PSB.org was hacked with 0day exploit for MoveableType !

PSB.org was hacked with0day exploit for MoveableType ! Yesterday Public Broadcasting Service PBS was Hacked by Lulzsec, Users data & Database Leaked. Lulzsec hackers today expose that, how exactly they hack all these database, site and Server. They Use 0day exploit for MoveableType, Using the...

Room Juice 0.3.3 - display.php Cross-Site Scripting

Room Juice 0.3.3 - display.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47914/info Room Juice is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

EmbryoCore 1.03 - index.php SQL Injection

EmbryoCore 1.03 - index.php SQL Injection source: https://www.securityfocus.com/bid/47763/info EmbryoCore is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

ZAPms 1.22 - nick SQL Injection

ZAPms 1.22 - nick SQL Injection source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Various sites hacked by Fr0664/FCA and users data compromised !

Various sites hacked by Fr0664/FCA and users data compromised ! 1. igw.edu - Institut fur Gemeindebau unt Weltmission Pwnd by FR0664/FCA May 7th 2011 7425 emails/passwords : preview : & full : 2. fn-languedocroussillon.com - FRONT NATIONAL - LANGUEDOC-ROUSSILLON Pwnd by FR0664/FCA May 6th 2011 59...

Gloriousindia.com database hacked by DrGr4vity, 1000 users data compromised

Gloriousindia.com database hacked by DrGr4vity, 1000 users data compromised Compromised User Data Leaked at...

LDAP Account Manager 3.4.0 - 'selfserviceSaveOk' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47674/info LDAP Account Manager is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in t...

Multi Gather Pidgin Instant Messenger Credential Collection

This module will collect credentials from the Pidgin IM client if it is installed. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rexml/document' class MetasploitModule 'Multi Gather Pidgin Instant Messenger...

WordPress Plugin SermonBrowser 0.43 - SQL Injection

alert0 FPD : http://site/wp/wp-content/plugins/sermon-browser/sermon.php -== Start ==- "; $t=array"dbusr"="user","dbver"="version","dbnam"="database","usrnm"="userlogin","passwd"="userpass"; function text2hex$string $hex = ''; $len = strlen$string ; for $i = 0; $i $y...

Report: iPhones Track Movement Even With Location Services Disabled

The ongoing controversy over a hidden feature in Apple iPhones that tracks and stores the whereabouts of the phone became a bit murkier, after an analysis by the Wall Street Journal found that Apple may not be abiding by its own user privacy agreement by continuing to track its customers’...

WordPress Plugin WP-StarsRateBox 1.1 - 'j' SQL Injection

source: https://www.securityfocus.com/bid/47423/info The WP-StarsRateBox plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Information disclosure

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

Main Advertising vulnerable to SQLI by lionaneesh !

Main Advertising vulnerable to SQLI by lionaneesh ! One of the best advertising companies in the world which is even used by megaupload is vulnerable to SQLi. What I can do Power:- Loinaneesh found a database in which the hits to a particular link was entered this is most probably used for counti...

Plogger 1.0 RC1 - 'gallery_name' Cross-Site Scripting

source: https://www.securityfocus.com/bid/47329/info Plogger is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

phpCollab 2.5 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: phpCollab Vendor: phpCollab Team http://www.php-collab.org/ Vulnerable Version: 2.5 and probably prior versions Vendor Notification: 24 March 2011 Vulnerability Type: CSRF Cross-Site Request Forgery Risk level: Low Credit: High-Tech...

Fake 'Walk and Text' App steals Android user data !

Android users who download a pirated copy of the Walk and Text app are strolling smack into trouble. The rogue app, called Android. Walkinwat, is a corrupted version of the legitimate Android Walk and Text app, the security firm Symantec reported. Walk and Text, which can be found in many...

ICJobSite 1.1 - pid SQL Injection

ICJobSite 1.1 - pid SQL Injection source: https://www.securityfocus.com/bid/47100/info ICJobSite is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

osCSS 2.1 - Multiple Cross-Site Scripting / Local File Inclusions

source: https://www.securityfocus.com/bid/47074/info osCSS is prone to a cross-site scripting vulnerability and multiple local file-include vulnerabilities because the application fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitrary script...

Newsportal 0.37 - 'post.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/46961/info NewsPortal is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input before using it in dynamically generated content. An attacker may leverage this issue to execute arbitrary script code in the...

BlackBerry WebKit Browser Engine Vulnerability

Research In Motion has released a security notice to alert users of a vulnerability affecting the WebKit browser engine provided in BlackBerry Device Software versions 6.0 and later. By convincing a user to browse to specially crafted website, a remote attacker may be able to execute arbitrary...