FastPath Webchat | Multiple Cross Site Scripting Vulnerabilities

OVERVIEW Fastpath WebChat is vulnerable to Cross Site Scripting. 2. BACKGROUND Fastpath WebChat is part of the Fastpath product. It provides a way for users to begin chatting with support agents using Fastpath. Fastpath is a plugin of OpenFire, a real time collaboration RTC server for instant...

US-based website covering China's Bo Xilai scandal hacked

US-based website covering China's Bo Xilai scandal hacked A US-based website that has reported extensively on the Bo Xilai scandal in Chongqing says it has been crippled by a concerted hacker attack. The site was rendered inaccessible for much of Thursday, depriving readers of coverage of the...

Anon Tweets About Hack, Gets Arrested

A 21 year-old Ohio man associated with the Anonymous Internet collective is in detention after boasting on Twitter about his involvement in the hack of the Utah Chiefs of Police Association and the Salt Lake City Police Department. John Anthony Borell III was charged with two counts of computer...

Teen's Arrest Underscores Need for More Secure Web Development

A 15-year-old who claimed he was bored when he turned to hacking was arrested for breaking into almost 260 companies during the first three months of this year, according to a ZDNet article published earlier today. Austria’s Federal Criminal Police Office said the teenager, who used the hacker...

LA Times Profiles Cyber Defense Competition For Teens

The U.S. and other advanced nations face a drastic cyber security skills gap. Attacks from sophisticated and unsophisticated attackers are on the rise, even as more and more companies and government agencies move more of what they do online to Web based services and the cloud. Of course, the skil...

Banking System Vulnerability - 3 million bank accounts hacked in Iran

Banking System Vulnerability - 3 million bank accounts hacked in Iran Iran's Central Bank has announced that the electronic information of 3 million customers of 10 Iranian banks have been compromised. These banks now require their customers to change their ATM pin numbers before they can access...

Forensic FOCA - Power of Metadata in digital forensics

Forensic FOCA - Power of Metadata in digital forensics Most of the e ort in today's digital forensics community lies in the retrieval and analysis of existing information from computing systems. Metadata is data about data. Metadata plays a number of important roles in computer forensics. It can...

Joomla Beatz 1.x Cross Site Scripting

OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...

Phone Phreaking using Bluebox Demonstrated in India

Phone Phreaking using Bluebox Demonstrated in India Christy Philip Mathew, an Indian Information Security Instructor and Hacker demonstrated Phone Phreaking using Bluebox in his lab. This time we have something really special that would remind us the phone phreaking. Actually Phone Phreaking...

FBI track Anonymous hacker using his girlfriend's boobs

FBI track Anonymous hacker using his girlfriend's boobs The FBI swooped on Higinio O Ochoa III after he posted the snap, which included a gloating message to his online victims.He took the picture on his iPhone and posted it on Twitter without realising it contained GPS data pointing directly to...

ExoPHPDesk v1.2.1 Bypass Vulnerability

Exploit for php platform in category web applications Author : L3b-r1'z Title : ExoPHPDesk v1.2.1 Bypass Vulnerability Dork : allintext: "Powered by ExoPHPDesk v1.2.1" Download : http://exoscripts.com/exohelpdesk Email : email protected Like Me On Facebook : : FB.COM/lbr1z Bypass Vuln + P0c :...

Anonymous target USTelecom and TechAmerica for supporting Cybersecurity Bill

Anonymous target USTelecom and TechAmerica for supporting Cybersecurity Bill Two technology trade associations said they were targeted by the hacker-activist group Anonymous as it singled out supporters of proposed legislation to improve U.S. cybersecurity. The hacker group Anonymous claimed...

EU Plan to Standardize Punishments Also Could Impact Security Research

While much has been made of recent efforts to provide parity in prosecutions and punishments for cybercrimes across the 27-nation European Union, less has been said about how it may impact security researchers who use the same hacker tools to perform their work. Under a proposal approved recently...

Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net

Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...

discuz! X1. 0 – X1. 5 Blind SQL injection exploit & Get Shell-vulnerability warning-the black bar safety net

Exploit Title: discuz! X1. 0 - X1. 5 Blind SQL injection exploit &Get Shell Date: 06-04-2012 Author: Hacker-Fire Category:: webapps Google dork: Powered by Discuz Tested on: Windows 7 P0c : ? Php printr ' + ------------------------------------------------- -------------------------- + Discuz! 1-1...

LulzSec hacker pleads guilty in Sony breach

LulzSec hacker pleads guilty in Sony breach Accused LulzSec hacker Cody Kretsinger pleaded guilty today in a federal court in Los Angeles, California, to felony charges associated with the breach of Sony Pictures Entertainment that occurred in mid-2011. The hacker had previously pleaded not...

Hishop 5.4 & 5.4.1 SQL injection vulnnerability

Exploit for php platform in category web applications Exploit Title: Hishop 5.4 & 5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor or Software Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on:...

"Reboot" - Upcoming latest Hacker Movie you should watch !

"Reboot" - Upcoming latest Hacker Movie you should watch Rosa Entertainment and Jan-Ken-Po Pictures just announced that their cyberpunk thriller short film "Reboot" will launch with a Sneak Preview at DEFCON. Written and Directed by Joe Kawasaki, and Produced by Sidney Sherman, the film stars a...

Wordpress Plugin MOW Pop Upload Shell

Exploit for php platform in category web applications Exploit Title: MOWPOP Plugin WP-CONTENT In Wordpress Upload Exploitation Date: 03-04-2012 Author: Hacker-Fire Category:: webapps Google dork: inurl:mowpop Greetz Milw0rm : 1337day.com Demo site:...

Cyber Warfare - The Hacker News Magazine April 2012 Edition | Issue 10

Cyber Warfare - The Hacker News Magazine April 2012 Edition Call it Cyber Warfare, Terrorism, Computer Mania this month The Hacker News turns over every leaf of the newest way world citizens are fighting wars and using their keyboards to destroy planet earth. Most call it Cyber Warfare and we are...