Lucene search

K

WordPress Bitcoin Payments – Blockonomics Security Vulnerabilities

packetstorm

0.2AI Score

2011-01-01 12:00 AM
22
thn
thn

Russian payment processor ChronoPay.com Hacked !

Criminals this week hijacked ChronoPay.com, the domain name for Russia's largest online payment processor, redirecting hundreds of unsuspecting visitors to a fake ChronoPay page that stole customer financial data. Reached via phone in Moscow, ChronoPay chief executive Pavel Vrublevsky said the...

6.8AI Score

2010-12-31 01:02 AM
1
threatpost
threatpost

Threatpost's List of the Top 10 Security Top 10 Lists

Ever since the traditional print industry collapsed in on itself like a decommissioned ‘Vegas casino, replaced with blogs, micro blogs, social networking and other forms of Web based publishing, the end of the year has brought with it a blizzard of retrospective and prospective Top 10 lists from...

-0.5AI Score

2010-12-30 07:23 PM
19
threatpost
threatpost

Threatpost's Five Security Trends to Watch in 2011

2010 ended with dire predictions about a new age of Internet enabled hacker-activism, but the big story in 2011 will be the explosion in IP enabled, loosely secured, Internet connected stuff. It’s the time of year when all of us gaze into the crystal ball and think of what the next 12 months has...

0.5AI Score

2010-12-29 04:59 PM
12
threatpost
threatpost

Hacking Tool Used By Anonymous Could Reveal Users Identity

A new study finds that a tool used to carry out distributed denial of service (DDoS) attacks on behalf of whistle blower Web site Wikileaks may, itself, leak the identity of those running the software. Researchers from the University of Twente, Netherlands, looked at the Low Orbit Ion Cannon...

0.6AI Score

2010-12-13 07:40 PM
7
thn
thn

Anonymous Clarifies Its Identity and Mission in Recent Statement

On December 10, 2010, Anonymous released a press statement to clarify its identity and objectives. Who is Anonymous? Anonymous, often misunderstood, is not a conventional group. Instead, it is an internet gathering without formal structure. Both Anonymous and the media acknowledge the perceived...

6.9AI Score

2010-12-11 02:52 PM
4
threatpost
threatpost

Week in Security: More Wikileaks Fallout, Cybersecurity Buzz and Browser Updates

The words “cyber war” were in the headlines this week, as controversy and debate about the leak of confidential diplomatic cables by Wikileaks reached a fever pitch. As speculation turned to the fallout from the ongoing publication of documents, the U.S. government laid the groundwork to prevent...

-0.6AI Score

2010-12-10 04:52 PM
5
thn
thn

Dutch Police Arrest 16-Year-Old for Pro-WikiLeaks Cyber Attacks

Dutch authorities announced the arrest of a 16-year-old hacker involved in the pro-WikiLeaks attacks on the websites of MasterCard and PayPal. The Dutch National Prosecutors Office reported that the teen, whose name was not disclosed, was arrested by a high-tech crime team last night. The arrest...

6.9AI Score

2010-12-10 10:46 AM
4
threatpost
threatpost

Twitter Locks Out Wikileaks DDoS Group As Attacks Spread

Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service (DoS) attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its...

1.1AI Score

2010-12-09 04:44 PM
18
thn
thn

Hackers Target MasterCard and Visa in Support of WikiLeaks

Hackers rushed to defend WikiLeaks on Wednesday, launching attacks on MasterCard, Visa, Swedish prosecutors, a Swiss bank, and others who acted against the site and its jailed founder, Julian Assange. Internet "hacktivists" under the banner "Operation Payback" claimed responsibility in a Twitter...

7.2AI Score

2010-12-09 04:36 AM
3
threatpost
threatpost

Wikileaks Roundup: Assange Arrested, Visa, MC Cut Ties

OK. It’s been just over a week since information leaking Web site Wikileaks released the first installment of leaked U.S. diplomatic cables, with each day bringing new documents from the purported hoard of some 250,000 pages, and new developments from a range of very pissed off Western...

-0.2AI Score

2010-12-07 04:48 PM
5
threatpost
threatpost

PayPal Drops Wikileaks, Denies DDoS Attack

Paypal confirmed on Monday that it “permanently restricted” the account used by Wikileaks, citing a violation of its Acceptable Use Policy. The action was just the latest by government and private sector organizations in response to the recent publication of leaked diplomatic cables from the U.S......

