CVE-2011-4809

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the HM Community comhmcommunity component before 1.01 for Joomla! allow remote attackers to inject arbitrary web script or HTML via the 1 language, 2 university, 3 persent, 4 companyname, 5 designation, 6 music, 7 books, 8 movies, 9 games, 10...

Sql injection

SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...

CVE-2011-4808

SQL injection vulnerability in the HM Community comhmcommunity component before 1.01 for Joomla! allows remote attackers to execute arbitrary SQL commands via the id parameter in a fndhome action to index.php...

Web of Trust (WOT) Wins in Court, Favors freedom of speech

Web of Trust WOT Wins in Court, Favors freedom of speech The world's leading safe surfing tool Web of Trust WOT has won the lawsuit filed against it in the United States. WOT was accused of defamation, violating rights, conspiracy and manipulating algorithms. The court of justice in Florida grant...

DNS Hijacks Now Being Used to Serve Black Hole Exploit Kit

Attackers have been going after various pieces of the DNS infrastructure for a long time now, and it’s not unusual for there to be somewhat organized campaigns that target certain vertical industries or geographic regions. But researchers lately have been seeing an interesting pattern of...

Hrithikrules.com Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: www.hrithikrules.com XSS vulnerability Date: 12/12/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : ©2010 HrithikRules.com site info : Hrithikrules is the...

Babylon Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: search.babylon.com XSS vulnerability Date: 12/11/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : babylon search engine,©Babylon inc. $ Vulnerable :...

"Enter at your own Risk" Cyber Security Awareness Campaign

"Enter at your own Risk" Cyber Security Awareness Campaign Coming this January , For the First time in Cyber History the Best, The Brightest & the Most Daring Come Together For an Information Extravaganza that will blow your Cyber Mind ! It's a time for us to offer education that increases online...

OSTP Announces New Cybersecurity R&D Plan

The Office of Science and Technology Policy OSTP released a new report yesterday that details plans to complement the nation’s existing cybersecurity policy, according to a blog entry on the office’s site co-authored by U.S. Chief Technology Officer Aneesh Chopra and Cybersecurity Coordinator...

GivingFirst Launches online Charity Processing Service

In the spirit of the Holiday Season, Coalfire has made a significant contribution to GivingFirst.org in the form of free Penetration Testing services. GivingFirst is a Denver-based community foundation whose mission is "to improve quality of life by increasing community generosity and involvement...

Nullcon GOA 2012 - International Security Conference

Nullcon GOA 2012 - International Security Conference The open security community is a registered non-profit society and by far the largest security community in India with more than 2000 members comprising of information security professionals, ethical hackers and law enforcement professionals...

[SECURITY] Fedora 15 Update: tomcat6-6.0.32-10.fc15

Tomcat is the servlet container that is used in the official Reference Implementation for the Java Servlet and JavaServer Pages technologies. The Java Servlet and JavaServer Pages specifications are developed by Sun under the Java Community Process. Tomcat is developed in an open and participator...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

w3af v.1.1 - Web Application Attack and Audit Framework Released

w3af v.1.1 - Web Application Attack and Audit Framework Released w3af is a Web Application Attack and Audit Framework. The project's goal is to create a framework to find and exploit web application vulnerabilities that is easy to use and extend. To read our short and long term objectives. w3af i...

DARPA to Hackers: Help, Please?

The Pentagon’s Defense Advanced Research Projects Agency DARPA, which is credited with helping to create the modern Internet, used a conference to call on hackers and other visionaries to help save it. DARPA’s Director, Dr. Regina Dugan used a speech at the DARPA Colloquium on Future Directions i...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

Sql injection

SQL injection vulnerability in viewphoto.php in 2daybiz Network Community Script allows remote attackers to execute arbitrary SQL commands via the alb parameter...

CVE-2010-5015

CVE-2010-5015 affects the 2daybiz Network Community Script, with a SQL injection in view_photo.php triggered via the alb parameter. The issue allows remote attackers to alter or retrieve data by crafting input that is not properly sanitized, as stated in the vulnerability description. Connected d...

Prosieben Community Code Injection

Title: ====== Prosieben Community Website - Persistent Script Code Inject Date: ===== 2011-10-31 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=306 VL-ID: ===== 306 Abstract: ========= The Vulnerability Lab Research Team discovered a persistent script code injection...