Attackers Find Point-of-Sale Software an Easy Target

While most consumers worry about their credit card or debit card numbers or other valuable data being stolen from their home computers or leaked via a data breach at their banks, a new report shows that the vast majority of attacks that harvest this sensitive data actually target weak software on...

Texas Man admits hacking into e-commerce servers of NASA !

A Texas man has admitted hacking into servers owned by an e-commerce company and making off with about $275,000. Jeremey Parker of Houston also copped to charges of breaking into servers maintained by NASA's Goddard Space Flight Center in Maryland and causing some $43,000 of damage. The hacking...

Peel E-Commerce / Shopping SQL Injection

!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : peelinject.py Coder : baltazar a.k.a b4ltazar Version : 0.1 greetz for d3hydr8, rsauron,...

HOLD — HBGary Federal News…

HBGary Federal, the beleagured security startup that has been the target of the online mischief making group Anonymous for the last week said on Monday that it was ceasing operations | its CEO Aaron Barr was stepping down. The consulting firm, a wholly owned subsidiary of HBGary Inc., had been...

Still Smarting, Anonymous Releases 20,000 More HBGary Emails

More e-mail messages believed to belong to HBGary Federal Chief Operating Officer Greg Hoglund were posted online Sunday, fulfilling a promise by online mischief making group Anonymous to further embarrass the Washington D.C. security firm, whose CEO aroused the ire of the hacktivists last week. ...

Anonymous hackers Expose HBGary plan to destroy WikiLeaks !

Data released as part of a hacking attack by the Anonymous group has shown what appears to be a corporate plan to destroy WikiLeaks. Last week Aaron Barr, head of security services firm HBGary Federal, claimed to have infiltrated the Anonymous hacking group leadership and was able to identify key...

Launching AnonLeaks, Ready To Dump More HBGary E-mails !

Anonymous used to be all about disrupting the Web sites of companies that helped block WikiLeaks' funding. Now it's starting to act like WikiLeaks itself. The group is planning, as early as today, to release 27,000 e-mails from the server of Greg Hoglund, the chief executive of software security...

Egypt Shut Down Net With Big Switch, Not Phone Calls !

The Egyptian government shut down most of its country's internet not by phoning ISPs one at a time, but by simply throwing a switch in a crucial data center in Cairo. That according to a February presentation to the Department of Homeland Security's Infosec Technology Transition Council. The...

Os-Commerce CSRF Vulnerability (Add Admin)

Exploit for php platform in category web applications Exploit Title: Os-Commerce CSRF Vulnerability Add Admin Google Dork: Powered by Oscommerce // allinurl:productinfo.php?cPath Date: 01/26/2011 Author:Saidinh0 Software Link:http://oscommerce.com/ Home: http://english7.info Version: v 3.1 Tested...

US Enhancing Online Security !

U.S. Commerce Secretary Gary Locke and White House Cybersecurity Coordinator Howard Schmidt announced this month plans to create a National Program Office to help foster an environment in which sensitive online transactions can be carried out with greater levels of trust. The announcement was mad...

IPN Development Handler 2.0 SQL Injection / Cross Site Request Forgery

IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ === Exploit === IPN Development Handler...

IPN Development Handler 2.0 - Multiple Vulnerabilities

IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ === Exploit === IPN Development Handler...

Future Group's E-Commerce Portal Hacked, Disrupting Online Sales

Future Group's plan to boost online sales has encountered a cyber obstacle. Its flagship e-commerce portal, FutureBazaar, was hacked and has been non-functional for the past two days. FutureBazaar CEO Rajiv Prakash described the incident as a "denial of service attack." He stated, "The website ha...

Google and Godaddy Head Coalition Against Rogue Pharmacies

Herbal Viagra peddlers beware: Google and GoDaddy are coordinating the establishment of a non-profit organization dedicated to curbing the spread of illegal online pharmaceutical companies. The two firms plan to share information and work together to educate consumers about the dangers of buying...

CVE-2010-2639

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...

Design/Logic Flaw

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...

CVE-2010-2639

CVE-2010-2639 affects IBM WebSphere Commerce Enterprise 7.0 prior to 7.0.0.2. The issue arises from access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, tied to caching of mutable objects and concurrency issues, enabling remote attackers to read messages intended for o...

CVE-2010-2639

IBM WebSphere Commerce Enterprise 7.0 before 7.0.0.2 allows remote attackers to read messages intended for other recipients via vectors involving access by the outbound messaging system to the RunTimeProfileCacheCmdImpl class, related to the caching of mutable objects and "concurrency issues."...

Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity

Exploit for asp platform in category web applications ===================================================================== Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity =====================================================================...

7) Reputation matters – check it!

When you walk into a doctor’s office, you like to see those frames hanging, right? The degrees from the prestigious medical school and certificates of completion from a reputable hospital residency program? The license from your state’s Board of Registration in Medicine, maybe? They don’t mean yo...