Firebook 3.100328 Cross Site Scripting / Disclosure

Hello list! I want to warn you about Insufficient Anti-automation, Abuse of Functionality, Information Leakage and Cross-Site Scripting vulnerabilities in Firebook. SecurityVulns ID: 11396. ------------------------- Affected products: ------------------------- Vulnerable are Firebook 3.100328 and...

Новые уязвимости в Firebook

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Abuse of Functionality, Information Leakage и Cross-Site Scripting уязвимостях в Firebook. Insufficient Anti-automation WASC-21: http://site/index.html?mailto=MG1112008878;file=path/to/guestbook/message.html; На...

SimpGB 1.49.02 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting, Brute Force, Insufficient Anti-automation and Abuse of Functionality vulnerabilities in SimpGB. ------------------------- Affected products: ------------------------- Vulnerable are SimpGB v1.49.02 and previous versions. ---------- Detail...

Новые уязвимости в SimpGB

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Brute Force, Insufficient Anti-automation и Abuse of Functionality уязвимостях в SimpGB. XSS WASC-08: POST запрос на странице http://site/guestbook.php в параметрах poster, postingid и location в функции Preview. Если в...

New Zealand websites hacked for child porn links !

Dozens of New Zealand based websites are infected with malicious software which directs users to child abuse material. They are mostly legitimate small business sites which have been hacked to produce links to paedophile pornography. The problem first appeared in Italy but has spread to sites in ...

Abuse of social networking sites misused among youth in Kochi !

while engaging in online social networking sites seemed to have yielded little results, if the statistics and current trends are any indication. The Cyber Cell of the City Police has received more than 40 complaints of abuse of social networking sites like Orkut and Facebook this year itself. In...

Новые уязвимости в eSitesBuilder

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting, Insufficient Anti-automation и Abuse of Functionality уязвимостях eSitesBuilder. Это украинская коммерческая CMS - движок для онлайн магазинов. XSS WASC-08:...

Новые уязвимости в Joomla

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation, Abuse of Functionality и Cross-Site Scripting уязвимостях в Joomla. Уязвимости имеют место в компоненте commailto, который является стандартным компонентом Joomla. Детально о подобных Insufficient Anti-automation и...

Joomla 1.5.22 Cross Site Scripting

Hello Full-Disclosure! I want to warn you about Insufficient Anti-automation, Abuse of Functionality and Cross-Site Scripting vulnerabilities in Joomla. Vulnerabilities exist in component commailto, which is a core component of Joomla. ------------------------- Affected products:...

Уязвимости в Joomla

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Abuse of Functionality уязвимостях в Joomla. Уязвимости имеют место в компоненте comcontact, который является стандартным компонентом Joomla. Детально о подобных уязвимостях, о рассылке спама через сайты и создании...

ViArt SHOP 4.0.5 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================= ViArt SHOP 4.0.5 Multiple Vulnerabilities ========================================= Title: ViArt SHOP multiple vulnerabilities Date: 18.11.2010 Author: Ariko-Security Software Link: http://www.viart.co...

ViArt Shop 4.0.5 - Multiple Vulnerabilities

ViArt Shop 4.0.5 - Multiple Vulnerabilities Title: ViArt SHOP multiple vulnerabilities Date: 18.11.2010 Author: Ariko-Security Software Link: http://www.viart.com Version: 4.0.5 ============ Ariko-Security - Advisory 2/11/2010 ============= ViArt SHOP multiple vulnerabilities Vendor's Description...

ViArt Shop 4.0.5 - Multiple Vulnerabilities

Title: ViArt SHOP multiple vulnerabilities Date: 18.11.2010 Author: Ariko-Security Software Link: http://www.viart.com Version: 4.0.5 ============ Ariko-Security - Advisory 2/11/2010 ============= ViArt SHOP multiple vulnerabilities Vendor's Description of Software and demo:...

System: SCEP one-time PIN reuse

Red Hat Certificate System RHCS 7.3 and 8 and Dogtag Certificate System allow remote authenticated users to generate an arbitrary number of certificates by replaying a single SCEP one-time PIN...

HP System Management Homepage < 6.2 Multiple Vulnerabilities

Binary data 5667.prm...

HP System Management Homepage < 6.2 Multiple Vulnerabilities

According to its self-reported version number, the HP System Management Homepage install on the remote host is earlier than 6.2. Such versions are reportedly affected by the following vulnerabilities : - Session renegotiations are not handled properly, which could be exploited to insert arbitrary...

Catholic Diocese Loses $600K to Online Thieves

Organized cyber thieves stole more than $600,000 from the Catholic Diocese of Des Moines, Iowa earlier this month with the help of dozens of unwitting co-conspirators hired through work-at-home job scams, at least one of whom was told the money was being distributed to victims of the Catholic...

SimpleID 'index.php' Cross Site Scripting Vulnerability

This host is running SimpleID and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbsimpleidxssvuln.nasl 5373 2017-02-20 16:27:48Z teissa $ SimpleID 'index.php' Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright C 2010 Greenbone Networks Gmb...

Fedora 12 : quake3-1.36-7.svn1783.fc12 (2010-8558)

Wed May 12 2010 Xavier Lamien - 1.36-7.svn1783 - Update release to svn revision r1783. - Remove botlib-strcpy-abuse patch added upstream. - Thu Jan 21 2010 Hans de Goede 1.36-6 - Update fix autodlrc mirror URL's 557252 - Fri Dec 18 2009 Hans de Goede 1.36-5 - Modify Urban Terror launch script to...

Hardcoded credentials

WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, does not properly handle libxml contexts, allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted HTML document, related to an "API...