4XP Critical SQL Injection Vulnerability Exposed

zSecure team has recently discovered a critical SQL Injection Vulnerability in the web portal of 4XP, a leading online forex broker having more than 1 lakh customer base. Financial transactions are carried on the broker's paltform on daily basis including but not limited to Credit Card...

Appeals Court Calls Bank's Security "Commercially Unreasonable"

The United States Court of Appeals on Tuesday reversed a lower court’s decision, ruling that the IT security system used by a domestic bank was not “commercially reasonable” to protect its customers. The ruling PDF, in the case of People’s United Bank formerly Ocean Bank of Maine versus Patco...

Tatanga Trojan Mixes MitB with Social Engineering

Cybercriminals are using the Tatanga trojan to carry out a complicated man-in-the-browser MitB attack that enables the circumvention of SMS authentication for financial transactions, according to Trusteer’s Amit Klein. The attack is targeting the customers of a number of banks in Germany. How man...

BitCoin hacked, More than 18,000 Bitcoins Stolen

Bitcoinica, a Bitcoin exchange started by a 17-year old teenager Zhou Tong, has been shut down for security investigations. It's believed that at least 18,000 BTC $90,000 or 68,000 EUR have been stolen.News of the hack was posted this morning by Bitcoinica's founder, Zhou Tong: "Today, we have...

Specialized Trojan can stealing credit card details from hotel

Specialized Trojan can stealing credit card details from hotel The next time you check in to a hotel, a cybercriminal could be checking you out. A remote access computer Trojan RAT designed to steal credit card details from hotel point-of-sale PoS applications is being sold on the underground...

Security Concern : Internet Enabled TV can be hacked !

Security Concern : Internet Enabled TV can be hacked ! Is your Internet TV vulnerable to hackers? Internet TVs could be the newest avenue for cybercriminals to infiltrate your home or business. Last year, Researchers at Mocana, a security technology company in San Francisco, recently discovered...

eCommerce Fraud Detection Tool - An Anti-fraud solution by MasterCard

eCommerce Fraud Detection Tool - An Anti-fraud solution by MasterCard In the past, a lost wallet, stolen credit card, or misplaced ID were among the paramount culprits of identity theft.Today, one need not lose a thing to eventually lose it all. commerce merchants have a new tool at their disposa...

Cross-site scripting (XSS) Vulnerability reported on Paypal

Cross-site scripting XSS Vulnerability reported on Paypal Paypal is affected by an XSS vulnerability where it fails to validate input on URL shown in above image. PayPal fixed the vulnerability shortly after being notified that its publicly posted. XSS, in general is a vulnerability that allows...

The Value Of Data Privacy To Consumers? About 65 Cents.

What is the value of data privacy to online shoppers? About 65 cents, according to a new study of by researchers in Britain and Germany. The report: “Study on Monetising Privacy: An Economic Model for Pricing Personal Information” was released in February and presents the results of work by...

NIST, Maryland Plan New Cybersecurity Center

The US National Institute of Standards and Technology NIST announced plans Tuesday to break ground on a new center that will be committed to cybersecurity research. The National Cybersecurity Center of Excellence will be built near NIST’s Gaithersburg, Md., campus in hopes of strengthening the...

FBI warning about Banking trojan "Gameover"

FBI warning about Banking trojan "Gameover" Organized crooks have begun launching debilitating cyber attacks against banks and their customers as part of a smoke screen to prevent victims from noticing simultaneous high-dollar cyber heists. On Friday the FBI issued a warning about a banking troja...

Citrix Receiver, XenDesktop "Pass-the-hash" Attack

Tested against: Citrix XenDesktop, XenServer, Receiver 5.6 SP2 possibly other versions as well By default, the authentication between the Citrix Receiver client to the Web interface is not configured to use SSL. If a company elects not to use SSL for this, the XML transaction between the receiver...

Automated HTTPS Vulnerability Testing by Qualys SSL Labs

Automated HTTPS Vulnerability Testing by Qualys SSL Labs One of main problem in HTTP protocol is encrypting traffic and verifying data security, securing the web application against any threat is very important especially that if hackers conduct a Man-in the middle attack he can get all users...

New Guidelines Address PCI DSS Tokenization

"Tokenization" is one of the best techniques to reduce the risk of credit card data loss. Basically, it is the process of substituting sensitive data with other values not considered sensitive. By doing this, tokenization technology essentially removes anything of value from the data stream, and,...

CMSPro! 2.08 - Cross-Site Request Forgery

CMSPro! 2.08 - Cross-Site Request Forgery CMSPro! 2.08 CSRF Vulnerability Title : CMSPro! 2.08 Cross Site Request Forgery CSRF Vulnerability Software : CMSPro! Version : 2.08 Site : http://www.wojoscripts.com/cmspro/ or http://codecanyon.net/item/cms-pro-lightweight-content-management-system/1400...

CMSPro! 2.08 CSRF Vulnerability

Exploit for php platform in category web applications Title : CMSPro! 2.08 Cross Site Request Forgery CSRF Vulnerability Software : CMSPro! Version : 2.08 Site : http://www.wojoscripts.com/cmspro/ or http://codecanyon.net/item/cms-pro-lightweight-content-management-system/140078 Author : Xadprito...

eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities

Document Title: =============== eClime eCommerce JE 1.0.6b - SQL Injection Vulnerabilities Release Date: ============= 2011-07-13 Vulnerability Laboratory ID VL-ID: ==================================== 82 Product & Service Introduction: =============================== eclime is a very powerful...

Kofax 2.5.0.933 File Overwrite

Vulnerability ID: HTB23016 Reference: http://www.htbridge.ch/advisory/kofaxetransactionssendersendboxactivexcontrolsavemessageinsecuremethod.html Product: Kofax e-Transactions Sender Sendbox Vendor: Kofax, Inc http://www.kofax.com/ Vulnerable Version: 2.5.0.933 and probably prior Tested on:...

Kofax e-Transactions Sender Sendbox ActiveX Control Insecure Method

High-Tech Bridge SA Security Research Lab has discovered a vulnerability in Kofax e-Transactions Sender Sendbox, which can be exploited to overwrite arbitrary files. 1 Insecure method in Kofax e-Transactions Sender Sendbox ActiveX Control The vulnerability is caused due to the LEADeMail.LEADSmtp....

Finnish Police Arrest 17 in Online Banking Scam

Finnish law enforcement officials arrested seventeen individuals in connection with an attack against Nordea Finland’s online banking services that took place in early 2010, according to a report from Softpedia. The group allegedly used a variant of the Gozi Trojan, also known as Papras, to pilfe...