Microsoft.com Cross Site Scripting

Date: 19.03.2012 Author: Sony and Flexxpoint Web Browser : Mozilla Firefox Sony Blog: http://st2tea.blogspot.com Flexxpoint Blog: http://flexxpoint.blogspot.com/ .................................................................. For Ryuzaki Lawlet:...

Volusion Chat Cross Site Scripting

Exploit Title: Volusion Chat Cross Site Scripting Date: 15.03.2012 Author: Sony Software Link: http://www.volusion.com/ Google Dorks: inurl:livechat.aspx?ID= intext:volusion or intext:powered by volusion Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Anonymous Takedown several Vatican Websites

Anonymous Takedown several Vatican Websites The Italian Anonymous Hackers took down the Vatican's website Vatican.va on Wednesday in retaliation for the "corruption" of the Roman Catholic Church. On an Italian-language website Anonymous accused the Catholic Church of being responsible for various...

King of Hacks? Sony Breach May Have Yielded Thousands of Michael Jackson Songs

Parts of pop icon Michael Jackson’s discography, possibly his entire back catalog, have allegedly been stolen from Sony Music by hackers, according to a report from BBC this morning. It’s uncertain exactly how many songs were stolen. According to a report from The Guardian, hackers pilfered more...

Hackers steal Michael Jackson's entire back catalog from Sony

Hackers steal Michael Jackson's entire back catalog from Sony Entertainment giant Sony has confirmed that hackers accessed its systems and compromised Michael Jackson's entire back catalogue, including many unreleased songs. Michael Jackson's entire back catalogue has been stolen by Internet...

Livejournal.com Cross Site Scripting

Exploit Title: Livejournal.com Cross Site Scripting Date: 27.02.2012 Author: Sony Software Link: http://www.livejournal.com/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/livejournalcom-cross-site-scripting.html...

LibreSource Cross Site Scripting

Exploit Title: LibreSource Cross Site Scripting Date: 25.02.2012 Author: Sony Software Link: http://dev.libresource.org/ Google Dorks: intext:Printable version - LibreSource Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Unfixed XSS vulnerability at chat.stackexchange.com

Security researcher Sony, has submitted on 17/02/2012 a cross-site-scripting XSS vulnerability affecting chat.stackexchange.com, which at the time of submission ranked 1087 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is...

JaWiki Cross Site Scripting

Exploit Title: JaWiki Cross Site Scripting Date: 16.02.2012 Author: Sony Software Link: http://sourceforge.net/projects/jawiki/ Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/jawiki-cross-site-scripting.html...

Unfixed Script Insertion vulnerability at jicama.cs.washington.edu

Security researcher Sony, has submitted on 16/02/2012 a Script Insertion vulnerability affecting jicama.cs.washington.edu, which at the time of submission ranked 3079 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is currently...

Unfixed XSS vulnerability at fwl00138a.mefeedia.com

Security researcher Sony, has submitted on 02/01/2012 a cross-site-scripting XSS vulnerability affecting fwl00138a.mefeedia.com, which at the time of submission ranked 7928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is...

PlayStation Network Chief Leaves Sony After 17-Year Run

Susan Panico, the head of Sony’s PlayStation Network PSN, has left that company, according to a report from Venture Beat. Panico’s tenure as head of the PSN was reportedly marked by vast growth, but was marred in the last year by a series of missteps, including the May, 2011 data breach affecting...

Unfixed XSS vulnerability at www.clickajob.co.uk

Security researcher Sony, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.clickajob.co.uk, which at the time of submission ranked 648082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Unfixed XSS vulnerability at www.thesecurityweb.co.uk

Security researcher Sony, has submitted on 30/01/2012 a cross-site-scripting XSS vulnerability affecting www.thesecurityweb.co.uk, which at the time of submission ranked 19299060 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

Data Breach Affects Two Million NY Customers, State Commission to Investigate

The New York State Public Service Commission announced yesterday they’ll be looking into a data breach that may have exposed the personal information of almost two million customers to unknown attackers. An employee from a software consulting firm contracted by New York State Electric & Gas NYSEG...

Unfixed XSS vulnerability at elibrary2.eosintl.com

Security researcher Sony, has submitted on 24/01/2012 a cross-site-scripting XSS vulnerability affecting elibrary2.eosintl.com, which at the time of submission ranked 1378082 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 17/02/2012. It is...

Sony Pictures Website, Facebook Page Defaced

A twitter user operating under the handle @s3rverexe s3rver.exe claims to have hacked into and defaced the website and Facebook page of Sony Pictures. S3rver.exe posted video evidence of the hack on Youtube and allegedly posted comments as the admin on Sony Pictures’ Facebook page. Both the...

Sony Pictures Facebook Page & Website Hacked again !

Sony Pictures Facebook Page & Website Hacked again ! The hacking group Anonymous has confirmed that they have once again hacked Sony Pictures, gaining access to their Facebook account and website. Anonymous did threaten Sony for supporting the controversial SOPA bill and now it seems that the...

FuseTalk Forums 3.2 Cross Site Scripting

Exploit Title: FuseTalk Forums v3.2 Cross Site Scripting Date: 2.01.2012 Author: Sony Software Link: http://www.fusetalk.com/ Google Dorks: inurl:/login.cfm?windowed=yes Version: v3.2, maybe another version Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC:...

Unfixed XSS vulnerability at scripts.sil.org

Security researcher Sony, has submitted on 01/01/2012 a cross-site-scripting XSS vulnerability affecting scripts.sil.org, which at the time of submission ranked 54942 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/01/2012. It is currently...