Popular WordPress Themes, Plug-Ins Vulnerable to Attack

Since late March, no fewer than a half-dozen high profile attacks have involved a compromised website built on the WordPress platform. Attackers abuse vulnerabilities in the content management system’s customizable plug-ins and themes to pull off anything from drive-by downloads to watering hole...

65 Sites Compromised in ZeroAccess Trojan Attacks

As many as 65 websites have been compromised in an attack that has snared another Washington, D.C.-area media website as well as a number of travel and leisure sites. While the sites aren’t topically related, they’re all hosting advertisements injected with malicious code hosted on...

President's personal mobile numbers published online by Anonymous Philippines Hackers

A Philippine Anonymous hacker "pR.is0n3r" has posted the President Benigno Aquino's three personal mobile telephone numbers online on facebook. Officials would not confirm if the numbers were really the President's. Aquino spokesman Ricky Carandang, "It's cyber vandalism plain and simple,"...

Pirate Bay co-founder 'Anakata' suspected of hacking Danish police databases

The Pirate Bay co-founder Gottfrid Svartholm Warg a.k.a 'Anakata' is suspected of being involved in one of Denmark's biggest hack attacks. Gottfrid was arrested in Cambodia in September 2012 and has been extradited from Cambodia to Sweden last year, charged with hacking the IBM mainframe of Logic...

[SECURITY] Fedora 17 Update: mediawiki-1.19.7-1.fc17

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki i nstance...

JVN#52552792: EC-CUBE vulnerable to cross-site scripting

EC-CUBE from LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a vulnerability in handling the output of parameters, which may result in cross-site scripting. Impact When a user accesses a specially crafted URL while there is an item in the shopping cart, a...

Fedora Update for mediawiki FEDORA-2013-7701

Check for the Version of mediawiki OpenVAS Vulnerability Test Fedora Update for mediawiki FEDORA-2013-7701 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

Heap Corruption in Nitro Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Nitro Pro version 7.5.0.22 and earlier versions and Nitro Reader version 2.5.0.36 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated...

Memory Corruption in Nitro Reader Could Allow Arbitrary Code Execution

Executive Summary Microsoft is providing notification of the discovery and remediation of a vulnerability affecting Nitro Pro version 7.5.0.29 and earlier versions and Nitro Reader version 2.5.0.45 and earlier versions. Microsoft discovered and disclosed the vulnerability under coordinated...

[SECURITY] Fedora 17 Update: mediawiki-1.19.6-1.fc17

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki i nstance...

Beat Websites 1.5 SQL Injection

Exploit Title : Beat Websites CMS SQL Injection Exploit Author : Ashiyane Digital Security Team vendor Home : http://www.beatwebsites.com/ Home : www.Ashiyane.org Security Risk : Medium Version : 1.5 Dork : "Powered by: Beat Websites" inurl:beats.php?gid= Location : site/beats.php?gid=SQL Dem0:...

More Malware Showing Up as Fake SourceForge Web Sites

Malware developers continue to clone SourceForge Web sites that appear to offer the source code for popular gaming software but are actually peddling malicious code tied to the ZeroAccess Trojan. Julien Sobrier, a security researcher for San Jose-based cloud security provider Zscaler, on Tuesday...

[SECURITY] Fedora 17 Update: mediawiki-1.19.5-1.fc17

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki i nstance...

[SECURITY] Fedora 18 Update: mediawiki-1.19.5-1.fc18

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki i nstance...

[SECURITY] Fedora 19 Update: mediawiki-1.20.4-1.fc19

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Read the instructions for creating wiki i nstance...

Chinese hackers defaces Philippines News Agency website

Chinese hackers defaced the website of the government owned Philippines News Agency PNA on Sunday. Defaced page of the website was with the Chinese flag and the text: "China Hacker EvilShadow Team, We are evil shadow. We are the team. We have our own dignity China Hacker Lxxker." The hackers shar...

Free Monthly Websites 2.0 Administrator Remote Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...

Free Monthly Websites 2.0 - Admin Password Change

========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor : http://www.freemonthlywebsites2.com/ Category : Web...

Anonymous hackers launch massive cyber assault on Israel Cyberspace, #OpIsrael

A cyber attack campaign, dubbed OpIsrael by hacking group Anonymous, targeting Israeli websites caused massive disruption to government, academic and private sites Sunday. Israeli media said small business had been targeted. Some homepage messages were replaced with anti-Israel slogans. Anonymous...

Microsoft will roll out fix for two critical flaws in Windows and Internet Explorer

Microsoft has released an advance notification of 9 security bulletins that it plans to release on April 9, 2013. Microsoft said it will patch nine vulnerabilities in total and two of them rated critical and that of the remaining 7 as Important. The critical vulnerabilities are remote code...