CVE-2008-7283

Removed by vendor...

PT-2011-1712

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta1 Description The issue concerns the ACL-customer-status Ticket Type setting, which fails to restrict ticket options after an AJAX reload. This allows remote authenticated users to...

PT-2011-1711

Name of the Vulnerable Software and Affected Versions Open Ticket Request System OTRS versions prior to 3.0.0-beta2 Description A cross-site scripting XSS issue exists in the rich-text-editor component, allowing remote authenticated users to inject arbitrary web script or HTML by utilizing the...

CVE-2010-4763: Undefined Security Weakness

The ACL-customer-status Ticket Type setting in Open Ticket Request System OTRS before 3.0.0-beta1 does not restrict the ticket options after an AJAX reload, which allows remote authenticated users to bypass intended ACL restrictions on the 1 Status, 2 Service, and 3 Queue via selections...

CVE-2010-4762: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the rich-text-editor component in Open Ticket Request System OTRS before 3.0.0-beta2 allows remote authenticated users to inject arbitrary web script or HTML by using the "source code" feature in the customer interface...

CVE-2011-0745

SugarCRM before 6.1.3 does not properly handle reloads and direct requests for a warning page produced by a certain duplicate check, which allows remote authenticated users to discover 1 the names of customers via a ShowDuplicates action to the Accounts module, reachable through index.php; or 2 t...

CVE-2011-0745

SugarCRM prior to 6.1.3 is affected by CVE-2011-0745. The issue arises when reloading or directly requesting a warning page produced by a duplicate-check, allowing remote authenticated users to see names they normally should not access: (1) customer names via ShowDuplicates in the Accounts module...

Important: Red Hat Security Advisory: JBoss Enterprise SOA Platform 4.3.CP04 and 5.0.2 security update

Updated jbossweb-2.0.0.jar and jbossweb-2.1.10.jar files for JBoss Enterprise SOA Platform 4.3.CP04 and 5.0.2 that fix one security issue are now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common...

Database of banking recruitment website Efinancialcareers-gulf.com hacked !

The database of global banking recruitment website efinancialcareers-gulf.com has been hacked, according to the former CEO of Credit Suisse Private Bank Australia, Nick Kalikajaros. The British company that has Australian operations believed its registered users' names, email addresses, registere...

Indian Hacker shared his video of hacking Microsoft Kinect Xbox to control Tata Sky !

The desire of remote free experience urged Harishankar Narayan a mechanical Engineer to hack into the Microsoft Kinect Xbox and control Tata Sky through Kinetic Movements. In a You Tube video which he has uploaded the man is seen controlling the Tata Sky with the movements of his hands. The...

Lush takes down two regional sites following another hack !

Last month's compromise of the UK website of the natural ingredients cosmetic firm Lush and the theft of its customers' credit card details must have hurt the company but unfortunately, its troubles are not over yet. "We are sorry to have to announce that the Lush Australian and New Zealand...

Lush Cosmetics Australian website hacked !

The Australian and New Zealand shopping site of cosmetics retailer Lush has been hacked just weeks after a similar breach occurred on the UK site. Credit card details and other intimate information of shoppers have been exposed. If you visit the Lush Cosmetics Australian website you will find a...

B.C. dating website hacked !

A hacker bankrupt into the online dating website Plenty of Fish aftermost week, auspiciously exporting hundreds of accounts. Markus Frind, CEO of the Vancouver-based company, said Monday all passwords accept been displace back the Jan. 18 aegis breach. He additionally said all annual users accept...

Moderate: Red Hat Security Advisory: JBoss Web Framework Kit 1.0.0 removal

JBoss Web Framework Kit 1.0.0 contains a security flaw and should no longer be used. This update removes the JBoss Web Framework Kit 1.0.0 packages. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score,...

Lush's UK Website Hacked, Credit Card Numbers Used !

Hackers are built after stealing credit card numbers Lush UK site, which was closed on Friday and replaced with a message that alerts customers that their account information might have been compromised. According to the message, all who have made purchases online at the site of the craftsmanship...

Thousands Of Bank Details At Risk As Hackers Hit Lozano UK Site !

Hackers can obtain the bank details of thousands of customers in a lush, a cosmetics company acknowledged yesterday. The company invites all our customers who have purchased products online during the month of October to check fraud. To date, 43 customers had their cards are used tricks. Thieves...

UConn Co-op website hacked !

Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...

Massive data leakage in Vodafone Australia !

Australian media giant Fairfax leads today with dramatic claims that customer data from mobile phone company Vodafone Australia is routinely falling into the wrong hands, thanks to lax database security. According to Fairfax, Vodafone's customer database is accessible to all its dealers over the...

Sonic.net Selected by Google to Operate Stanford Fiber Network !

Sonic.net today announced it has been selected to operate and support the trial fiber-to-the-home network Google is building at Stanford University. This experimental project will test new fiber construction and operation methods, while delivering full gigabit speeds to approximately 850 faculty...

Russian payment processor ChronoPay.com Hacked !

Criminals this week hijacked ChronoPay.com, the domain name for Russia's largest online payment processor, redirecting hundreds of unsuspecting visitors to a fake ChronoPay page that stole customer financial data. Reached via phone in Moscow, ChronoPay chief executive Pavel Vrublevsky said the...