Indian National Informatics Site(NIC) Hacked !!!

Indian hackers Code injector and Yash have breached the Indian National Informatics centre website(NIC.in) , the exclusive registrar for government domains (.gov.in).

According to Cyber News report, the hackers claimed to have uploaded a PHP based shell over the site and gained complete control over the Indian domains managed by NIC.

Image uploaded in  NIC

However, since hackers are from India and since they are patriotic hackers , they have sent notification about the vulnerability to NIC Department.

To demonstrate the fact that they have gained access , the hackers just uploaded an image file and a text file in the files directory.

The hack was done with a upload Misconfigured section. Hackers claimed to have Modified the Section with a Complete patch to prevent other hackers to exploit the Indian NIC.

Two XSS Vulnerabilities found in Mediafire Site by THER00tC0de

Vulnerability in Mediafire :

An Security Researches with handle name " TheR00tC0de" has found two Cross Scripting (XSS) Vulnerabilities in the most famous file hosting website "Mediafire"

In an email Sent to some sites, the researcher provided the two vulnerable links that executes the code injected by hacker. 

XSS Vulnerability in Mediafire

The researcher claimed that he sent notification about the vulnerability to Mediafire Team and waiting for their response.  The researcher asked the site owners not to publish the vulnerable link.  

And many have confirmed those vulnerabilities . But this type of vulnerability can be used only in social engineering attacks ,So it cannot be mostly used to deface large sites like Mediafire,So we hope our files are safe ;)

Recently, a security researcher - Mahadev Subedi identified a XSS vulnerability in the File Uploading service of Mediafire .

Remote Root access vulnerability in Routers with Broadcom chipsets

DefenseCode researchers have discovered a critical security vulnerability that allows remote unauthenticated attacker to remotely execute arbitrary code under root privileges in the UPnP (Universal Plug and Play) implementation developed by Broadcom and used by many routers with Broadcom chipsets.

Routers with vulnerable Broadcom UPnP stack are mostly based on Broadcom chipset. "We have found that, in fact, same vulnerable firmware component is also used in at least two other Cisco Linksys models - WRT54G3G and probably WRT310N. Could be others." researchers said.

The vulnerability is located within the wanipc and wanppp modules of the Broadcom UPnP stack, which is used by manufacturers that deliver routers based on the Broadcom chipset. The UPnP service is intended to be used on local networks, but Rapid7 found that there are over 80 million devices on the Internet that respond to UPnP discovery requests, making them vulnerable to remote attacks.

The vulnerability can be exploited to read the memory of a device that uses the vulnerable Broadcom UPnP stack or to write arbitrary values at arbitrary addresses in its memory.

Full exploit was previously demonstrated in a video on Cisco Linksys WRT54GL, that is also based on Broadcom UPnP stack. DefenseCode hasn't compiled a complete list with affected router models, but believes that some devices from Broadcom, Asus, Cisco, TP-Link, Zyxel, D-Link, Netgear, USRobotics and other vendors probably use the vulnerable Broadcom UPnP stack.

Buffer Overflow Vulnerability in VLC Player

VideoLAN recently published a security advisory warning of a buffer overflow vulnerability in versions 2.0.5 and earlier of VLC Media Player, which might be exploited to execute arbitrary code. This vulnerability was reported by Debasish Mandal , a vulnerabilty researcher

   The vulnerability is caused due to an error in the “DemuxPacket()” function (modules/demux/asf/asf.c) when processing ASF files and can be exploited to cause a buffer overflow via a specially crafted ASF file. To exploit the vulnerability, a user must explicitly open a specially crafted ASF movie. 

Successful exploitation may allow execution of arbitrary code, but requires tricking a user into opening a malicious file. 

VideoLAN advises users to refrain from opening files from untrusted locations and to disable the VLC browser plug-ins until the issue is patched. A patch will be included in VLC 2.0.6, the next version of the media player, which is only available for testing purposes at the moment.