OpenELEC and RasPlex devices have a hardcoded password for the root account, which makes it easier for remote attackers to obtain access via an SSH session.
Monthly Archives: February 2016
Adwind: Malware-as-a-Service Platform that Hit more than 400,000 Users and Organizations Globally
Carbanak and beyond: banks face new attacks
Remtasu is disguising itself as a tool to appropriate Facebook accounts
Almost a year ago we warned about the spreading of Remtasu, and far from lessening, we have been able to identify numerous instances of this threat being propagated further.
The post Remtasu is disguising itself as a tool to appropriate Facebook accounts appeared first on We Live Security.
Breaking — India Bans Facebook's Free Basics Service
Facebook’s Free Basics Internet service has been Blocked in India.
The Telecom Regulatory Authority of India (TRAI) has banned mobile carriers and broadband providers to charge customers based on what services or content they access over the Internet.
Under Prohibition of Discriminatory Tariffs for Data Services Regulations, 2016, “no service provider shall offer or charge
Hackers behind Dyre Malware Busted in Police Raid
The world’s most notorious financial hacking operation disrupted by Russian authorities in November, when they raided the offices associated with a Moscow-based film and production company named 25th Floor.
According to the Russian authorities, 25th Floor was allegedly involved in distributing the notorious password-stealing malware known as Dyre Banking Trojan.
Malware Costs Hundreds
PressePortal NewsAktuell (DPA) – Multiple Vulnerabilities
Posted by Vulnerability Lab on Feb 08
Document Title:
===============
PressePortal NewsAktuell (DPA) – Multiple Vulnerabilities
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1676
Vulnerability Magazine:
http://magazine.vulnerability-db.com/?q=articles/2016/02/08/researcher-uncovers-multiple-sql-injection-vulnerabilities-dpa-presseportal
Release Date:
=============
2016-02-08
Vulnerability Laboratory ID (VL-ID):…
Ebay Inc (Pages) – Client Side Cross Site Scripting Vulnerabilities
Posted by Vulnerability Lab on Feb 08
Document Title:
===============
Ebay Inc (Pages) – Client Side Cross Site Scripting Vulnerabilities
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1626
Release Date:
=============
2016-02-07
Vulnerability Laboratory ID (VL-ID):
====================================
1626
Common Vulnerability Scoring System:
====================================
3.4
Product & Service Introduction:…
Alsovalue CMS 2016Q1 – SQL Injection Web Vulnerability
Posted by Vulnerability Lab on Feb 08
Document Title:
===============
Alsovalue CMS 2016Q1 – SQL Injection Web Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1714
Release Date:
=============
2016-02-08
Vulnerability Laboratory ID (VL-ID):
====================================
1714
Common Vulnerability Scoring System:
====================================
7.7
Abstract Advisory Information:
==============================…
Getdpd BB #4 – (name) Persistent Validation Vulnerability
Posted by Vulnerability Lab on Feb 08
Document Title:
===============
Getdpd BB #4 – (name) Persistent Validation Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1568
ID: #14772
Release Date:
=============
2016-02-08
Vulnerability Laboratory ID (VL-ID):
====================================
1568
Common Vulnerability Scoring System:
====================================
3.8
Product & Service Introduction:…