RBS WorldPay Suspect Extradited to U.S.

Federal prosecutors say they have have extradited one of the leaders of an international crime ring accused of hacking in to bank card processor RBS WorldPay and stealing more than $9.4m in a 12-hour period. Read the full article. The Register...

XSS vulnerability in allinta CMS

Vulnerability ID: HTB22528 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinallintacms.html Product: Allinta CMS Vendor: Allinta http://www.allinta.com/ Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: XSS Cros...

SQL injection vulnerability in BXR

Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Typ...

Российский студент получил реальный срок за взлом электронной почты

Омский суд вынес приговор студенту педагогического колледжа - 7 месяцев лишения свободы в колонии-поселении - за то, что он взломал электронный ящик незнакомого человека, а затем требовал с него деньги за возврат аккаунта. Октябрьский районный суд Омска вынес приговор в отношении...

SiteLoom CMS 21.07.2010 Cross Site Scripting

Vulnerability ID: HTB22516 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsiteloomcms.html Product: SiteLoom CMS Vendor: SiteLoom ApS http://www.siteloom.dk/ Vulnerable Version: Current at 21.07.2010 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: X...

Directory Traversal Vulnerability in FTP Commander Pro

Vulnerability ID: HTB22511 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderpro.html Product: FTP Commander Pro Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 8.0 and Probably Prior Versions Vendor Notification:...

Def Con 18 In Images

Roughly 10,000 computer hacking enthusiasts, poseurs, geeks, nerds and government agents gathered for DefCon this weekend. In its 18th year, the world’s largest hacker convention draws people from all walks of life to learn about the latest hacking techniques. Read the full article. Wired...

TurboFTP 6 Client Directory Traversal

Vulnerability ID: HTB22509 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinturboftp6client.html Product: TurboFTP 6 Client Vendor: TurboSoft, Inc http://www.turboftp.com/ Vulnerable Version: 6.30.806 32 and 64 bit and Probably Prior Versions Vendor Notification: 19 Jul...

FTP Commander Pro 8.0 Directory Traversal

Vulnerability ID: HTB22511 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderpro.html Product: FTP Commander Pro Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 8.0 and Probably Prior Versions Vendor Notification:...

Campsite 3.3.6 Cross Site Scripting

=============================================================== Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions...

Video Streaming Feed at Black Hat Hacked

A security expert found a way to catch the talks at Black Hat for free, thanks to bugs in the video streaming service used by the security conference. Read the full article. IDG News Service...

Freeway CMS 1.4.3.210 SQL Injection

----------------------------------------------------------------------------------------- Freeway CMS 1.4.3.210 SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Freeway CMS 1.4.3.210 SQL Injection Vulnerability +Author...

XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

The Persistent Adversary: Targeted Hacking Attacks and What They Mean For Your Business

Join Dennis Fisher, Ryan Naraine and their special guests, Oliver Day, Andy Ellis, and Robert Hansen as they take a look at the rising sophistication of real-world, web-based cyber attacks from the offensive, defensive and end-user perspective. / //These variables control the player launch proces...

XSS vulnerability in WebPress

Vulnerability ID: HTB22479 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress1.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

Koobi CMS (galid) Multiple XSS Vulnerabilities

Exploit for php platform in category web applications ============================================== Koobi CMS galid Multiple XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

XSS vulnerability in CruxPA

Vulnerability ID: HTB22452 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxpa3.html Product: CruxPA Vendor: CruxSoftware Vulnerable Version: 2.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed, Vendor...

Joomla Component (com_booklibrary) Remote File Include Vulnerablility

Exploit for php platform in category web applications ===================================================================== Joomla Component combooklibrary Remote File Include Vulnerablility =====================================================================...

CruxCMS 3.00 Cross Site Scripting

===================================== Vulnerability ID: HTB22445 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincruxcms.html Product: CruxCMS Vendor: CruxSoftware Vulnerable Version: 3.00 and Probably Prior Versions Vendor Notification: 21 June 2010 Vulnerability Type: XSS Cross Sit...

DBA Gets 1-Year Sentence for Hacking Employer

A former senior database administrator for GEXA Energy in Houston was sentenced to 12 months in prison for hacking into his former employer’s computer network. Read the full article. Help Net Security...