Diafan CMS 4.3 Cross Site Request Forgery / Cross Site Scripting

====================================== Vulnerability ID: HTB22776 Reference: http://www.htbridge.ch/advisory/storedxssvulnerabilityindiafancms.html Product: diafan.CMS Vendor: Diafan http://www.diafan.ru/ Vulnerable Version: 4.3 and probably prior versions Vendor Notification: 28 December 2010...

energine 2.3.8 - Multiple Vulnerabilities

Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaitin...

Protests and Website Hackings in Tunisia !

We are concerned about demonstrations that have occurred over the past few weeks in Tunisia, which we understand to be the result of social and economic unrest. We encourage all parties to show restraint as citizens exercise their right of public assembly. We have also conveyed our views directly...

North Korean government's official Twitter account hacked !

The North Korean government's official Twitter account has apparently been hacked, with the feed displaying a string of messages derogatory of leader Kim Jong-il and heir apparent Kim Jong-un, the South Korean Yonhap news agency has reported. The four most recent messages posted on Saturday morni...

Zwii 2.1.1 - Remote File Inclusion

Zwii 2.1.1 - Remote File Inclusion Exploit Title: Zwii v 2.1.1 Remote file include vulnerbility Google Dork: Propulsé par Zwii 2.1.1 Date: 08/01/2011 Author: Abdi Mohamed Software Link: http://scripts.toocharger.com/fiches/scripts/zwii/5147.htm Version: v 2.1.1 Tested on: ubuntu + centos Email :...

SQL Injection in phpMySport

Vulnerability ID: HTB22772 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport2.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

XSS vulnerability in F3Site

Vulnerability ID: HTB22758 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinf3site2.html Product: F3Site Vendor: COMPMaster http://dhost.info/compmaster/ Vulnerable Version: 2011 alfa 1 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: Stored XSS...

SQL Injection in phpMySport

Vulnerability ID: HTB22771 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphpmysport1.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor...

Path disclousure in phpMySport

Vulnerability ID: HTB22773 Reference: http://www.htbridge.ch/advisory/pathdisclousureinphpmysport.html Product: phpMySport Vendor: phpMySport http://phpmysport.sourceforge.net/ Vulnerable Version: 1.4 Vendor Notification: 21 December 2010 Vulnerability Type: Path disclosure Status: Not Fixed,...

PHP Bexfront SQL Injection

========================================== PHP Bexfront SQL Injection Vulnerability ========================================== +Title : PHP Bexfront SQL Injection Vulnerability +Software : PHP Bexfront +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web :...

Phenotype CMS 3.0 - SQL Injection

Vulnerability ID: HTB22769 Reference: http://www.htbridge.ch/advisory/sqlinjectioninphenotypecms.html Product: Phenotype CMS Vendor: http://www.phenotype-cms.com http://www.phenotype-cms.com Vulnerable Version: 3.0 Vendor Notification: 21 December 2010 Vulnerability Type: SQL Injection Status: No...

Is your Internet TV vulnerable to hackers ?

Manufacturers racing to create HDTVs that can connect to the Web may have rushed over an important step in trying to rush them to market: keeping them safe from hackers. According to the New York Times, security firm Mocana was able to hack an Internet-connected set "with unsettling ease." The ha...

Saudi ministry restores hacked website !

Saudi Arabia's Ministry of Education has restored its website, weeks after it was taken offline in the latest of a series of hacking attempts on some of the kingdom's most prominent sites. "The website was hacked a few weeks back, but has now been fully restored, and is safe and functional,"...

Popular Indian news portal - indiablooms.com Hacked By PakBugs !

Popular Indian news portal www.indiablooms.com, the online version of the national news agency India Blooms News Service IBNS, was hacked by the Pakistani hackers on Sunday afternoon. "Pakistani Hackers- Your site has been Hacked" said the redirected page of the site which was hacked around India...

Identity Theft : It's cyber crime you should be scared of !

The number of Britons targeted by cybercrime is expected to overtake conventional crime for the first time next year. Internet security experts claim that up to 19 million people will come under attack from hi-tech criminals, generally involved in identity theft. While at one time, the biggest...

Sony PlayStation 3 hacked, PS3 jailbreak Fail0verflow method !

Sony PlayStation 3 hacked, PS3 jailbreak Fail0verflow method. Sony PlayStation 3 has successfully been hacked by a team of hackers named fail0verflow thanks to its poor public key cryptography. The hacker group demonstrated their hacking tricks at the Chaos Communication Conference 27C3 in 45...

KaiBB 1.0.1 Multiple Vulnerabilities

Exploit for php platform in category web applications Vulnerability ID: HTB22749 Reference: http://www.htbridge.ch/advisory/bbcodexssinkaibb.html Product: KaiBB Vendor: Mi-Dia http://www.mi-dia.co.uk/ Vulnerable Version: 1.0.1 Vendor Notification: 09 December 2010 Vulnerability Type: BBcode XSS...

Engineering student arrested in Bhopal for hacking bank accounts !

An engineering student has been arrested in Bhopal for hacking third party bank accounts to book railway and air tickets, police said. Sunny Kumar 20, a student of private engineering college, was arrested by Cyber Cell police on Tuesday for hacking third party accounts for transferring cash to...

China said that needs 'more Internet security' !

China should invest more in its own Internet security, lest it become a victim, or even scapegoat, for international hacking activities, an industry expert said on Tuesday. "Our current protection input is not enough, and the scale and size is far less intensive compared to that of Europe and the...

Abuse of social networking sites misused among youth in Kochi !

while engaging in online social networking sites seemed to have yielded little results, if the statistics and current trends are any indication. The Cyber Cell of the City Police has received more than 40 complaints of abuse of social networking sites like Orkut and Facebook this year itself. In...