HTML-EDIT CMS 3.1.8 Cross Site Scripting / Path Disclosure / SQL Injection

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

Habari Blog - Multiple Vulnerabilities

Vulnerability ID: HTB22732 Reference: http://www.htbridge.ch/advisory/pathdisclosureinhabari.html Product: Habari Vendor: Habari http://habariproject.org/en/ Vulnerable Version: 0.6.5 Vendor Notification: 02 December 2010 Vulnerability Type: Path disclosure Status: Fixed by Vendor Risk level: Low...

html-edit CMS - Multiple Vulnerabilities

Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...

Anonymous Vows Continued Attacks on Companies Opposing WikiLeaks

A pro-WikiLeaks hacker has stated that an Internet insurgent group will continue targeting companies that oppose the whistleblowing website.For the first time, the cyber-insurgent "Bass" from the group Anonymous spoke on camera, revealing details about their operations and their expanding...

Man Arrested for Hacking Girl's Social Media and Posting Lewd Messages

A 29-year-old man was arrested on Tuesday for hacking into a girl's social networking profile, altering her photos, and posting inappropriate messages. The police apprehended Pramod Nana Bavdekar from his home in Andheri, seizing his computer and hard disk as evidence. The incident began on...

Report: Romanian Authorities Bust VoIP Hacking Group

Authorities in Romania have disrupted a large hacking ring accused of stealing Voice over IP VoIP data from hacked servers and using it to place bogus calls to premium rate numbers. Agence France Presse reported on Tuesday that 42 people were arrested in the sting, breaking up a network that was...

Michael Calce Warns of Online Dangers at HDS Canada's Forum

The guest keynote speakers at technology conferences can vary in quality, but Hitachi Data Systems HDS Canada NYSE: HIT made a smart choice by inviting Michael Calce, also known as Mafiaboy, to speak at their recent Information Forum event in Toronto. Calce gained notoriety as a teenage hacker fr...

Australian Police Arrest Man for Hacking Nearly 100 Online Accounts

The Australian police have arrested a 33-year-old man accused of hacking into nearly 100 online accounts. The Australian Federal Police's high-tech crime unit has been monitoring the suspect since last September. This surveillance began when a local telecom company alerted the authorities to...

Police Change Approach to Phone Hacking Case Involving Andy Coulson

The police have changed their approach to a phone hacking incident that could affect Andy Coulson. Coulson, the media adviser for the Prime Minister, was previously an editor for the News of the World. The police have taken steps to halt the flow of information that could implicate high-ranking...

Gawker Media Hacked by Gnosis, Source Code Leaked

A lot of people are gawking at Gawker Media this morning, though not for reasons that will bring much cheer to its founder, Nick Denton. Gawker, the parent company of popular blogs like Gizmodo, Lifehacker, Jezebel, and ValleyWag, has suffered a significant breach. A hacker group known as Gnosis...

India Orders Security Certification for Government Websites After CBI Hack

India has mandated that all government ministries and departments secure their websites with proper certification. This directive follows the hacking of the Central Bureau of Investigation CBI website by a group calling themselves the "Pakistani Cyber Army." The National Informatics Centre has be...

XSS vulnerability in BLOG:CMS

Vulnerability ID: HTB22725 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogcms1.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: XSS Cross Site Scriptin...

Blog:CMS 4.2.1e - Multiple Vulnerabilities

Vulnerability ID: HTB22727 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinblogcms.html Product: BLOG:CMS Vendor: Radek Hulán http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

U.S. Faces Shortage of Computer Science Graduates Amid Rising Cybersecurity Needs

The United States could soon face a significant shortage of computer science professionals unless it starts graduating more students in this field. At a time when computer hacking and security are critical issues for both the government and the private sector, the U.S. is producing only 9,000...

Hacking Tool Used By Anonymous Could Reveal Users Identity

A new study finds that a tool used to carry out distributed denial of service DDoS attacks on behalf of whistle blower Web site Wikileaks may, itself, leak the identity of those running the software. Researchers from the University of Twente, Netherlands, looked at the Low Orbit Ion Cannon LOIC, ...

Introduction to Cyber Law of India !

In Simple way we can say that cyber crime is unlawful acts wherein the computer is either a tool or a target or both Cyber crimes can involve criminal activities that are traditional in nature, such as theft, fraud, forgery, defamation and mischief, all of which are subject to the Indian Penal...

Julian Assange: The Man Behind WikiLeaks

Who is Julian Paul Assange? Julian Paul Assange is the lean, tall, and pale 39-year-old Australian hacker at the heart of WikiLeaks. This whistle-blowing website gained attention after revealing thousands of secret Afghan battlefield reports, making Assange a target for U.S. authorities. The Enig...

Hacktivism: From Here to There

The current controversy regarding WikiLeaks and the attacks against the organizations that have opposed the group has sparked a large and complex conversation about the meanings of free speech, freedom of the press and online activism. As new as all of this may seem to some, this is by no means t...

Twitter Locks Out Wikileaks DDoS Group As Attacks Spread

Twitter has suspended the account used by Anonymous, an umbrella group of online hacker-activists that have claimed responsibility for denial of service DoS attacks on Visa, MasterCard, Paypal and a host of other public and private entities who have taken action against Wikileaks and its founder,...

Who are PakBugs Hackers ? Introduction Report by The Hacker News

Report "Who are PakBugs Hackers" by THE HACKER NEWS 1 Jawad Ehsan, nickname - Humza, still at large in Riyadh, Saudi Arabia. Jawad uses codename ZombiEKsa, and is the founder of PakBugs and probably the most famous of all the PakBugs hackers. An Article already posted on him at CBI was actually...