Mozilla Thunderbird - dwmapi.dll DLL Hijacking

Mozilla Thunderbird - dwmapi.dll DLL Hijacking / Exploit Title: Mozilla Thunderbird DLL Hijacking Exploit dwmapi.dll Date: 26/08/2010 Author: h4ck3r47 http://twitter.com/hxteam Version: Latest Mozilla Thunderbird 3.1.2 Tested on: Windows XP SP3 The code is based on the exploit from "TheLeader"...

Блогер cyxymu потребовал от Медведева разобраться с хакерами

Блогер cyxymu потребовал от Медведева разобраться с хакерами Блогер cyxymu http://cyxymu.livejournal.com/ 10 августа обратился к президенту России Дмитрию Медведеву с просьбой найти организаторов DDoS-атак на ресурсы Twitter, LiveJournal и Facebook. Cyxymu предложил президенту использовать для...

Paul Judge and David Maynor on Twitter Crime and Searching for Malware

Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most...

Attackers Moving to Social Networks For Command and Control

Bot herders and the crimeware gangs behind banker Trojans have had a lot of success in the last few years with using bulletproof hosting providers as their main base of operations. But more and more, they’re finding that social networks such as Twitter and Facebook are offering even more fertile...

Joomla EasyBlog Cross Site Scripting

Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to...

Joomla! Component EasyBlog - Persistent Cross-Site Scripting

Joomla! Component EasyBlog - Persistent Cross-Site Scripting Name : Joomla EasyBlog Persistent XSS Vulnerability Date : july 12,2010 Critical Level : HIGH vendor URL :http://stackideas.com/products/easyblog.html Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd...

Microsoft исследует информацию о новой бреши в Windows 2000 и XP

Датская мониторинговая компания Secunia опубликовала предупреждение о наличии в операционных системах Windows XP и Windows 2000 “умеренно критической” уязвимости. Согласно выпущенному фирмой руководству, уязвимость присутствует из-за граничной ошибки в классе CFrameWnd в файле mfc42.dll. Ее...

ReVou MicroBlogging Script Auth Bypass Vulnerabilty

Exploit for php platform in category web applications =================================================== ReVou MicroBlogging Script Auth Bypass Vulnerabilty =================================================== Name : ReVou MicroBlogging Script Auth Bypass Vulnerabilty Date : july 6,2010 Critical...

Linux/ARM - execve"/bin/sh","/bin/sh",0 30 bytes

Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes. Shellcode exploit for linux platform / Title: Linux/ARM - execve"/bin/sh","/bin/sh",0 - 30 bytes Date: 2010-06-28 Tested: ARM926EJ-S rev 5 v5l Author: Jonathan Salwan Web: http://shell-storm.org | http://twitter.com/jonathansalwan ! Dtabase of...

Twitter Agrees to FTC Security Audits

An important milestone that should compel all social networks to be much more diligent about preserving privacy and providing robust security was established by federal regulators with Twitter. Read the full article. The Last Watchdog...

XSS Flaw Found in Twitter

A Twitter user has demonstrated a cross-site scripting XSS vulnerability on the microblogging platform that could allow an attacker to take over users’ accounts or spread malware. Read the full article. Secure Computing...

reVou Twiter Clone Beta 2.0 Cross Site Scripting / SQL Injection

Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home google dork : Powered by TextAds 2.08 ooooo .oooooo. oooooo oooooo oooo 888' d8P' Y8b 888. 888. .8' 888 888...

Keep Up With Malware Authors Via Twitter

Malware authors are increasingly willing — if not eager — to talk about what they’re working on in a public forum like Twitter. Read the full article. InfoWorld...

Nucleus Twitter 0.8 Remote File Inclusion

============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download : http://edmondhui.homeip.net/nudn?file=2/NPTwitterv08.zip Author : AntiSecurity NoG...

Nucleus Plugin Twitter - Remote File Inclusion

Nucleus Plugin Twitter - Remote File Inclusion ============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download :...

Nucleus Plugin Twitter Remote File Inclusion Vulnerability

Exploit for php platform in category web applications ========================================================== Nucleus Plugin Twitter Remote File Inclusion Vulnerability ==========================================================...

Nucleus Plugin Twitter - Remote File Inclusion

============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download : http://edmondhui.homeip.net/nudn?file=2/NPTwitterv08.zip Author : AntiSecurity NoG...

BP Twitter Account Hacked

Oil giant BP suffered further embarrassment after its official Twitter account was hacked. Pranksters purloined the @BPAmerica Twitter account to write “Terry is now in charge of operation Top Kill, work will recommence after we find a XXL wetsuit. bpcares oilspill”. Read the full article. The...

New, Simple Twitter Botnet Tool Debuts

There is a new point-and-click tool circulating online that enables virtually anyone to create a piece of malware that will connect a PC to a budding Twitter botnet. The tool, known as TwitterNET Builder, is being used by attackers to build quick and easy botnets that are then controlled through...

Feasting on Twitter User Desire for Followers

The cybercriminals behind the intensifying phishing scam that has been plaguing Twitter since late last week are proving how easy it is to pervert the trust social networks like Twitter and Facebook along with search giant Google have made a cornerstone of their respective business models. The id...