suspects were arrested in the Philippines Nov. 23. Law enforcement officials believe the suspects were employed by the terrorist group Jemaah...

Failed AT&T Hack Attempt Targeted One Million Customers

AT&T announced Monday that hackers made an “organized and systematic attempt” to gain access to nearly one million of their customers’ online accounts. According to a Bloomberg report, the phone company assured customers in an e-mail their accounts were intact. “We do not believe that the...

Samsung Galaxy S II (AT&T) trusted pattern lock Security Bypassed

Samsung Galaxy S II AT&T trusted pattern lock Security Bypassed Major security flaw found in AT&T's upcoming Samsung Galaxy S II device. Guys at BGR noticed that the information on the upcoming AT&T version of the Samsung Galaxy S II isn't so safe behind a once trusted pattern lock, and that it c...

Samsung Galaxy S II (AT&T) trusted pattern lock Security Bypassed

Samsung Galaxy S II AT &T trusted pattern lock Security Bypassed Major security flaw found in AT&T's upcoming Samsung Galaxy S II device. Guys at BGR noticed that the information on the upcoming AT&T version of the Samsung Galaxy S II isn't so safe behind a once trusted pattern lock, and that it...

CVE-2010-4830

The CVE-2010-4830 entry concerns Techno Dreams (T-Dreams) Job Career Package 3.0. It describes an SQL injection in Resumes/TD_RESUME_Indlist.asp that can be exploited via the z_Residency parameter to execute arbitrary SQL commands. The NVD entry provides a CVSS2 base score of 7.5 (HIGH) with netw...

CVE-2010-4829

The CVE-2010-4829 issue affects Techno Dreams (T-Dreams) Cars Ads Package 2.0, specifically the processview.asp component. The vulnerability is a SQL injection via the key parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the proc...

PT-2011-1765

Name of the Vulnerable Software and Affected Versions Techno Dreams T-Dreams Cars Ads Package version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the key parameter in the "processview.asp" file. Recommendations For version 2.0, conside...

CVE-2010-4830: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Resumes/TDRESUMEIndlist.asp in Techno Dreams T-Dreams Job Career Package 3.0 allows remote attackers to execute arbitrary SQL commands via the zResidency parameter...

CVE-2010-4829: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

PT-2011-1766

Name of the Vulnerable Software and Affected Versions Techno Dreams T-Dreams Job Career Package version 3.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the z Residency parameter in the Resumes/TD RESUME Indlist.asp file. Recommendations Fo...

Oracle, other companies hacked by Social Engineering attack in #DefCon 19

Oracle, other companies hacked by Social Engineering attack in DefCon 19 A weekend contest from 4th August to 7th August , at the world's largest hacking convention in Las Vegas showed one reason why big corporations seem to be such easy prey for cyber criminals : their workers are poorly trained...

T Online Browser v6.x - ClickJacking Vulnerability

Document Title: =============== T Online Browser v6.x - ClickJacking Vulnerability Release Date: ============= 2011-07-23 Vulnerability Laboratory ID VL-ID: ==================================== 143 Product & Service Introduction: =============================== Mit dem vielseitigen Browser 6.0...