0.7AI Score

2010-12-06 09:31 PM
25
threatpost
threatpost

Researchers Tracking Emerging Darkness Botnet

Researchers are tracking a new botnet that has become one of the more active DDoS networks on the Internet since its emergence early last month. The botnet, dubbed “Darkness,” is being controlled by several domains hosted in Russia and its operators are boasting that it can take down large sites...

AI Score

2010-12-06 03:15 PM
7
threatpost
threatpost

8) Your next wallet is a phone. Discuss.

Mobile payments have been going strong in countries like Japan and Finland for years now. In the U.S., however, its taken longer for mobile payments to get a hold on consumers. That’s all about to change. Late model mobile devices like Apple’s iPhone and Google Android-based phones now offer...

0.4AI Score

2010-11-30 03:53 PM
5
threatpost
threatpost

New GpCode Variant Demanding Cash For Decryption Key

There’s a new version of the venerable GpCode ransomware attack making the rounds right now, demanding payments of $120 in order to decrypt files on infected PCs. This version, which has been active for several days now, is different from previous variants in that it overwrites the original files,....

0.5AI Score

2010-11-29 06:32 PM
7
threatpost
threatpost

New Browsing Tool Keeps Firesheep At Bay

Weeks after researchers unveiled Firesheep, the Firefox Web browser plugin that makes it easy to snoop on strangers’ Facebook, Flickr and other Web 2.0 sessions, a software update from the Electronic Frontier Foundation promises to secure more Web sessions from Firesheep-enabled snooping. The...

-0.6AI Score

2010-11-23 08:05 PM
2
threatpost
threatpost

Dissecting the ZeroAccess Rootkit

The ZeroAccess rootkit isn’t the most well-known or closely watched piece of malware in recent history, but, as an extremely detailed new analysis of the program shows, it is a perfect example of the kind of sophisticated malware that attack crews are using to maintain persistent, silent access to....

1.1AI Score

2010-11-18 07:04 PM
5
threatpost
threatpost

Malicious URLs Pose Mobile Hijacking Risk

The security of mobile devices may be at risk for Web borne attacks because of loose policies for processing URLs (Uniform Resource Locators), according to a report by security researcher Nitesh Dhajani. Writing on the SANS Application Security Blog, Dhanjani said that that way the iPhone’s...

-0.2AI Score

2010-11-09 05:39 PM
4
threatpost
threatpost

Week in Review: Mobile Madness, Firesheep Speaks Up, Myanmar Knocked Offline

The specter of politically motivated cyber attacks reared its head again this week, while closer to home, the names of two software giants: Google and Adobe were all over the headlines when it came to security this week, as several bugs were found…and fixed in the companies products. Read on for...

0.3AI Score

2010-11-05 07:33 PM
7
threatpost
threatpost

Wells Fargo, BoA Cited For Lax Mobile App Security

Days after publishing a report on serious security lapses in the PayPal mobile payments application for the iPhone, a Chicago firm has released an analysis that finds similar problems in a mobile banking applications by Bank of America and Wells Fargo. The report, published on Thursday by...

-0.4AI Score

2010-11-05 04:52 PM
7
threatpost
threatpost

Google Fixes 10 High-Risk Bugs in Chrome

Google has released a new version of its Chrome browser, fixing a number of high-risk security bugs and paying out $7,500 in bounties to researchers who reported bugs. Google Chrome 7.0.517.44 also includes an updated version of Adobe’s Flash Player that fixes the bug that Adobe is patching...

1.2AI Score

2010-11-04 05:22 PM
4
threatpost
threatpost

Firm Finds Gaping Holes in Mobile Payments Applications

eBay’s PayPal online payment division is rushing a software patch to users of its iPhone mobile payments application to plug a hole that leaves users vulnerable to man-in-the-middle and phishing attacks, but the firm that found that hole said transaction security is just one problem facing the...

0.2AI Score

2010-11-04 03:22 PM
10
threatpost
threatpost

Attackers Now Using Honeypots to Trap Researchers

Attackers are constantly changing their tactics and adapting to what the security community and researchers are doing, and it’s not unusual for the bad guys to adopt techniques used by their adversaries. The latest example of this is a malware gang that has deployed what amounts to a honeypot...

1.5AI Score

2010-11-04 02:52 PM
2
zdt
zdt

Forced Matrix Script Remote Upload Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-10-26 12:00 AM
24
threatpost
threatpost

Security Week In Review: Evercookies, SQL Slammer and a Flood of Patches

This week seemed to be all about the numbers as a handful of reports were released, disclosing new stats on phishing, information theft and spam. Evercookies, the inside story of SQL Slammer, and of course, the usual array of patches, rounded out the week. Read on for the full week in review. The.....

