Tag Archives | exploits

No BEAST Fix From Microsoft In December Patch Tuesday – But They Fixed Duqu Bug

December 15, 2011 | 8,153 views

It looks like Microsoft originally had a patch for the BEAST vulnerability, but for some reason they have withdrawn it for the December Patch Tuesday. It’s a pretty bumper crop of patches though with 13 bulletins and 19 vulnerabilities fixed, the highest profile one being a patch for the zero-day vulnerability exploited by Duqu. The […]

Tweet22

+16

Share7

Shares 35

Tags: beast, beast bug, duqu, duqu bug, exploits, hacking microsoft, hacking-windows, microsoft, microsoft security, patch-tuesday, patches, vulnerabilities, windows-security

Posted in: Countermeasures, Exploits/Vulnerabilities, Malware, Windows Hacking | Add a Comment

FreeBSD Local Root Escalation Vulnerability

September 15, 2009 | 20,928 views

It’s been a long time since we’ve heard about a problem with FreeBSD, partially because the mass of people using it isn’t that large and secondly because BSD tends to be pretty secure as operating systems go. It’s a pretty serious flaw this time with root escalation, thankfully it’s only a local exploit though and […]

Shares 0

Tags: exploits, freebsd, freebsd kqueue bug, freebsd null pointer, freebsd root exploit, freebsd root vulnerability, freebsd security, local root escalation, null pointer deference, race condition, root escalation, vulnerabilities

Posted in: Exploits/Vulnerabilities, Linux Hacking | Add a Comment

Apache.org Hacked Using Remote SSH Key

September 2, 2009 | 10,071 views

Apache.org has been hacked quite a number of this times, last week it happened again and the whole infrastructure was down for a few hours while they sorted out what had happened and how to remedy it. Apparently one the remote SSH keys was compromised allowed attacked to upload code, the scary part is they […]

Shares 0

Tags: apache ssh remote key, apache.org, apache.org patched, exploits, hacking apache.org, hacking-apache, ssh remote key, vulnerabilities

Posted in: Exploits/Vulnerabilities, Linux Hacking | Add a Comment

WordPress 2.8.3 Admin Reset Exploit

August 12, 2009 | 54,798 views

Ah it’s WordPress again, sometimes I wonder how many holes there are in WordPress. I guess a dedicated attacker could find some serious ones with the complexity of the code base. It’s suspected some of the recent high profile breaches have come from WordPress exploits. The latest one to become public is a simple but […]

Share8

Share1

Shares 9

Tags: exploits, hacking-wordpress, vulnerabilities, Web Hacking, web-application-security, wordpress, wordpress 2.8.3 exploit, wordpress admin reset bug, wordpress bug, wordpress-exploit, wordpress-security, wordpress-vulnerability

Posted in: Exploits/Vulnerabilities, Web Hacking | Add a Comment

Damn Vulnerable Web App – Learn & Practise Web Hacking

July 15, 2009 | 21,759 views

Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is damn vulnerable. Its main goals are to be light weight, easy to use and full of vulnerabilities to exploit. Used to learn or teach the art of web application security. Vulnerabilities SQL Injection XSS (Cross Site Scripting) LFI (Local File Inclusion) RFI (Remote […]

Share1

Shares 1

Tags: damn vulnerable web app, exploits, hacking-websites, lfi, mysql, PHP, php mysql, practise web hacking, rfi, vulnerabilities, vulnerable web app, vulnerable web application, Web Hacking, web-application-security, web-security

Posted in: Exploits/Vulnerabilities, Programming, Web Hacking | Add a Comment

BugSpy – Crawls The Web For Open Source Software Bugs

May 21, 2009 | 4,379 views

BugSpy is an interesting web site I came across recently, put together using a Python Framework (django) it aggregates bugs from as many open source projects as it can find. Preferably critical bugs. You can search by tag (e.g java, email or php ) or by product name (e.g Ubuntu, Typo3 or Samba). http://bugspy.net/

Shares 0

Tags: bug aggregator, bugspy, exploits, hacking open source software, open source software bugs, vulnerabilities

Posted in: Exploits/Vulnerabilities, Web Hacking | Add a Comment

Hackers Target 0-Day Vulnerability In Adobe PDF Reader & Acrobat

February 23, 2009 | 5,655 views

Another flaw in the Adobe product suite! It seems like PDF is turning into a complex animal, complexity of course always brings more security issues. It was only back in February last year when there was a bug in Adobe Reader, and almost exactly a year later another one. This time it’s a zero-day just […]

Shares 0

Tags: abobe pdf exploit, adobe, adobe acrobat, adobe exploit, adobe pdf, adobe pdf 0day, adobe pdf vulnerability, adobe pdf zero day, adobe vulnerability, exploits, malware

Posted in: Exploits/Vulnerabilities, Malware | Add a Comment

Secunia Personal Software Inspector (PSI) 1.0

December 9, 2008 | 5,044 views

To continue with some software targeted towards security and self-protection after posting about Microsoft Baseline Security Analyzer (MBSA) and Microsoft Security Assessment Tool (MSAT) we continue with one more – Secunia Personal Software Inspector. We did write about this software way back when Secunia first came out with their Secunia Software Inspector. There’s now 3 […]

Shares 0

Tags: computer-security, Countermeasures, data-security, desktop security, desktop vulnerability scanner, exploits, personal software inspector, personal software security, protection, psi, secunia, Security Software, vulnerabilities

Posted in: Countermeasures, Exploits/Vulnerabilities, Security Software | Add a Comment

Modern Exploits – Do You Still Need To Learn Assembly Language (ASM)

September 22, 2008 | 30,307 views

This is a fairly interesting subject I think as a lot of people still ask me if they are entering the security field if they still need to learn Assembly Language or not? For those that aren’t what it is, it’s pretty much the lowest level programming languages computers understand without resorting to simply 1’s […]

Shares 49

Tags: asm, assembly language, developing exploit, exploit coding, exploit-development, exploits, hacking, hacking code, learn assembly, learn assembly language, pc assembly language, pen-testing, shellode, vulnerabilities, writing shellcode, x86

Posted in: Exploits/Vulnerabilities, Programming | Add a Comment

Google Releases New Browser Chrome – Vulnerabilities on First Day

September 9, 2008 | 5,421 views

So as most of you probably know the big buzz on the Internet last week was that Google (after supporting Firefox for so long) have actually launched their own browser. It’s cooled Google Chrome. Now of course in typical Google fashion they call it BETA software, and a number of flaws have popped up during […]