Respondly: Import emails from Gmail are activate XSS

Hi, If you choose to import your contacts via Gmail and the contact name contains JS, it will execute it. Sasi...

Back off, NSA! Gmail now Encrypts every single Email

2014 - The Year for Encryption! Good News for Security & Privacy seekers, Gmail is now more secure than ever before. Google has announced that it has enhanced encryption for its Gmail email service to protect users from government cyber-spying; by removing the option to turn off HTTPS. So from...

Google Encrypts All Gmail Connections

Perhaps no company has been as vocal with its feelings about the revelations about the NSA’s collection methods as Google has, and the company has been making a series of changes to its infrastructure in recent months to make it more difficult for adversaries to snoop on users’ sessions. The...

Joomla! 2.5.x < 2.5.19 Multiple Vulnerabilities

According to its self-reported version number, the Joomla! installation hosted on the remote web server is 2.5.x prior to 2.5.19. It is, therefore, affected by multiple vulnerabilities : - A cross-site scripting XSS vulnerability exists due to improper sanitization of input before returning it to...

Joomla! -- Core - Multiple Vulnerabilities

The JSST and the Joomla! Security Center report: 20140301 - Core - SQL Injection Inadequate escaping leads to SQL injection vulnerability. 20140302 - Core - XSS Vulnerability Inadequate escaping leads to XSS vulnerability in comcontact. 20140303 - Core - XSS Vulnerability Inadequate escaping lead...

[20140304] - Core - Unauthorised Logins

Inadequate checking allowed unauthorised logins via GMail authentication...

Swiss Firm Digs Up 300,000+ Usernames/Passwords on Pastebin

More than 300,000 credentials, usernames and passwords, were posted on the clipboard website Pastebin.com in the year 2013 alone according to a recent analysis by a Swiss security firm. As part of an experiment to determine how big the hacking industry is, High-Tech Bridge, a company until now...

[MailPasswordDecryptor v4.0] All-in-one eMail Password Recovery Software

Mail Password Decryptor is the FREE software to instantly recover Mail Account passwords from popular email clients and other desktop applications. You can recover your lost password for email accounts like Gmail, Yahoo Mail, Hotmail or Windows Live Mail from email applications such as Microsoft...

CCProxy 7.3 - Integer Overflow

!/usr/bin/env python Exploit Title: CCProxy v7.3 Integer Overflow Exploit Date: 2013/03/22 Author: Mr.XHat E-Mail: Mr.XHat AT GMail.com Vendor Homepage: http://www.youngzsoft.net/ Software Link: http://user.youngzsoft.com/ccproxy/update/ccproxysetup.exe Version: Prior To 7.3 Discovered By: Mr.XHa...

The Android framework layer vulnerability-Fragment injection-vulnerability warning-the black bar safety net

Original: A New Vulnerability in the Android Framework: Fragment Injection Source: http://securityintelligence.com/new-vulnerability-android-framework-fragment-injection/comments Author: Roee Hay,IBM's Application Security Research Team Time: 2013.12.10 Recently we to the Android security team ha...

Internet Download Manager 6.17 (.ef2) Memory Corruption

Exploit for windows platform in category dos / poc 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site...

OSX Gather Safari LastSession.plist

This module downloads the LastSession.plist file from the target machine. LastSession.plist is used by Safari to track active websites in the current session, and sometimes contains sensitive information such as usernames and passwords. This module will first download the original...

Gmail Image Proxy Change Has Privacy, Security Implications

Google’s decision to automatically display images in Gmail messages has security experts on edge about the privacy and security implications of the move. Of particular concern is the ability of an attacker, or marketer, to learn whether messages are being opened, as well the possibility of an...

Google Gmail IOS Mobile Application - Persistent / Stored XSS Vulnerability

Exploit for iOS platform in category web applications Google Gmail IOS Mobile Application - Persistent / Stored XSS Introduction: ============= Gmail is a free, advertising-supported email service provided by Google. Users may access Gmail as secure webmail, as well as via POP3 or IMAP4 protocols...

Hacking Gmail accounts with password reset system vulnerability

None...

Google Gmail IOS Mobile Application - Persistent Cross-Site Scripting

Title: ====== Gmail IOS Application Attachment Cross Site Scripting Date: ===== 2013-11-11 Introduction: ============= Gmail is a free, advertising-supported email service provided by Google. Users may access Gmail as secure webmail, as well as via POP3 or IMAP4 protocols. Gmail initially started...

Google Gmail IOS Mobile Application - Persistent Cross-Site Scripting

Google Gmail IOS Mobile Application - Persistent Cross-Site Scripting Title: ====== Gmail IOS Application Attachment Cross Site Scripting Date: ===== 2013-11-11 Introduction: ============= Gmail is a free, advertising-supported email service provided by Google. Users may access Gmail as secure...

[SX Password Dump Suite] Complete Set of Command-line Password Recovery Tools from SecurityXploded

SX Password Dump Suite is the complete collection of all the FREE command-line based password recovery tools from SecurityXploded. It contains the latest version of all the password dump tools which makes it easier for the user to get all these tools at one place instead of downloading each of th...

Google: Gmail Users Should Have No Expectation of Privacy

Edward Snowden has done enough to highlight how vulnerable electronic communications are to surveillance and Gmail users should not expect privacy from Google. Lavabit is no more. Silent Circle has shuttered its secure email service. A California watchdog group says that Gmail users now have a...

Israel's Verint Systems get a contract from Indian government for interception program

Soon in December this year, India’s new surveillance program - Centralized Monitoring System CMS will be able to analyze all telecommunications and Internet communications in India by the government and its agencies. This means that everything we say or text over the phone, write, post or browse...