-0.1AI Score

2010-10-22 05:51 PM
3
threatpost
threatpost

Researcher Develops Small Device to Intercept, Modify Electronic Payments

With bank fraud and attacks against financial institutions and online banking applications having turned into an epidemic, researchers, banks and other concerned parties have been looking for new ways to protect the integrity of financial transactions. A researcher at the University of Cambridge...

0.3AI Score

2010-10-21 07:04 PM
10
packetstorm

0.3AI Score

2010-09-29 12:00 AM
32
threatpost
threatpost

Stuxnet Fallout: Microsoft Patches Critical Print Spooler Hole

Microsoft patched a zero day vulnerability in Windows Print Spooler that was used by Stuxnet and says that cross vendor cooperation may be the silver lining to the Stuxnet attack. Microsoft on Tuesday announced a software update to close a critical hole in a common service used by WIndows XP...

-0.2AI Score

2010-09-14 03:02 AM
5
threatpost
threatpost

Malwarians at the Gate: Banks, Businesses and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked...

-0.1AI Score

2010-09-13 01:45 PM
2
threatpost
threatpost

Malwarians at the Gate: Banks, Business Customers and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud? You left your car unlocked. When you return, it was vandalized...

-0.7AI Score

2010-09-10 06:16 PM
6
threatpost
threatpost

Malwarians at the Gate: Banks, Business Customers and ACH Fraud

Banks and their customers are on opposite ends of a feud over which is responsible when online banking accounts get hacked and pillaged. But where does the fault really lie? And is there a cure for the plague of online banking fraud? You left your car unlocked. When you return, it was vandalized...

-0.7AI Score

2010-09-10 06:16 PM
2
zdt
zdt

eMeeting dating Persistent XSS

Exploit for php platform in category web...

7.1AI Score

2010-08-12 12:00 AM
21
zdt
zdt

Booking System for Planyo Multiple VUlnerabilty

Exploit for php platform in category web...

7.1AI Score

2010-08-11 12:00 AM
23
threatpost
threatpost

Mozilla Bumps Bug Bounty to $3,000

In an effort to enlist more help finding bugs in its most popular software, such as Firefox, Thunderbird and Firefox Mobile, Mozilla is jacking up the bounty it pays to researchers who report security flaws to $3,000. The new price tag is a major increase over the payment of $500 with which the...

-0.6AI Score

2010-07-16 11:50 AM
16
zdt
zdt

Joomla Component com_rentalot SQL Injection Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-07-08 12:00 AM
26
packetstorm

0.2AI Score

2010-07-06 12:00 AM
15
packetstorm

AI Score

2010-07-06 12:00 AM
25
zdt
zdt

Bs Home_Classifieds Script Sql injection Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-07-05 12:00 AM
17
zdt
zdt

Bs Auto_Classifieds Script (search) Sql injection Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-07-05 12:00 AM
17
zdt
zdt

Bs Auto_Classifieds Script (articlesdetails) Sqli Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-07-05 12:00 AM
17
exploitdb

7.4AI Score

2010-07-05 12:00 AM
23
exploitpack
exploitpack

Bs Auto_Classifieds Script - articlesdetails.php SQL Injection

Bs Auto_Classifieds Script - articlesdetails.php SQL...

AI Score

2010-07-05 12:00 AM
13
exploitpack
exploitpack

Bs Home_Classifieds Script - SQL Injection

Bs Home_Classifieds Script - SQL...

0.2AI Score

2010-07-05 12:00 AM
13
exploitpack
exploitpack

Netartmedia iBoutique.MALL - SQL Injection

Netartmedia iBoutique.MALL - SQL...

0.9AI Score

2010-06-28 12:00 AM
17
exploitdb

7.4AI Score

2010-06-28 12:00 AM
28
packetstorm

0.4AI Score

2010-06-23 12:00 AM
19
zdt
zdt

PHP E-Mall SQL Injection & Xss Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-06-21 12:00 AM
12
packetstorm

0.4AI Score

2010-06-19 12:00 AM
16
zdt
zdt

AdMan Standalone Ad Server XSS / SQL Injection Vulnerability

Exploit for php platform in category web...

7.1AI Score

2010-06-18 12:00 AM
16
Total number of security vulnerabilities6256