Hardware Maker LaCie Admits Yearlong Data Breach

The French computer hardware company LaCie, perhaps best known for their external hard drives, announced this week it fell victim to a data breach that may have put at risk the sensitive information of anyone who has purchased a product off their website during the last year. According to an...

vtiger CRM 6.0 RC RCE

Remote command execution vulnerability in vtiger CRM Install Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder LFI

Local file include vulnerability in vtiger CRM kcfinder component Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder File Upload

File upload vulnerability in vtiger CRM kcfinder component Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014

Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...

Seportal 2.5 SQLi

SQL injection in staticpages.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 File Upload

File upload vulnerability in vtiger CRM SOAP AddEmailAttachment service Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 get_tickets_list SQLi

SQL Injection vulnerability in vtiger CRM getticketslist SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Joomla 3.2.2 mod_tags_similar SQL Injection

SQL Injection vulnerability in Joomla 3.2.2 modtagssimilar/helper.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

webERP 4.11.3 - 'SalesInquiry.php?SortBy' SQL Injection

============================================================== Title ...| SQL Injection in webERP Version .| 4.11.3 Date ....| 28.02.2014 Found ...| HauntIT Blog Home ....| http://www.weberp.org ==============================================================...

Threat Outbreak Alert: Fake Sales Document Notification Email Messages on February 24, 2014

Medium Alert ID: 33022 First Published: 2014 February 25 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales document for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Sales Document Notification Email Messages on February 24, 2014

Medium Alert ID: 33021 First Published: 2014 February 25 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales document for the recipient. The text in the email message attempts to convince the recipient to open...

php_address_book authentication SQL injection

SQL Injection vulnerability in PHP Address Book Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

appRain 3.0.2 SQL Injection

SQL Injection vulnerability in appRain Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Bugging the Bug Market

PUNTA CANA–The Microsoft bug bounty program, started last year as a way to encourage researchers to develop new offensive and defensive techniques, has been a success so far and the company is looking for new ways to expand it in the future. Katie Moussouris, the security strategist at Microsoft...

Sophos Web Protection Appliance 3.7.8.1 RCE

Remote command execution vulnerability in Sophos Web Protection Appliance Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

HP SiteScope runOMAgentCommand 11.20 RCE

Remote code execution vulnerability in HP SiteScope runOMAgentCommand Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

2013: The Security Year in Review

Dennis Fisher and Mike Mimoso talk about the year that was in the security industry, including the last six months of NSA drama, the Microsoft bug bounty program, exploit sales and attacks against major banks...

Cisco WebEx Sales Center反射型跨站脚本漏洞

Bugtraq ID:64272 CVE ID:CVE-2013-6711 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center用于创建新产品的管理页面存在跨站脚本漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时可获取敏感信息或者劫持用户会话。 0 Cisco WebEx Sales Center 厂商补丁： Cisco ----- 用户可参考如下厂商提供的安全公告获得补丁信息：...

Cisco WebEx Sales Center开放重定向漏洞

Bugtraq ID:64271 CVE ID:CVE-2013-6959 Cisco WebEx是一款网络会议解决方案。 Cisco WebEx Sales Center存在开放重定向漏洞，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，可重定向用户到攻击者指定WEB站点，进行网络钓鱼等攻击。 0 Cisco WebEx Sales Center 厂商补丁： IBM ----- 用户可参考如下厂商提供的安全公告获得补丁信息： http://tools.cisco.com/security/center/content/CiscoSecurityNotice/CVE-2013-695...