Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities

Swoopo Gold Shop CMS 8.4.56 - Multiple Web Vulnerabilities Title: ====== Swoopo Gold Shop CMS v8.4.56 - Multiple Web Vulnerabilities Date: ===== 2012-05-14 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=515 VL-ID: ===== 515 Common Vulnerability Scoring System:...

Citing Terms Of Service, Google Takes Down Blog Of Iranian Security Researcher

An Iranian man who revealed a vulnerability in a widely used point of sale POS system in Iran had his blog confiscated by Google, which cited violations of its Terms of Service. A Google spokesman acknowledged that the company pulled down the Blogger site that Khosrow Zarefarid, an Iranian IT...

Groupon Piggyback Site Offers $500 Voucher, Charges Users for Allegedly 'Free' Trial Offers

A domain registered two days ago as groupon500.com, which claims to offer a $500 voucher toward Groupon or its primary competitor, LivingSocial, is actually registering users for ‘free’ trial offers that aren’t free at all. The best part, however, is that everything about this scam is perfectly...

SA-CONTRIB-2012-018 - Revisioning - Cross Site Scripting

CVE: CVE-2012-1060 The Drupal Revisioning module https://drupal.org/project/revisioning "is a module for the configuration of workflows to create, moderate and publish content revisions." The Revisioning module contains a persistent cross site scripting XSS vulnerability due to the fact that it...

Google to Revise Privacy Policy, Terms of Service, Users Can't Opt Out

Google announced Tuesday that it will revamp its privacy policy and terms of service, boiling more than 60 privacy policies down to one comprehensive document that will extend across most of their products. Under the new policy all information entered by users via Google will be indexed together...

Facebook 2012 Hacker Cup announced !

Facebook 2012 Hacker Cup announced Facebook today announced open registration for its second annual Hacker Cup, an annual algorithmic programming contest open to engineers from around the world. Programmers will be judged on accuracy and speed as they race to solve algorithmic problems to advance...

Google Enable SSL-based searches, Will impact Google Analytic !

Google Enable SSL-based searches, Will impact Google Analytic ! According to a blog post by Google, the company is taking steps towards making search more secure for its users. Users will be redirected to https:// instead of https:// when going to do a Google search. By forcing SSL on...

British VPN Service Defends Role in Lulzsec Bust

British virtual private network VPN company Hide My Ass has taken a stand about their involvement in the arrest of an alleged Lulzsec member last week. In a blog post published on Friday, the company reiterated that they keep logs of their users’ history for 30 days and they will cooperate with l...

Huddles and Muddles

Google+’s new Huddle function is a group messaging platform that allows Google+ friends who have the G+ application to communicate en masse – Twitter-like. Beware, though: there’s a fine line between huddling and spamming. For one thing, starting a Huddle will send a text message to all your...

South Carolina Bill Targets Cybercrimes with Up to 10-Year Prison Terms

Computer hackers and unauthorized informants could face up to 10 years in prison under a proposed state law designed to protect South Carolina military installations from WikiLeaks-type scandals. Charleston Republican Rep. Chip Limehouse announced on Monday that his bill, which will be considered...

SA-CONTRIB 2010-075 - Tagging - Cross Site Scripting

The Tagging module provides an alternative input widget and other features for taxonomy terms. The module does not properly escape user-provided content submitted to free-tagging vocabularies displayed on node previews, leading to a Cross Site Scripting XSS vulnerability. Any user with permission...

CVE-2010-1303

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary 1...

CVE-2010-1303

Multiple cross-site scripting XSS vulnerabilities in the Taxonomy Filter module 6.x before 6.x-1.1 for Drupal allow remote authenticated users, with administer taxonomy permissions or create node permissions when free tagging is enabled, to inject arbitrary web script or HTML via vocabulary 1...

CVE-2010-1303

Affected product: Drupal Taxonomy Filter module 6.x (before 6.x-1.1). Vulnerable component: vocabulary names, terms, and filter menus allow cross-site scripting via free tagging. Root cause: multiple XSS vulnerabilities enabling injection of arbitrary web script/HTML by remote authenticated users...

CVE-2009-4110

Cross-site scripting XSS vulnerability in the search functionality in DotNetNuke 4.8 through 5.1.4 allows remote attackers to inject arbitrary web script or HTML via search terms that are not properly filtered before display in a custom results page...

Mandriva Security Advisory MDVSA-2009:289 (kernel)

The remote host is missing an update to kernel announced via advisory MDVSA-2009:289. OpenVAS Vulnerability Test $Id: mdksa2009289.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:289 kernel Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Gentoo Security Advisory GLSA 200608-25 (xorg-x11, xorg-server, xtrans, xload, xinit, xterm, xf86dga, xdm, libX11)

The remote host is missing updates announced in advisory GLSA 200608-25. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross site scripting

Cross-site scripting XSS vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms...

CVE-2008-3500

Cross-site scripting XSS vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms...

CVE-2008-3500

Cross-site scripting XSS vulnerability in the Suggested Terms module 5.x before 5.x-1.2 for Drupal allows remote authenticated users to inject arbitrary web script or HTML via crafted Taxonomy terms...