huffingtonpost.it XSS vulnerability

Vulnerable URL: http://www.huffingtonpost.it/slideshows/ipadslideshow.php?id=1=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E Details: Description| Value ---|--- Patched:| Yes, at 27.05.2016 Latest check for patch:| 27.05.2016 18:15 GMT Vulnerability type:| XSS Vulnerability status:| Publicly...

reebok.it XSS vulnerability

Vulnerable URL: http://www.reebok.it/?prefn1="...

Sinapsi eSolar Light Plaintext Passwords Vulnerability

OVERVIEW Independent researcher Maxim Rupp has identified plain text passwords in Sinapsi’s eSolar Light application. Sinapsi has produced a new version to mitigate this vulnerability. AFFECTED PRODUCTS The following Sinapsi eSolar Light versions are affected: Sinapsi eSolar Light firmware versio...

Threat Outbreak Alert RuleID13929: Email Messages Distributing Malicious Software on March 10, 2015

Medium Alert ID: 37794 First Published: 2015 March 10 19:05 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID13929 may contain the following files: Name | Si...

FlatNuke 3.1.4 (FlatPoll) Persistent XSS Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------- + FlatNuke alertdocument.cookie&body=This is my comment ------------------------------------------------------------------------------------------------ 0day.today...

Podcast Generator <= 1.2 unauthorized Re-Installation Remote Exploit

No description provided by source. ?php Podcast Generator = 1.2 unauthorized CMS Re-Installation Remote Exploit by staker -------------------------------------- mail: stakerathotmaildotit url: http://podcastgen.sourceforge.net -------------------------------------- it works with registerglobals=o...

Fusion SBX <= 1.2 - Remote Command Execution Exploit

No description provided by source. / Fusion SBX = 1.2 exploit sileFSBXxpl This exploit use vulnerability found into Fusion SBX and create new variable and call it with a malicious function stored in config.php. This exploit utilize injection of three diverse procedures for execution of arbitrary...

TSOKA:CMS 1.1 & 1.9 & 2.0 - SQL Injection & XSS Vulnerability

No description provided by source. ----------------------------------------------------------------------------------------------------------------------- TSOKA:CMS v1.1 , v1.9 AND v2.0 SQL Injection & XSS Vulnerability http://www.alanzard.com from italy...

AWStats 5.7 - 6.2 - Multiple Remote Exploit

No description provided by source. / AWStats v5.7 - v6.2 sileAWSxpl This exploit utilize three methods for exploiter the vulnerability found on AWStats software. an user can execute remote code on vulnerable machine, with httpd privileges. References: www.securityfocus.org/bid/12543 coded by:...

PHP-Nuke 7.4 - Admin Exploit

No description provided by source. / old exploit but what pretty code /str0ke / / phpNUKE v7.4 exploit this exploit create new admin with relative passwd that you specified on parameter of exploit you take administrative control of the webPortal Reverences: http://www.osvdb.org/9563 coded by:...

LightNEasy sql/no-db <= 2.2.x system Config Disclosure Exploit

No description provided by source. !/usr/bin/perl LightNEasy sql/no-db = 2.2.x system config disclosure exploit by staker ------------------------------ mail: stakerathotmaildotit url: http://www.lightneasy.org ------------------------------ it works with magicquotesgpc=off short explanation:...

gpEasy <= 1.6.1 CSRF Remote Add Admin Exploit

No description provided by source. ============================================= gpEasy = 1.6.1 CSRF Remote Add Admin Exploit ============================================= Author : Giuseppe 'giudinvx' D'Inverno Email : giudinvxatgmaildotcom Date : 04-29-2010 Site :...

Threat Outbreak Alert: Fake Price Adjustment Notification Email Messages on March 3, 2014

Medium Alert ID: 33157 First Published: 2014 March 3 15:42 GMT Version: 1 Summary Cisco Security has detected significant activity related to Italian-language spam email messages that claim to contain a price change notice from the Bank of Italy for the recipient. The text in the email message...

Shylock/Caphaw Banking Malware Infections on the Rise

Two dozen major U.S. and European banks are in the crosshairs of the Shylock, or Caphaw, financial malware of late, and victims who trade with one of the 24 financial institutions are at risk of giving up their credentials and losing assets in their accounts. Malware researchers have noticed a ri...

Malware that turns computers into Bitcoin miners

Researchers from Kaspersky Lab have discovered a new spam message campaign being transmitted via Skype contains malware capable of using an infected computer to mine for Bitcoins. The malware, identified as Trojan.Win32.Jorik.IRCbot.xkt. Bitcoin is a non-governmental, fully-digital currency based...

Anonymous hack 30000 accounts and Social Security Numbers from 'Telecom Italy'

"Please don't mind, its 5th of November" slogan for today ! Anonymous Hackers hacked into "Telecom Italy" www.telecomitalia.it and dump Social Security Number, Social Insurance Number, 30000 credentials and lots of vulnerabilities exposed. In a blog post hackers said,"Telecom Italy boasts 3000 XS...

Anonymous Hackers leaks 1.35GB Italian State Police Data

Italian Anonymous hackers has released 1.35 Gigabyte data from the Italian State Police Polizia di Stato. The Hack was announced on Monday via The Official Blog of Italy Anonymous. Data uploaded on torrent and available for download. The group has started a campaign named AntiSecITA. "Anonymous...

Sinapsi Devices Vulnerabilities

Overview This advisory is a follow-up to the alert titled ICS-ALERT-12-284-01—Sinapsi eSolar Light Vulnerabilities that was published October 10, 2012. Independent researchers Roberto Paleari and Ivan Speziale identified four vulnerabilities and released proof-of-concept exploit code for the...

Progea Movicon Memory Corruption Vulnerability

Overview Security researcher Dillon Beresford of IXIAhttp://www.ixiacom.com/, website last accessed May 10, 2012. has identified a memory corruption vulnerability in the Progea Movicon application. This vulnerability can be exploited by a remote attacker; however, no public exploits are currently...

Italian Police website SAPPE defaced by #Antisec Hackers

Italian Police website SAPPE defaced by Antisec Hackers Anonymous Hackers deface the website of Italian Police , SAPPE - Independent Police Trade Union Prison for Operation Antisec. Hackers dedicate there Hacks to Operation FreeTopiary also. Hack is possibly Perform by @LulzSecITALY & @anonitaly...