EFF and Tor Launch HTTPS Everywhere Firefox Extension

Two prominent privacy-rights organizations, the Tor Project and the Electronic Frontier Foundation, have launched a new Firefox extension that encrypts all of the browser’s communications with some prominent Web sites. The extension, called HTTPS Everywhere, is designed to create secure HTTPS...

Tool Expoits Data Flaws in JavaServer Faces

Researchers have released software that exposes private information and executes arbitrary code on sensitive websites by exploiting weaknesses in the widely used web development technology JavaServer Faces. Read the full article. The Register...

Check if DNS client is active and working

This plugin uses SSH to check if a DNS client is active and working. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home ooooo .oooooo. oooooo oooooo oooo 888' d8...

Apple Safari Flaw from 2008 Still Open

After more than two years, Apple’s Safari browser for Macs remains vulnerable to attacks that allow websites to litter a user’s hard drive with thousands of malicious files. The “carpet bomb” vulnerability was publicly disclosed in May 2008 after members of Apple’s security team said they didn’t...

Shop Script SQL Injection

Exploit Title: Shop Script SQL Injections Vulnerability Type : PHP Date: 23-05-2010 Author: fatal.001 Dork: inurl:"step1.php?number=" Or Dork: inurl:"/shop/step1.php?number=" http://crobidolls.com/shop/step1.php?number=1186' http://www.dimdoll.com/shop/step1.php?number=222'...

DDoS Suspect Who Caused Conservative Havoc Charged

Federal prosecutors have accused a man of carrying out a series of botnet offenses including attacks that brought down the websites of conservative talking heads Bill O’Reilly, Ann Coulter and Rudolph Giuliani. Read the full article. The Register...

B-Hind CMS Remote File Upload

Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be adjusted bya simple double click on the text or title in...

B-Hind CMS (tiny_mce) - Arbitrary File Upload

B-Hind CMS tinymce - Arbitrary File Upload Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: innrwrld & h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be...

B-Hind CMS (tiny_mce) Remote File Upload

Exploit for php platform in category web applications ======================================== B-Hind CMS tinymce Remote File Upload ======================================== Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: innrwrld & h00die DESCRIPTION by vendor:...

LinPHA 1.3.2 - rotate.php Remote Command Execution

LinPHA 1.3.2 - rotate.php Remote Command Execution /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ //...

29o3 CMS (LibDir) Multiple RFI Vulnerability

Exploit for php platform in category web applications ============================================ 29o3 CMS LibDir Multiple RFI Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Treasury Websites Hacked, Redirect to Malware

Websites operated by the US Treasury Department are redirecting visitors to websites that attempt to install malware on their PCs, a security researcher warned. Read the full article. The Register...

Opera 10.x Content Writing Uninitialised Memory Vulnerability

A vulnerability has been discovered in Opera, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when e.g. continuously writing content to a page using document.write and results in a function call using uninitialised memory when ...

Infocus Real Estate Enterprise Edition Script Authentication Bypass

Exploit for php platform in category web applications =================================================================== Infocus Real Estate Enterprise Edition Script Authentication Bypass =================================================================== Authentication bypass in Infocus Real...

New Clickjacking Techniques to Be Revealed

At Black Hat Europe a researcher will demonstrate a new, powerful breed of clickjacking attacks he devised that can bypass newly constructed defenses in browsers and Websites. Read the full article. Dark Readiing...

Multi Profit Websites Local File Inclusion (LFI)

Exploit for php platform in category web applications ================================================ Multi Profit Websites Local File Inclusion LFI ================================================ Local File Inclusion LFI in Multi Profit Websites Multi Profit Websites is a commercial script tha...

Multi Profit Websites Local File Inclusion

Local File Inclusion LFI in Multi Profit Websites Multi Profit Websites is a commercial script that is running on multiple domains and they claims that this script earns money for the owner. Vulnerability Local File Inclusion Via URL which can be reproduced by...

Copyright Infringement Lawsuit Email Scam

US-CERT is aware of public reports of an active email scam. These emails, which appear to come from seemingly legitimate law firms, indicate that someone has filed a copyright lawsuit against the message recipient. The messages may contain malicious attachments or web links. If a user opens the...

US Tax Season Phishing Scams and Malware Campaigns

In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the United States tax season. Due to the upcoming tax deadline, US-CERT reminds users to remain cautious when receiving unsolicited email that could be part of a potenti...