Linux – OS Unix – Security evangelist, security addict, a man who humbly participating in knowledge. Security is for everyone everywhere.

Allok Video To DVD Burner 2.6.1217 Buffer Overflow 25/04/2018
Topic: Allok Video To DVD Burner 2.6.1217 Buffer Overflow Risk: High Text: # # Exploit Title: Buffer Overflow(SEH) on Allok Video to DVD Burner2.6.1217 # Date: 23.04.2018 # Exploit...
T3jv1l
Kaspersky KSN for Linux 5.2 Memory Corruption 25/04/2018
Topic: Kaspersky KSN for Linux 5.2 Memory Corruption Risk: High Text:''' # Exploit Author: Juan Sacco < jsacco@exploitpack.com> - http://exploitpack.com # # Tested on: Kali i686 GNU/Linux # CVE...
Juan Sacco
R 3.4.4 Local Buffer Overflow 25/04/2018
Topic: R 3.4.4 Local Buffer Overflow Risk: High Text:#!/usr/bin/python # # Exploit Author: bzyo # CVE: CVE-2018-9060 # Twitter: @bzyo_ # Exploit Title: R 3.4.4 - Local Buffe...
bzyo
Open-AudIT 2.1 CSV Macro Injection 25/04/2018
Topic: Open-AudIT 2.1 CSV Macro Injection Risk: Low Text:Hi Guys, # Exploit Title: Open-AudIT 2.1 - CSV Macro Injection Vulnerability # Google Dork: N/A # Date: 21-...
Sureshbabu Narvaneni
Datashahr Social network android application login bypass 25/04/2018
Topic: Datashahr Social network android application login bypass Risk: Low Text:Tested on= Android Version= 2.4.0 and 2.9.1 (Last version) Description: The site of DataShahr with over 100,000 registered...
Ali Abdollahi

Western Digital My Cloud EX2 NAS Device Leaks Files 25/04/2018
Default configuration of WD’s My Cloud storage device keeps port open for unprivileged data exfiltration within a network.
Tom Spring
Metamorfo Targets Brazilian Users with Banking Trojans 25/04/2018
In an unusual move, Metamorfo abuses legitimate, signed Windows binaries to load the malicious code.
Tara Seals
Europol Smacks Down World’s Largest DDoS-for-Hire Market 25/04/2018
Webstresser[.]org, a DDoS-for-hire market believed to be behind at least 4 million cyberattacks around the world, has served up its last internet-paralyzing traffic tsunami.
Tara Seals
Researchers Hacked Amazon’s Alexa to Spy On Users, Again 25/04/2018
Researchers discovered a flaw in Amazon’s Alexa virtual assistant that enabled them to eavesdrop on consumers with smart devices – and automatically transcribe every word said.
Lindsey O'Donnell
Bezop Cryptocurrency Server Spills 25K in Private Investor, Promoter Data 25/04/2018
A leaky Mongo database exposed personal information of 25,000 investors and potential investors tied to the Bezop cryptocurrency.
Tom Spring
Podcast: Why Manufacturers Struggle To Secure IoT 25/04/2018
Too often, many IoT device manufacturers are opting to leave out costly security features for their small, low power connected devices.
Lindsey O'Donnell
Exploit Targets Nvidia Tegra-Based Nintendo Systems 24/04/2018
Researchers have found an exploit in Nvidia Tegra X1-based systems that they say cannot be patched.
Lindsey O'Donnell
Orangeworm Mounts Espionage Campaign Against Healthcare 24/04/2018
The group uses a custom, worm-like backdoor called Kwampirs that exploits legacy systems for laser-focused, comprehensive corporate espionage.
Tara Seals
Ransomware Attack Hits Ukrainian Energy Ministry, Exploiting Drupalgeddon2 24/04/2018
It looks like this is the work of amateurs, not nation-state attackers bent on making a geopolitical point, making use of the recently patched Drupal vulnerability.
Tara Seals
Muhstik Botnet Exploits Highly Critical Drupal Bug 23/04/2018
A botnet has exploited a highly critical Drupal CMS vulnerability, which was previously disclosed by Drupal in March.
Lindsey O'Donnell

Publicités