BackBox News
Latest news and insights on Security
Company Blogs
Hacking Tools
- SafeLine - Serve As A Reverse Proxy To Protect Your Web Services From Attacks And Exploits
- PolyDrop - A BYOSI (Bring-Your-Own-Script-Interpreter) Rapid Payload Deployment Toolkit
- Secator - The Pentester'S Swiss Knife
- Damn-Vulnerable-Drone - An Intentionally Vulnerable Drone Hacking Simulator Based On The Popular ArduPilot/MAVLink Architecture, Providing A Realistic Environment For Hands-On Drone Hacking
- File-Unpumper - Tool That Can Be Used To Trim Useless Things From A PE File Such As The Things A File Pumper Would Add
- Mass-Assigner - Simple Tool Made To Probe For Mass Assignment Vulnerability Through JSON Field Modification In HTTP Requests
- Imperius - Make An Linux Kernel Rootkit Visible Again
- BYOSI - Evade EDR's The Simple Way, By Not Touching Any Of The API's They Hook
- Psobf - PowerShell Obfuscator
- ModTracer - ModTracer Finds Hidden Linux Kernel Rootkits And Then Make Visible Again
Exploit DB
- [webapps] reNgine 2.2.0 - Command Injection (Authenticated)
- [webapps] openSIS 9.1 - SQLi (Authenticated)
- [webapps] dizqueTV 1.5.3 - Remote Code Execution (RCE)
- [webapps] Gitea 1.22.0 - Stored XSS
- [webapps] NoteMark < 0.13.0 - Stored XSS
- [webapps] Invesalius3 - Remote Code Execution
- [dos] Windows TCP/IP - RCE Checker and Denial of Service
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Authentication Bypass
- [webapps] Elber ESE DVB-S/S2 Satellite Receiver 1.5.x - Device Config
- [webapps] Elber Wayber Analog/Digital Audio STL 4.00 - Authentication Bypass
regreSSHion: Critical Vulnerability in OpenSSH Exposes Millions of Servers
/in General NewsA critical vulnerability in OpenSSH (regreSSHion) allows attackers full access to servers! Millions at risk. Learn how to…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Prudential Data Breach Victim Count Soars to 2.5M
/in General NewsThe company seemingly underestimated the severity of the breach after originally providing a head count of roughly 36,000 impacted individuals.
darkreading – Read More
‘RegreSSHion’ Bug Threatens Takeover of Millions of Linux Systems
/in General NewsThe high-severity CVE-2024-6387 in OpenSSH is a reintroduction of a 2006 flaw, and it allows unauthenticated RCE as root.
darkreading – Read More
Juniper Rushes Out Emergency Patch for Critical Smart Router Flaw
/in General NewsAlthough not yet exploited in the wild, the max-critical authentication bypass bug could allow adversaries to take over unpatched Juniper Session Smart Routers and Conductors, and WAN Assurance Routers, the company warns.
darkreading – Read More
PortSwigger Scores Hefty $112 Million Investment
/in General NewsThe British company behind the popular Burp Suite pen-test utilities has banked a massive $112 million investment from Brighton Park Capital.
The post PortSwigger Scores Hefty $112 Million Investment appeared first on SecurityWeek.
SecurityWeek – Read More
Cyber A.I. Group Announces Substantial Expansion of Acquisition Pipeline
/in General NewsPipeline Will Support Company’s Highly Proactive Buy & Build Business Model
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
3 New State-Backed Gangs Target Govt Sectors with HEAT Attack Methods
/in General NewsGlobal cyber gangs are evolving rapidly, wielding advanced techniques and enjoying state sponsorship. Menlo Security’s latest report exposes…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Critical Flaws in CocoaPods Expose iOS and macOS Apps to Supply Chain Attacks
/in General NewsA trio of security flaws has been uncovered in the CocoaPods dependency manager for Swift and Objective-C Cocoa projects that could be exploited to stage software supply chain attacks, putting downstream customers at severe risks.
The vulnerabilities allow “any malicious actor to claim ownership over thousands of unclaimed pods and insert malicious code into many of the most popular iOS and
The Hacker News – Read More
Australian Man Arrested for “Evil Twin” Wi-Fi Scam Targeting Travelers
/in General NewsAn Australian man faces charges for setting up fake Wi-Fi networks (“evil twins”) to steal data from unsuspecting…
Hackread – Latest Cybersecurity, Tech, Crypto & Hacking News – Read More
Do you still need to pay for antivirus software in 2024?
/in General NewsLandlines. Checkbooks. AM radio. Let’s add third-party antivirus software to the list of things you can stop using.
Latest stories for ZDNET in Security – Read More