South Korean social network hacked, 35 million users Data at risk

South Korean social network hacked, 35 million users Data at risk 35 million users Personal information of a South Korean social network site may have been exposed. Local authorities were quick to blame hack attacks against the Cyworld social networking website and the Nate web portal – both of...

iGiveTest 2.1.0 injection vulnerability-vulnerability warning-the black bar safety net

Version: = 2.1.0 Homepage: http://iGiveTest.com/ Google keywords: “Powered by iGiveTest” Just register for an account. And then the storm of the administrator account and password http://www.xxxx.com/users.php?action=groups&order=-1&the userids=-1 union select...

Massive Data Breach of South Korea Portal Affects 35 Million Users

A major provider of Internet services and mobile access in South Korea has been hit by one of the larger data breaches in recent history, resulting in the compromise of personal information belonging to as many as 35 million users. The attack on SK Telecom’s Cyworld site reportedly came from an I...

BlueSoft Social Networking CMS - SQL Injection

BlueSoft Social Networking CMS - SQL Injection source: https://www.securityfocus.com/bid/48707/info BlueSoft Social Networking CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could...

Group Claims Hack of Vodafone Sure Signal Puts Customers At Risk

A hardware hacking group is claiming to have found a way to turn Vodafone’s Sure Signal Femtocell base stations into hacking devices that can siphon off subscribers’ phone data and then use it to make calls on their account. The analysis of the Sure Signal product was published on Wednesday by a...

HP Intelligent Management Center Endpoint Admission Defense < 5.0 E0101P03 Code Execution Vulnerability

Binary data 5984.prm...

a-Tech SQL Injection

+Title : a-Tech Sql Injection vulnerability +Vender : http://www.a-Tech.pl +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 04/07/2011 +Home : www.skote-vahshat.com +MyArchive : www.xpl.skote-vahshat.com Err0r 0n : product.php Exploit :...

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahc(lebanese hacker)

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed byIdahclebanese hacker After Sony hacks, Idahclebanese hacker is back to strike Apple.com . He found two vulnerability on https://consultants.apple.com/ as listed below. Iframe Injection :Click here Blind SQL INjection:Clic...

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities

WebCalendar 1.2.3 Multiple Cross Site Scripting Vulnerabilities. Webapps exploit for php platform source: http://www.securityfocus.com/bid/48546/info WebCalendar is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may...

Apple database hacked with SQL injection by Anonymous

Apple database hacked with SQL injection byAnonymous Anonymous hackers announce on twitter that Apple can be there next target. They expose one SQL vulnerability on Apple domain with One table "Users" data. Vulnerable Link : https://abs.apple.com:8080/ssurvey/survey?id= Exposure Link :...

PT-2011-07: Cross-Site Scripting in Cisco Small Business Devices

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Cisco Small Business Devices. User input passed to "Display name" and "User ID" parameters of SIP INVITE request "FROM" field is not properly sanitized. This can be exploited to inject malicious...

Mt.Gox взломан

Mt. Gox — одна из крупнейших Bitcoin бирж, позволяющих обменивать «цифровое золото» на вполне реальные деньги. В результате взлома в руки злоумышленников попали данные о пароле в зашифрованном виде, логине и почте пользователей. После взлома, пока по непонятной причине, курс биткоинов на бирже...

WebspotBlogging v3.02.x - SQL Injection Vulnerability

Document Title: =============== WebspotBlogging v3.02.x - SQL Injection Vulnerability Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 90 Product & Service Introduction: =============================== Here are just some of the feature...

WebspotBlogging v3.02.x - SQL Injection Vulnerability

Document Title: =============== WebspotBlogging v3.02.x - SQL Injection Vulnerability Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 90 Product & Service Introduction: =============================== Here are just some of the feature...

WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection

source: https://www.securityfocus.com/bid/48233/info WebFileExplorer is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

WordPress Plugin GD Star Rating - 'votes' SQL Injection

source: https://www.securityfocus.com/bid/48166/info The GD Star Rating plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info http://www.noticeboardpro.com/notice-board-pro-copyright.htmlJoomla CCBoard is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could all...

THN Report : ACER hacked because of their own stupidity !

THN Report : ACER hacked because of their own stupidity ! Yes ! you read right , ACER hacked because of their own stupidity. Yesterday we report that Pakistan Cyber Army hacked Acer Europe Server and 40,000 Users Data, Source Codes & Server Compromised . Today we investigate on this and try to fi...

Sony 12th time Hacked : Database of Application Store at Sony Europe Leaked !

Sony 12th time Hacked : Database of Application Store at Sony Europe Leaked ! Okay ! The Idahc - Lebanese hacker is back to hit Sony. This time he claim to hack the Database of Application Store at Sony Europe https://apps.pro.sony.eu/. A new day, A new surprise for Sony ! Yesterday, Sony Picture...

ACER Hacked : 40,000 Users Data, Source Codes & Server Compromised

ACER Hacked : 40,000 Users Data, Source Codes & Server Compromised Update : THN Report : ACER hacked because of their own stupidity This Week is Really with great UP-DOWNS in Cyber World. Mega hacks like Sony Pictures hacked, Chinese Hacker Cracks 100's of Gmail accounts , Public Broadcasting...