Researchers detected the Malware that targets the Russian stock-trading platform QUIK

Security Researcher from Group-IB Group-IB is one of the leading companies in global cybercrime prevention and hi-tech crime investigations has found a new kind of malware that targets the Russian stock-trading platform QUIK. It was detected during several targeted attacks starting in November 20...

MailOrderWorks 5.907 Cross Site Scripting

Title: ====== MailOrderWorks v5.907 - Multiple Web Vulnerabilities Date: ===== 2013-01-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=798 VL-ID: ===== 796 Common Vulnerability Scoring System: ==================================== 4.5 Introduction: ============= Mail...

MailOrderWorks 5.907 - Multiple Vulnerabilities

MailOrderWorks 5.907 - Multiple Vulnerabilities Title: ====== MailOrderWorks v5.907 - Multiple Web Vulnerabilities Date: ===== 2013-01-02 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=798 VL-ID: ===== 796 Common Vulnerability Scoring System:...

MailOrderWorks v5.907 - Multiple Web Vulnerabilities

Document Title: =============== MailOrderWorks v5.907 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=798 Release Date: ============= 2013-01-02 Vulnerability Laboratory ID VL-ID: ==================================== 796...

Android Stock Browser Iframe DOS

This module exploits a vulnerability in the native browser that comes with Android 4.0.3. If successful, the browser will crash after viewing the webpage. Module Options msf use auxiliary/dos/android/android/stockbrowseriframe msf undefinedstockbrowseriframe show actions ...actions... msf...

Hong Kong stock exchange Hacker sentenced for 9 Months Jail

Tse Man- lai, 28-year-old businessman, owner of an information technology company, launched denial-of-service DoS attacks on Hong Kong stock exchange last year on August 12 and 13 , was sentenced to nine months in jail on Friday. According to SCMP, Tse Man- lai, who had pleaded not guilty to two...

Report Details Coca-Cola Cyber Attack That Never was Disclosed

In an exclusive report, Bloomberg News outlines a month-long, systematic attack on Cola-Cola’s computer systems that may have influenced the failed $2.4 billion acquisition of a Chinese juice company. The FBI knew about it. Coca-Cola knew about it. But shareholders were kept in the dark. The Coke...

DHS Chief Uses 'Sandy' to Underscore Cybersecurity Threats

While the eastern United States recovers from this week’s devastasting storm, the nation’s Homeland Security chief used “Superstorm Sandy” to promote the importance of national cybersecurity protection. “One of the possible areas of attack, of course, is attacks on our nation’s control systems —...

New Android Exploit Could Force Factory Reset remotely

Clicking one wrong link can cause malicious code to execute, which could do anything from infecting your computer with malware to, apparently, wiping your phone data completely. At the Ekoparty security conference, researcher Ravi Borganokar demonstrated at the Ekoparty security conference in...

Bank of America Website under Cyber Attack from Islamic Hackers

Bank of America's website experienced periodic outages Tuesday due to cyber attacks launched in retaliation for "Innocence of Muslims," the amateurish film whose mocking portrait of the Prophet Muhammad has incited deadly riots throughout the Middle East. "Cyber fighters of Izz ad-din Al qassam"...

CVE-2012-2057

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

CVE-2012-2057

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

CVE-2012-2057

CVE-2012-2057 affects the Ubercart Bulk Stock Updater module for Drupal 6.x (Ubercart 2.x). The vulnerability arises because the module does not properly use the Drupal Form API, enabling a CSRF attack that could allow remote attackers to hijack the authentication of unspecified victims via unkno...

CVE-2012-2057: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in the Ubercart Bulk Stock Updater module for Drupal allows remote attackers to hijack the authentication of unspecified victims via unknown vectors related to formAPI...

PT-2012-3771

Name of the Vulnerable Software and Affected Versions Drupal Ubercart Bulk Stock Updater module affected versions not specified Description A cross-site request forgery CSRF issue exists, allowing remote attackers to hijack the authentication of victims via unknown vectors related to formAPI...

SA-CONTRIB-2012-036 - Multiple Modules Unsupported

CVE: CVE-2012-2056 Content Lock Is a module that prevents users from concurrent editing of nodes. This module does not use a token for unlocking a content lock. This leads to a CSRF attack vector. CVE: CVE-2012-2057 Ubercart Bulk Stock Updater is an extension module for Ubercart 2.x running on...

Facebook down for two hours across Europe, May be DDOS attack !

Facebook down for two hours across Europe, May be DDOS attack ! In a DDoS attack, hackers deliberately render servers inaccessible by overloading them with traffic. Such a barrage aimed at DNS servers can make it impossible to connect users to a website when they type the address. Where as facebo...

Anonymous-Linked Attacks Hit US Stock Exchanges

The Websites of the NASDAQ and BATS stock exchanges as well as the Chicago Board Options Exchange CBOE were knocked offline for parts of Monday and Tuesday after coming under a sustained online attack by a group with links to Anonymous. Trading on the exchanges continued unabated on Monday and...

Indian Stock Market next target of Bangladesh Hackers

Indian Stock Market next target of Bangladesh Hackers Bangladesh Cyber Army hackers released a Youtube video mentioning their next attack would be on Indian Stock Market, in order to Protesting the killing of another Bangladeshi citizen on Border by BSF. Bangladesh Cyber Army has attacked 3...