XOOPS 2.3.2 RCE

Remote code execution vulnerability in XOOPS mydirname parameter Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Tiki Wiki CMS Groupware 8.2 RCE

Tiki Wiki CMS Groupware RCE pregreplace snarfajax.php Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

Apache ActiveMQ FD

Directory traversal vulnerability Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Fake iPhone Camera+ App Allowed in App Store

A fake version of the popular Camera+ iPhone application was offered on Apple’s App Store over the weekend, according to a post by Glyn Evans on the iPhoneography blog on Saturday, just the latest example of suspicious and malicious applications to slip through Apple’s shadowy application vetting...

CVE-2012-0074

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales...

Code injection

Unspecified vulnerability in the PeopleSoft Enterprise CRM component in Oracle PeopleSoft Products 8.9 allows remote authenticated users to affect integrity via unknown vectors related to Sales...

CVE-2012-0074

CVE-2012-0074 affects Oracle PeopleSoft Products 8.9 (PeopleSoft Enterprise CRM component). The description specifies an unspecified vulnerability allowing remote authenticated users to affect integrity via unknown vectors related to Sales. The provided connected documents do not give a concrete ...

Veeam Product Licensing

Purpose This article provides information regarding Veeam product licensing acquisition, access, and usage. Solution General Information about Licensing Veeam Product Licensing Information Veeam Licensing Frequently Asked Questions Veeam Licensing Policy Veeam End User License Agreement EULA...

EssentialSoft Sales Force Automation SQL Injection

+Exploit Title: EssentialSoft Sales Force Automation systems mass Login bypass exploit +Author : ^Xecuti0n3r + Date : 16.6.2011 + Hour : 13:37 PM + E-mail : xecuti0n3ryahoo.com + dork : intext:"designed and hosted by EssentialSoft" + Category : Web Apps SQli...

Coalfire Expands Dallas Office and Names Kurt Hagerman Managing Director

I am pleased to announce that our Dallas office is growing by leaps and bounds. Leading the charge is Kurt Hagerman, the newly appointed managing director. Kurt will serve more than 60 clients in the Southwest region and oversee Coalfires strategic vision while building new client relationships f...

Mobile Application Security – The New Frontier

The power and popularity of consumer mobile computing is changing faster then you can say iFart the 1 downloaded app worldwide. Commercial entities are rapidly adopting mobile-based applications for retail sales floors, restaurants and dining rooms, distributed mobile banking, and more...

Lush website is back online after hacking !

POOLE-based cosmetics retailer Lush is back online after it was forced to suspend internet sales after hackers attacked its website. Lush closed the site last month and asked anyone who placed an online order between October 4 and January 20 to contact their bank in case their card details had be...

Auto Database System 1.0 Infusion Addon SQL injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion,...

Auto Database System 1.0 Infusion Addon - SQL Injection

Auto Database System 1.0 Infusion Addon - SQL Injection Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion,...

PHP-Fusion Auto Database System 1.0 Infusion SQL Injection

Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://php.opensourcecms.com/scripts/redirect/download.php?id=480 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Tested on: Firefox 3.0.15, , IE 8, mySQL...

Google Funds Web Anti Malware Startup Dasient

Google Ventures, the venture capital arm of Google Inc., has invested in anti malware firm Dasient, according to a statement from the company on Monday. Based in Sunnyvale, California, Dasient sells a Web anti malware technology and has deep ties to Google. Co-founders Neil Daswani and Shariq Riz...

Be aware : Korean DDoS arrests !

The Korean Times reports the arrest of a pair of hackers over the weekend on DDoS charges. According to prosecutors, the pair, Lee and Park, operated a gambling website on behalf of a crime gang. In an effort to boost traffic to their own site, they used a 50,000-strong botnet to overload 109 riv...

Multi-Million Dollar Cyber Fraud Investigation Surrounds Exchange Students

Two international students from Vietnam are under investigation by the Department of Homeland Security on charges of identity theft and wire fraud. The two Winona State University students, Tram Vo and Khoi Van, are alleged to have taken part in a criminal ring that defrauded ecommerce merchants...

Resistant think Nick Online sales management system-path leakage-vulnerability warning-the black bar safety net

Brief description: All use of this program the IDC website are the existence of a path disclosure. Detailed description: In the website of domain name registration of domain registration suffix is the number of queries when excessive, can lead to the website path disclosure. Vulnerability to prov...

Future Group's E-Commerce Portal Hacked, Disrupting Online Sales

Future Group's plan to boost online sales has encountered a cyber obstacle. Its flagship e-commerce portal, FutureBazaar, was hacked and has been non-functional for the past two days. FutureBazaar CEO Rajiv Prakash described the incident as a "denial of service attack." He stated, "The website ha...