PT-2012-2853

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp versions 8 and 9 Description The issue concerns multiple cross-site scripting XSS vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via a crafted URL. This is related to certain .htm files in the...

GAzie <= 5.20 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================== GAzie Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/ -------------------------------------------------------- @Application Info: Multicompany finance application written in PHP using a MySql...

Alleged Russian Cybercriminal Extradited to U.S.

Vladimir Zdorovenin, an alleged prolific Russian cybercriminal, has arrived in New York City following his arrest and subsequent extradition by Swiss authorities. The FBI had been working to find and extradite Zdorovenin for several years. Originally indicted under seal in May 2007, the 54-year-o...

Saudi hacker target Israeli stock exchange and National air carrier

Saudi hacker target Israeli stock exchange and National air carrier Saudi cyber Hacker OxOmar struck again on Monday. This time disrupted the websites of Israel's stock exchange and National air carrier. Last week he had leaked private information about more than 400,000 Israelis. Credit card...

Capexweb universal password-vulnerability warning-the black bar safety net

Title: Capexweb Sql Vulnerable Author: D1rt3 Dud3 Affected version: 1.1 A description of the problem: Capexweb is a Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc. http://www.badguest.cn /capexweb/capexweb/ Log in details: Username:...

Capexweb 1.1 - SQL Injection

Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

Capexweb 1.1 SQL Injection

Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

Capexweb 1.1 - SQL Injection

Capexweb 1.1 - SQL Injection Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc...

cApexWEB ver1.1 SQL Injection

Exploit for php platform in category web applications Exploit Title: Capexweb Sql Vulnerable Date: 15 Dec 2011 Author: D1rt3 Dud3 Google Dork: inurl:capexweb Gr33ts: Th3 RDX Version: 1.1 Description: Capexweb is Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angl...

Report: NASDAQ Hackers Spied On Corporate Directors

The hackers who compromised systems belonging to the NASDAQ stock market last year were able to install monitoring software that allowed them to spy on the doings of corporate directors, Reuters is reporting. The news adds critical details to the story of an October, 2010, compromise of Director’...

The Inside Story of the Kelihos Botnet Takedown

Earlier this week, Microsoft released an announcement about the disruption of a dangerous botnet that was responsible for spam messages, theft of sensitive financial information, pump-and-dump stock scams and distributed denial-of-service attacks. Kaspersky Lab played a critical role in this botn...

HKEx - Hong Kong stock exchange Hacked

HKEx - Hong Kong stock exchange Hacked Trading in Hong Kong was disrupted on Wednesday by a hacking incident on the Hong Kong Exchange website. "Our current assessment that this is a result of a malicious attack by outside hacking ," Charlies Li, chief executive of Hong Kong Exchanges & Clearing,...

HKEx - Hong Kong stock exchange Hacked

HKEx - Hong Kong stock exchange Hacked Trading in Hong Kong was disrupted on Wednesday by a hacking incident on the Hong Kong Exchange website. "Our current assessment that this is a result of a malicious attack by outside hacking," Charlies Li, chief executive of Hong Kong Exchanges & Clearing,...

PT-2011-3622

Name of the Vulnerable Software and Affected Versions Adobe RoboHelp versions 8 and 9 before 9.0.1.262 Adobe RoboHelp Server versions 8 and 9 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the URI, related to template...

Operation Icarus : Will Anonymous shut down the NYSE (New York Stock Exchange) ?

Operation Icarus : Will Anonymous shut down the NYSE New York Stock Exchange ? Anonymous Hackers starts Operation Icarus , They Release a Press Release Regarding This, as Posted Below : Operation Icarus Attention Brothers: The opportunity to create financial chaos and public unrest and from that,...

London Stock Exchange website gets hacked with Malware Ads !

London Stock Exchange website gets hacked with Malware Ads ! THE LONDON STOCK EXCHANGE LSE website has been bombarded with fake insecurity software adverts that point to malware. It seems that dodgy security ads have been unknowingly hosted at the LSE website for at least a few months. An analysi...

Nasdaq systems were hacked last year !

Federal authorities are investigating a computer advance at the aggregation that runs the Nasdaq banal exchange, the Wall Street Journal arise Friday. According to the report, which cites bearding sources, Nasdaq OMX Group computers were compromised ancient over the accomplished year, but the...

Front Accounting 2.3RC2 - Multiple SQL Injections

Advisory Name: Multiple SQL Injections in Front Accounting Internal Cybsec Advisory Id: 2010-1003-Multiple SQL Injections in Front Accounting Vulnerability Class: SQL Injection Affected Applications: Front Accounting v2.3RC2; other versions may also be affected. Affected Platforms: Any running...

Pump and Dump Hacker Gets 7-Year Sentence

An Indian national was sentenced to 81 months in prison for hacking into online brokerage accounts and using those accounts to manipulate stock prices for personal gain. Read the full article. Computerworld...

SEC: BroCo Investments Hijacked Accounts

A U.S. federal judge has agreed to freeze the assets of a company being accused of manipulating the stocks of 38 companies listed on the Nasdaq and New York Stock Exchange via compromised trading accounts. Read the full article. CNet...