Clipbucket 2.6 - 'view_item.php?type' Cross-Site Scripting

source: https://www.securityfocus.com/bid/51321/info ClipBucket is prone to multiple SQL-injection vulnerabilities and multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal...

SenseSites CommonSense CMS - 'special.php?id' SQL Injection

source: https://www.securityfocus.com/bid/55893/info CommonSense CMS is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application, access...

Report: Hacks Of China Sites May Have Exposed Information On 100 Million

A string of attacks on prominent Chinese language websites and social networks may have leaked some 100 million username-password combinations online and revealed shoddy security practices at the sites, including Twitter competitor Sina Weibo. According to a report from the Beijing based Caixin...

EU Audit Forces Changes To Facebook Privacy Policies

An audit of Facebook’s operations by the Office of the Data Protection Commissioner in Ireland will result in major changes to the way the social networking giant manages user data. The 143 page report, issued on Wednesday, calls on Facebook to give users more control over how their personal...

China Software Developer Network (CSDN) 6 Million user data Leaked

China Software Developer Network CSDN 6 Million user data Leaked The "Chinese Software Developer Network" CSDN, operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name,...

China Software Developer Network (CSDN) 6 Million user data Leaked

China Software Developer Network CSDN 6 Million user data Leaked The "Chinese Software Developer Network" CSDN, operated by Bailian Midami Digital Technology Co., Ltd., is one of the biggest networks of software developers in China. A text file with 6 Million CSDN user info including user name,...

Video Community Portal - userID SQL Injection

Video Community Portal - userID SQL Injection source: https://www.securityfocus.com/bid/51108/info Video Community Portal is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...

Sprint Disables Carrier IQ Software On Its Devices

Sprint has decided to stop using Carrier IQ’s diagnostic software in light of the ongoing controversy about user privacy, according to reports. A Sprint spokesperson told the Website MobileBurn that the carrier has “weighed customer concerns and…disabled use of the tool so that diagnostic...

2B.COM sprl SQL Injection

2B.COM sprl = SQL Injection Vulnerability ======================================================== .:. Author : Metropolis .:. Home : http://metropolis.fr.cr .:. Script : 2B.COM sprl .:. Version : N/A .:. Dork : inurl:/php/index.php?docid= .:. Bug Type : Sql Injection === Exploit ===...

Android Bloatware, Another Serious Android Privacy Issue

Android Bloatware , Another Serious Android Privacy Issue Researchers have found that some Android smartphones are more vulnerable to attacks than others, thanks to add-on software and skins that get installed by handset makers before they ship their smartphones to subscribers. It's not just...

Facebook Settles with FTC on Privacy Grounds

The Federal Trade Commission FTC proposed a settlement with social networking giant Facebook on Tuesday, requiring the site to take the privacy of its users more seriously and subject itself to privacy audits every two years for the next 20 years, according to an article in the New York Times. Th...

Facebook Worm Spreading, Installing Zeus Bot

A new worm has popped up on Facebook, using apparently stolen user credentials to log in to victims’ accounts and then send out malicious links to their friends. The worm also downloads and installs a variety of malware on users’ machines, including a variant of the Zeus bot. The worm is making t...

Sudan Airways mailbox database leaked

Sudan Airways mailbox database leaked Sudan Airways mailbox database Hacked By Sudan Cyber Army - SD. Alsa7r and Leaked on Pastebin. The Targeted domains are sudanair.com & omyalphaserver.com . This Include more than 100's of Usernames, Emails, Passwords. Sudan Cyber Army in past hack lots of Sud...

Prestashop 1.4.4.1 - 'displayImage.php' HTTP Response Splitting

source: https://www.securityfocus.com/bid/50785/info Prestashop is prone to an HTTP-response-splitting vulnerability because it fails to sufficiently sanitize user-supplied data. Attackers can leverage this issue to influence or misrepresent how web content is served, cached, or interpreted. This...

Joomla! Component Content - year SQL Injection

Joomla! Component Content - year SQL Injection source: https://www.securityfocus.com/bid/50656/info Content component for Joomla! is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Most advanced and dangerous malware for Apple products - why you should be concerned !

Most advanced and dangerous malware for Apple products - Why you should be concerned ! Indian security researcher from MalCon has created an advanced and dangerous malware for Apple products which can not only compromize your privacy but also steal important data and let hackers control your...

Google Report Shows It Complied With 93% of U.S. Law Enforcement Data Requests

Google complied with 93 percent of the requests for user data that it received from U.S. law enforcement agencies through the first six months of this year. In the latest update to its Transparency Report, Google for the first time not only disclosed the number of requests that it receives, but...

InverseFlow Multiple Cross Site Scripting Vulnerabilities

InverseFlow is prone to multiple cross-site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker could exploit these vulnerabilities to execute arbitrary script code in the context of the affected website. This may allow the attacker to...

RuubikCMS <= 1.1.0 Information Disclosure Vulnerability

RuubikCMS is prone to an information disclosure vulnerability because it fails to sufficiently validate user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Anonymous Hackers Take Down 40 Child Porn Websites

Anonymous Hackers Take Down 40 Child Porn Websites Anonymous has taken down more than 40 darknet-based child porn websites over the last week. Details of some of the hacks have been released via pastebin OpDarknet, including personal details 1500 users of a site named 'Lolita City,' and DDoS tool...