Ubuntu Forums Password Breach Exposes 1.8 Million Users

Every username, password and email address used by members of the Ubuntu Forums was accessed in a breach reported on Saturday by the free Linux distribution. More than 1.82 million accounts stored in the forums’ database were stolen, according to a notice posted on the forums’ home page Saturday...

MyBB < 1.6.10 Multiple Vulnerabilities

According to its version number, the MyBB install hosted on the remote web server is affected by multiple vulnerabilities : - A SQL injection vulnerability exists due to improper sanitization of user-supplied input during database optimization. - A SQL injection vulnerability exists due to improp...

Apple's Developer Center Offline for 32 Hours; Compromised ?

It's been over a day now since Apple's online Dev Center went offline, and latest message can be seen in the screenshot, which explains that the current maintenance has took a lot longer than they expected. "We apologize that maintenance is taking longer than expected. If your program membership...

Ubuntu Forums hacked; 2 million user's personal Information compromised

Ubuntuforums.org, The popular Ubuntu Forums site, has posted a message on its index page, informing its near 2 million users that it has suffered a serious security breach. “There has been a security breach on the Ubuntu Forums,” reads the page. The site was defaced by hacker with Twitter handle...

Beta Bot Trojan Emerges as New Type of Banking Malware

A new strain of banking malware, Beta Bot, has been refined over the last few months to target ecommerce and comes complete with an array of features to help prevent it from being caught by usual security measures. According to research conducted by RSA Security’s Limor Kessem, the bot started ou...

Vanilla Forums 2.0.18.8 XSS / Insecure Permissions

Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version: 2.0.18.8 Tested on: Debian CVE : none yet When you make...

Vanilla Forums 2.0.18.8 - Insecure Permissions / XSS Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version:...

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version:...

Vanilla Forums 2.0.18.8 - Multiple Vulnerabilities

Exploit Title: Vanilla Forums Insecure Permissions Vulnerability Date: 15/5/13 Exploit Author: Henry Hoggard Author Website: http://henryhoggard.co.uk Vendor Homepage: http://vanillaforums.org Software Link: http://vanillaforums.org Version: 2.0.18.8 Tested on: Debian CVE : none yet When you make...

CVE-2012-6555

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

Cross site scripting

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

CVE-2012-6555

CVE-2012-6555 is an XSS vulnerability in the Vanilla Forums LatestComment plugin 1.1. The issue allows remote attackers to inject arbitrary script/HTML via the discussion title, indicating a flaw in input handling within the plugin’s comment/discussion title processing. The CVSS data in the prima...

CVE-2012-6556

CVE-2012-6556 describes multiple cross-site scripting (XSS) vulnerabilities in the FirstLastNames plugin 1.1.1 for Vanilla Forums. The issue enables remote attackers to inject arbitrary web script or HTML via the (1) User/FirstName or (2) User/LastName parameter on the edit user page. The NVD ent...

CVE-2012-6557

Multiple XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary script/HTML via any of 15 AboutMe fields on the Edit My Details page (RealName, Name, Quote, Loc, Emp, JobTit, HS, Col, Bio, Inter, Mus, Gam, Mov, FTV, Bks). Affected software: V...

CVE-2012-6555

Cross-site scripting XSS vulnerability in the LatestComment plugin 1.1 for Vanilla Forums allows remote attackers to inject arbitrary web script or HTML via the discussion title...

CVE-2012-6557

Multiple cross-site scripting XSS vulnerabilities in the AboutMe plugin 1.1.1 for Vanilla Forums allow remote attackers to inject arbitrary web script or HTML via the 1 AboutMe/RealName, 2 AboutMe/Name, 3 AboutMe/Quote, 4 AboutMe/Loc, 5 AboutMe/Emp, 6 AboutMe/JobTit, 7 AboutMe/HS, 8 AboutMe/Col, ...

Sony PSN Community Lithium Forums 2012 Q4 Script Insertion

Title: ====== Sony PSN Community - Mail Encoding Web Vulnerability Date: ===== 2013-05-05 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=748 VL-ID: ===== 747 Common Vulnerability Scoring System: ==================================== 3.1 Introduction: =============...

Sony PSN Community Lithium Forums 2012 Q4 Script Insertion

Title: ====== Sony PSN Community - Mail Encoding Web Vulnerability Date: ===== 2013-05-06 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=748 VL-ID: ===== 748 Common Vulnerability Scoring System: ==================================== 3.1 Introduction: =============...

Sony PSN Community Lithium Forums 2012 Q4 XSS

Title: ====== Sony PSN Community - Persistent Web Vulnerability Date: ===== 2013-05-04 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=746 VL-ID: ===== 746 Common Vulnerability Scoring System: ==================================== 3.5 Introduction: =============...