UBUNTU-CVE-2011-1185

Google Chrome before 10.0.648.127 does not prevent 1 navigation and 2 close operations on the top location of a sandboxed frame, which has unspecified impact and remote attack vectors...

Albanian Cyber Army Hack into Digitalb.al & Top-channel.tv !

Albanian Cyber Army Hack into Digitalb.al & Top-channel.tv ! Shell on Top-channel.tv Shell on Digitalb.al News Source : Albanian Cyber Army...

Veracode Announces Mobile App Verification Service

Application testing firm Veracode said on Wednesday that it was expanding its service to vet the security of mobile applications to cover Apple iPhone and Google Android devices. In a statement, Veracode said it was accepting submissions of mobile applications for testing for all mobile platforms...

Joomla! 1.0.x ~ 1.0.15 | Cross Site Scripting (XSS) Vulnerability

============================================================================== Joomla! 1.0.x 1.0.15 | Cross Site Scripting XSS Vulnerability ============================================================================== 1. OVERVIEW The Joomla! 1.0.x series are currently vulnerable to Cross Site...

Jose Ignacio Lopez (GM)

Lopez was the head of General Motors’ Global Purchasing division when he defected for GM competitor VW to head that company’s purchasing operation in 1993. According to a lawsuit filed by GM, Lopez and other company executives brought with them more than two million pages of top-secret GM...

Top-Channel.Tv DDOS Atack By Teo DownTurn (AHT-CREW)

Top-Channel.Tv DDOS Atack By Teo DownTurn AHT-CREW Top-Channel.Tv The Best TV Channel In Albania...!!! Found this article interesting? Follow us on Twitter  and LinkedIn to read more exclusive content we post...

Threatpost's List of the Top 10 Security Top 10 Lists

Ever since the traditional print industry collapsed in on itself like a decommissioned ‘Vegas casino, replaced with blogs, micro blogs, social networking and other forms of Web based publishing, the end of the year has brought with it a blizzard of retrospective and prospective Top 10 lists from...

Data Consumption via Opera Mini Reaches 6.3 Petabytes

Opera releases monthly data generated by its users. In November 2010, Opera reported significant increases in unique users, pages viewed, and data consumed via its Mini browser. Around 80 million people used the Opera Mini browser in November, viewing 44.6 billion pages. According to Opera, its...

PHP Top Sites Cross Site Scripting / SQL Injection

PHP Top Sites Multiple SQL/XSS Vulnerability Author : kAsvææ | c0de Hunters Name : PHP Top Sites Bug Type : SQL/XSS Version :All Google Dork:"Powered By PHP TopSites" Home Page : http://itop10.net/ You can download it : http://webscripts.softpedia.com/script/Top-Sites/PHP-TopSites-41994.html SQL ...

Study Finds Popular Sites Guilty of Hi-Jacking History

A recent study launched by the UC San Diego Department of Computer Science to determine the scope of privacy-violating information flows at popular websites shows that popular Web 2.0 applications such as mashups, aggregators, and sophisticated ad targeting are teeming with various kinds of...

Joomla! 1.5.20 <= Cross Site Scripting (XSS) Vulnerability

OVERVIEW The Joomla! web application was vulnerable to Cross Site Scripting vulnerability. 2. PRODUCT DESCRIPTION Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a model–view–controller MVC Web application...

ShmooCon

Washington D.C., U.S. Go to Shmoo. Enjoy yourself at Shmoo. But for God’s sake, just don’t ask anyone at Shmoo who they work for. This D.C. based hacking con, now in its seventh year, is lousy with spooks and other assorted hackers in the employ of Uncle Sam. The show was started and took its nam...

Hack in the Box (HITB)

Kuala Lumpur, Malaysia Booked as “Asia’s Premier Deep Knowledge Security Conference,” HITB is in its 8th year and has since expanded into other countries in the Middle East and Europe. Modeled on shows like Black Hat, HITB offers both training sessions and a multi track security conference and...

Month Of Abysssec Undisclosed Bugs - Sirang D-Control

''' | / |/ \ /\ | | | | \ | \ / | | | | / \ | | | | | | | |/| | | | |/ /\ | | | | "" then txt10 ="select from "+ cstrtblname +" where del='false' and id='"+ id +"'" set xx = conn.executetxt10 if not xx.eof then ... lots of files those will have to do input validation from user input are...

Joomla! Component com_bc Cross Script Scripting (XSS) Vulnerability

===================================================================== Joomla! Component combc Cross Script Scripting XSS Vulnerability ===================================================================== 1. OVERVIEW The Joomla! Component combc was vulnerable to Cross Script Scripting XSS...

DEBIAN-CVE-2010-2543

Cross-site scripting XSS vulnerability in include/topgraphheader.php in Cacti before 0.8.7g allows remote attackers to inject arbitrary web script or HTML via the graphstart parameter to graph.php. NOTE: this vulnerability exists because of an incorrect fix for CVE-2009-4032.2.b...

MDVA-2009:224 : mandriva-kde4-config

This package adds new top bar for Mandriva Flash 2010 edition. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from Mandriva...

CGI Generic Open Redirection

By providing specially crafted parameters to CGIs, Nessus was able to redirect to a third-party website. As redirections are commonly used, it is possible that users will be unaware that something abnormal is happening. This kind of attack can be used to steal confidential data, typically...

Top Sites SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== Top Sites SQL Injection Vulnerability ===================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /...

Top Sites Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Top Sites SQL Vulnerable Vendor url:http://getaphpsite.com Version:1 Price:20$ Published: 2010-06-22...