Basic Forum XSS / CSRF / SQL Injection

ADVISORY ================================================ Basic Forum by JM LLC - Multiple Vulnerabilities ================================================ Software................: Basic Forum Software link...........: http://www.jmagness.com/download/BasicForum.zip Vendor..................: JM...

KINS Banking Trojan For Sale in Underground Forum

It seems the cybercrime underground is pining for a new breed of banking Trojan. With heavyweights such as Citadel no longer generally available for purchase, rumblings on forums for months have indicated that a new project would be welcomed and financed. Since February, researchers at RSA’s...

Bug Bounty to Reward Researchers with Redeemable Points

IntegraXor, a manufacturer of supervisory control and data acquisition SCADA equipment, announced last week that it would implement a bug bounty program offering points redeemable for company services to researchers that disclose security vulnerabilities in their IGX SCADA system. In most bug...

Fedora 19 : ansible-1.2.2-1.fc19 (2013-12389)

Upstream 1.2.2 version. See: https://groups.google.com/forum/!topic/ansible-project/Bj0TmfsExhk for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as...

MiniBB 3.0.0 Cross Site Scripting / SQL Injection

Information -------------------- Name : XSS and SQL Injection Vulnerabilities in MiniBB Software : MiniBB 3.0.0 and possibly below. Vendor Homepage : http://www.minibb.com Vulnerability Type : Cross-Site Scripting and SQL Injection Severity : Critical Researcher : Omar Kurt Advisory Reference :...

MintBoard 0.3 Cross Site Scripting

Information -------------------- Name : XSS Vulnerabilities in MintBoard Software : MintBoard 0.3 and possibly below. Vendor Homepage : http://www.mintboard.com Vulnerability Type : Cross-Site Scripting Severity : Medium Researcher : Canberk Bolat Advisory Reference : NS-13-001 Description...

3 6 0 Forum stored xss can be introduced into the virus hung it-vulnerability warning-the black bar safety net

1 vulnerability location: 3 6 0 Forum any plate, post, reply in the rich text editor. 2 Use code:! 3 vulnerability hazards: pass to kill 3 6 0 all Forum sections. Due to China's current IE6 users is fairly large, the most recent statistics for the 2 1. 3 per cent. So the harm is pretty large, so...

CVE-2013-4720

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4720

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2013-4720

CVE-2013-4720 affects the WEC Discussion Forum extension for TYPO3, vulnerable in versions before 2.1.2. The issue is an SQL injection allowing remote attackers to execute arbitrary SQL via unspecified vectors. Exploitation details are not provided in the documents. Remediation: upgrade to versio...

PT-2013-5161

Name of the Vulnerable Software and Affected Versions TYPO3 WEC Discussion Forum extension versions prior to 2.1.2 Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations For versions prior to 2.1.2, update to version 2.1.2 or later to resolve...

CVE-2013-4720: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WEC Discussion Forum extension before 2.1.2 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Hostinger Web Hosting Cross Site Scripting

Hostinger Web Hosting Multiple Cross Site Scripting Report-Timeline: ================ 2013-06-01: Researcher Notification 2013-06-03: RESPONSE 2013-06-07: Ask About the issues 2013-06-10: Vendor Feedback 2013-06-13: Not Fixed 2013-06-16: Full Disclosure I-VULNERABILITY -------------------------...

Anonymous Hacker outs wanted Edmonton men for child exploitation

A YouTube video posted by a group calling themselves Anonymous is getting a lot of attention online, claims to have outed two men who allegedly tried to lure underaged girls over the internet. In a video posted on Friday, a member of Anonymous describes a sting operation in which two Edmonton-are...

Max Forum - Multiple Vulnerabilities

Max Forum - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/60455/info Max Forum is prone to multiple input-validation vulnerabilities including a PHP code-execution vulnerability, a local file-include vulnerability and an information-disclosure because it fails to properly...

Max Forum - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/60455/info Max Forum is prone to multiple input-validation vulnerabilities including a PHP code-execution vulnerability, a local file-include vulnerability and an information-disclosure because it fails to properly sanitize user-supplied input. An attacke...

Data Sharing, Cooperation Key to Critical Infrastructure Security

WASHINGTON–The topic of critical infrastructure security may be the prettiest girl at the dance right now for both politicians and technology companies, but the problem of attackers going after these targets is one that security people have been dealing with for some time. But that doesn’t mean...

Apple certified Mac Malware Captures and Uploads Screenshots without Permission

Earlier this week, new Mac spyware was discovered on a computer at the Oslo Freedom Forum, which is an annual human rights conference. Dubbed as OSX/KitM.A, discovered by computer security researcher Jacob Appelbaum. This Mac malware that has been used to spy on activists, targeted via spear...

Latest Al-Qaeda Magazine content hacked by Western intelligence agencies

New issue of English-language al-Qaeda magazine posted on the terror group's website earlier this week linked to the Boston terrorist attacks has possibly been hacked by Western intelligence agencies and its content beyond its cover page was scrambled. The magazine, produced by al Qaeda's Yemeni...

Researcher Discovers Mac Malware at Anti-Malware Workshop

In an Oslo Freedom Forum workshop offering advice to free speech advocates on how to better secure their devices against government surveillance, security researcher Jacob Appelbaum uncovered a new strain of malware with backdoor capabilities on the Mac machine of an Angolan activist attending th...