Cross site scripting

Opera before 12.10 does not properly implement the Cross-Origin Resource Sharing CORS specification, which allows remote attackers to bypass intended page-content restrictions via a crafted request...

Regulator Warns Banks About DDoS Attacks, Encourages Information Sharing

In an alert issued by the Office of the Comptroller of the Currency OCC, Deputy Comptroller for Operational Risk Carolyn G. DuChene warned financial and other critical institutions about the wave of ongoing distributed denial of service DDoS attacks targeting their networks. DuChene is urging the...

Nvidia Display Driver Service Attack Escalates Privileges on Windows Machines

There’s nothing like a zero-day to ruin the holiday break, but that’s just what may be in store for engineers at Nvidia after a researcher discovered a new vulnerability in the Nvidia Display Driver Service. The flaw could hand over administrator privileges on Windows machines to an attacker. Pet...

PHPCMS V9 video sharing module SQL injection vulnerability analysis-vulnerability warning-the black bar safety net

Nonsense not say,directly on behalf of the code analysis \phpcms\modules\video.php7 of 8 lines of code / Video Add method / public function add if $POST'dosubmit' //First deal submitted over the data $data'vid' = $POST'vid'; // obviously the VID is not filtered if !$ data'vid'...

National Strategy Could Nudge Security Information Sharing Forward

In the early days of the Obama administration, the president declared cyberspace a critical asset. Since then, little more than lip service has been paid on a policy level to the security of the country’s critical infrastructure, despite increasing public awareness of the problem and high-profile...

Instagram Privacy Changes Start Clock Ticking for Users Who Want to Opt-Out

Instagram users have some soul searching to do between now and Jan. 16 when new terms of service kick in that give the photo-sharing social network the right to sell personal photos without the user’s permission or compensating them. The most startling change reads: “To help us deliver interestin...

[TOR v0.2.3.25] Virtual Network Tunneling Tool

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. It provides the foundation for a range of applications that allow...

PASSTEAL Malware Lurking on File Sharing Sites

Variants of the PASSTEAL malware are propagating by masquerading as key generators for paid applications, popular e-books, and other software on file sharing services, according Alvin John Nieto, a threat response engineer at TrendMicro’s TrendLabs. PASSTEAL, as its name suggests, is a piece of...

Fedora 17 : openstack-glance-2012.1.2-2.fc17 (2012-18085)

Fix Glance Authentication bypass for image deletion - Update to stable/essex 2012.1.2 including... - Support zero-size image creation via the v1 API - Allow admins to share images regardless of owner - Log sensitive store info, rather than exposing over API - Fix the qpidheartbeat option to avoid...

Bulgarian torrent tracker forum hacked and accused of collecting user IP

A Russian hacker going by name - "kOS" hack into the Bulgarian torrent tracker "Arenabg" website https://forum.arenabg.com/ and leak the complete database of their forum and accused of collecting IP of users like PirateBay. Hacker said, "Why I hack this tracker? Because they store IP information...

Adequate Attack Data and Threat Information Sharing No Longer a Luxury

BOSTON – While some industry groups such as the Financial Services Information Sharing and Analysis Center FS-ISAC and cross-industry groups such as the Advanced Cyber Security Center ACSC facilitate the exchange of threat information, for the most part organizations are still hamstrung by legal...

Guadeloupe National Domain registrar hacked, Twitter & Google domain credentials leaked

Guadeloupe is a Caribbean island located in the Leeward Islands, in the Lesser Antilles. Today a hacker going by name "UR0B0R0X" claimed to hack into the "Network Information Center Guadeloupe" nic.gp, which is Guadeloupe National Domain registrar having control over domains of big companies like...

Dimensions social sharing system word vulnerability-vulnerability warning-the black bar safety net

Brief description: Profile filter is not strict, resulting in the word arbitrary code execution. Detailed description: Profile filter is not strict, the user-submitted code is saved, the template cache after the read again when the direct execution of user code! Vulnerability to prove: ! ! Repair...

Peer-to-Peer Framework: GNUnet

GNUnet is a peer-to-peer framework with focus on providing security. All peer-to-peer messages in the network are confidential and authenticated. The framework provides a transport abstraction layer and can currently encapsulate the network traffic in UDP IPv4 and IPv6, TCP IPv4 and IPv6, HTTP, o...

opera -- multiple vulnerabilities

Opera reports: CORS Cross-Origin Resource Sharing allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target...

CORS requests can incorrectly retrieve contents of cross origin pages – Opera Security Advisories

CORS Cross-Origin Resource Sharing allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target site sends the...

CORS requests can incorrectly retrieve contents of cross origin pages

CORS Cross-Origin Resource Sharing allows web pages to retrieve the contents of pages from other sites, with their permission, as they would appear for the current user. When requests are made in this way, the browser should only allow the page content to be retrieved if the target site sends the...

Anonymous leaks Classified Documents from Greek Finance Ministry server

Collective hacking group Anonymous leaks username-passwords and classified documents from Greek Finance Ministry server. Just a few days before the Greek Parliament is scheduled to vote on a $17.45 billion spending cut and tax hike plan. Attack was carried out under anonymous operation named -...

WordPress Plugin social discussions 6.1.1 - Multiple Vulnerabilities

waraxe-2012-SA093 - Multiple Vulnerabilities in Wordpress Social Discussions Plugin ====================================================================================== Author: Janek Vind "waraxe" Date: 17. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-93.html...

Wordpress Social Discussions 6.1.1 File Inclusion / Path Disclosure

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-93.html Description of vulnerable target: Enables Social Sharing of your blog posts to 30+ Social Networks. Plugin also enables you to Automatically Publis...