417 matches found
Joomla! Plugin - Beatz 1.x <= Multiple Cross Site Scripting Vulnerabilities
OVERVIEW Beatz 1.x versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Beatz is a set of powerful Social Networking Script Joomla! 1.5 plugins that allows you to start your own favourite artist band website. Although it is just a Joomla! plugin, it comes with full Joolma! bundle for...
How The Free Market Fails Privacy-Conscious Consumers
Editor’s Note: This is the first of a two-part podcast with security researcher Chris Soghoian. It’s a truism that the pace of technological change outstrips society’s ability to grasp the impact of that change. For the most part, the consequences of this are benign and the remedies...
PG Social Networking CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: PG Social Networking CSRF Author: Jonturk75 Vendor or Software Link: http://www.socialbiz.pro/social/ Category:: webapps Demo : http://demo.socialbiz.pro/social/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today...
Flock 2.6.1 Denial Of Service
Exploit Title: Flock 2.6.1 DoS Date: 29/03/2012 Author: r45c4l Email: [email protected] Product url: http://flock.en.softonic.com/ Version: 2.6.1 CVE : :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Produ...
SA-CONTRIB-2012-049 - ShareThis - Multiple Vulnerablies
The XSS issue is CVE: CVE-2012-2076 The CSRF issue is CVE: CVE-2012-2077 The ShareThis module allows you to display social networking tools to users. The administration forms of the module do not properly use the Form API allowing a malicious user to inject unexpected settings, allowing for...
IBM Report: Mobile Attacks, Phishing Attacks Mount in 2011
Spam volume is down, there are fewer unpatched software holes and oftware application developers did a better job of writing secure code over the last year. But IBM’s X-Force Trend and Risk Report still found plenty to worry about in 2011, according to a copy of the report released this week...
Prediction: Handful of Malicious Networks Will Spawn Most Attacks In 2012
A shadowy web of malicious networks, or “malnets” will be the source of two thirds of online attacks in 2012, according to a report from the security firm Blue Coat. Despite the continued industry focus on specific families and samples of malicious software, Blue Coat researchers say that...
Researchers Dump Trove of 0Days For Popular Android Applications
Researchers in China published a trove of information on previously unknown zero day vulnerabilities in popular applications for Google’s Android mobile operating system on Wednesday, including mobile browsers and at least one mobile wallet application. The vulnerabilities were found in a wide...
Koobface Gang Shuts Down C&C Server, Drops Offline
The crew behind the Koobface worm, who have been quite open about their exploits and financial gains from their work in the past, now seem to be ducking underground as pressure is building on them in the wake of exposures of their operation and real identities. The command-and-control server used...
Facebook 2012 Hacker Cup announced !
Facebook 2012 Hacker Cup announced Facebook today announced open registration for its second annual Hacker Cup, an annual algorithmic programming contest open to engineers from around the world. Programmers will be judged on accuracy and speed as they race to solve algorithmic problems to advance...
India orders Net firms to censor themselves
India orders Net firms to censor themselves Some of the world's top websites will have to purge themselves of all content that is offensive to Indians by February 6. The companies must update their progress on the effort within two weeks, a court in New Delhi ordered on Saturday, the reports say...
Iran government websites now on local server to Protect them from Cyber Attacks
Iran government websites now on local server to Protect them from Cyber Attacks An Iranian official says the country has transferred the location of most of its government websites from foreign-based hosting agencies to new computer facilities inside the country to avert potential cyber attacks...
Facebook Settles with FTC on Privacy Grounds
The Federal Trade Commission FTC proposed a settlement with social networking giant Facebook on Tuesday, requiring the site to take the privacy of its users more seriously and subject itself to privacy audits every two years for the next 20 years, according to an article in the New York Times. Th...
A Doomsday Worm - The Sputnik of 2011
We had an Interesting Article by "Paul F Renda " in our The Hacker News Magazine's November Edition. We would Like to share this article with our website readers also. You can Download November Issue Here. This is a theoretical prima to bring out a discussion about whether an Internet doomsday wo...
Trojan Makes Child-Porn Accusation, Locks Computer, Requests $17
A new ransomware scam locks down its victims’ computers, attempting to convince them that child pornography has been found therein, and informs users that their machine will be unlocked only after paying a $17 500 ruble fine, according to a BitDefender analysis reported by MalwareCity. The trojan...
Jcow CMS 4.x:4.2 <= , 5.x:5.2 <= | Arbitrary Code Execution
Jcow CMS 4.x:4.2 = , 5.x:5.2 = | Arbitrary Code Execution 1. OVERVIEW Jcow CMS versions 4.x: 4.2 and lower, 5.x: 5.2 and lower are vulnerable to Arbitrary Code Execution. 2. BACKGROUND Jcow is a flexible Social Networking software written in PHP. It can help you to build a social network for your...
Jcow CMS 4.2 <= | Cross Site Scripting
Jcow CMS 4.2 = | Cross Site Scripting 1. OVERVIEW Jcow CMS 4.2 and lower versions are vulnerable to Cross Site Scripting. 2. BACKGROUND Jcow is a flexible Social Networking software written in PHP. It can help you to build a social network for your interests and passions, a member community for...
Jcow Social Networking Script 4.2 <= 5.2 Arbitrary Code Execution
Exploit for php platform in category web applications Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote...
Jcow Social Networking Script 4.2 < 5.2 - Arbitrary Code Execution (Metasploit)
Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote Command Execution', 'Description' = %q This module exploit...