Threat Outbreak Alert: Fake Payment Advice Notification Email Messages on October 15, 2013

Medium Alert ID: 31284 First Published: 2013 October 16 14:14 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment advice notification for the recipient. The text in the email message attempts to convince the...

Real Estate PHP Script Cross Site Scripting

Cross Site Scripting Application Name : Real Estate Php Script Vulnerable Type : Post Cross Site Scripting Infection : Yönetici ve User cookie’leri çalýnabilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 | Bug Researchers Example :...

sensiGal 2.0 SQL Injection

Application Name : sensiGal v2.0 Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.galerie.edor.org/index.php?id=album&aid=193...

Threat Outbreak Alert: Fake Global Trading Advice Email Messages August 7, 2013

Medium Alert ID: 30341 First Published: 2013 August 7 21:25 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain global trading advice for the recipient. The text in the email message attempts to convince the recipient to ope...

Collectivemind CMS SQL injection

Application Name : Collectivemind Vulnerable Type : SqL Injection Infection : Kullanýcý ve Yönetici Bilgileri Çekilebilir. Bug Fix Advice : Zararlý karakterler filtrelenmelidir. Author : Lazmania61 Example : http://www.collectivemindcms.co.za/home/index.php?ipkContentID=70...

Not being able to create webhooks with basic authentication.

Using the procedures to use basic auth described on https://extranet.atlassian.com/display/SUPPORT/Webhooks+readiness+for+JIRA+5.2 we are getting a "Invalid URL" message. !https://jira.atlassian.com/secure/attachment/85015/webhookserror.png! workaround For Atlassian applications, the REST plugin ...

RHEL 4 : JBoss EAP (RHSA-2009:1146)

Updated JBoss Enterprise Application Platform JBEAP 4.3 packages that fix various issues are now available for Red Hat Enterprise Linux 4 as JBEAP 4.3.0.CP05. This update has been rated as having important security impact by the Red Hat Security Response Team. JBoss Enterprise Application Platfor...

New Ransom malware infecting computers

The Metropolitan Police have issued an urgent warning about a new ransom malware that is in circulation. Ransomware also referred to in some cases as cryptoviruses, cryptotrojans or cryptoworms comprises a class of malware which restricts access to the computer system that it infects, and demands...

Spammers Targeting Pinterest Using Point-And-Click Tools

Spammers have jumped on the latest social media craze: the photo sharing site Pinterest. And they’re being helped out by new, automated spam toolkits designed to exploit the fast growing new social network. As Threatpost has reported, spammers have figured out ways to use Pinterest to drive traff...

Slideshow: How to Avoid Getting Hacked While Traveling

VIEW SLIDESHOW How to Avoid Getting Hacked While Traveling Researcher Justin Morehouse has logged more than 100,000 miles to eight countries in the last year. His message: business travelers are at greater risk of being hacked than ever before, especially when it comes to smart phones and tablets...

No Patch Coming for Newly Announced Vulnerabilities in ABB Legacy Products

Two independent researchers who’ve been warning of the threat of serious attacks against bug-riddled ICS and SCADA systems today issued an alert through ICS-CERT that vulnerabilities in ABB products could lead to DoS attacks or allow an attacker to remotely launch malicious code. No patch is...

Climategate 2.0? Popular Climate Blog Hacked, E-mails, Passwords Leaked

The website of Skeptical Science, a blog that is critical of climate change skeptics, was hacked over the weekend, and users’ e-mails, passwords and IP addresses were taken, according to a post on the site Sunday. The bulk of the site’s database was taken, uploaded to a Russian website and linked...

President Assad's hacked emails reveal isolation of Syria's leader

President Assad's hacked emails reveal isolation of Syria's leader Asad's personal email account was hacked by Anonymous hackers few hours ago and The Guardian then acquired over 3,000 documents from hacked email that according to opposition is the personal email of ruling couple Bashar and Asma...

Google Releases Chrome 16.0.912.75

Google has released Chrome 16.0.912.75 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code. US-CERT encourages users and administrators to review the Google Chrome Releases blog entry and update to...

Protecting Your BlackBerry Smartphone with Security Wipe

Protecting Your BlackBerry Smartphone with Security Wipe The BlackBerry device is a wonderful thing. We load our BlackBerries with various softwares and applications to increase our productivity and customize them with interesting themes and ringtones. We watch movies and play games and track day...

'Good to Know' campaign : Google Collaborates with Citizens Advice Bureau for Online Safety

'Good to Know' campaign : Google Collaborates with Citizens Advice Bureau for Online Safety Google's first ever advertising campaign for online safety launches today, in association with the Citizens Advice Bureau. It covers topics such as choosing a password, scam emails and using two factor...

CA security finds Android Trojan which records phone calls

CA security finds Android Trojan which records phone calls A new Android Trojan is capable of recording phone conversations, according to a CA security researcher. The trojan is triggered when the Android device places or receives a phone call. It saves the audio file and related information to t...

Joomla Juicy SQL Injection

Joomla Component Juicy Gallery SQL Injection Vulnerability Author : SOLVER Bug Researchers Date : 26.05.2011 Name : Joomla comjuicy Bug Type : SQL injection Infection : Admin Login Bilgileri Alinabilir. Example Vuln : +index.php?option=comjuicy&task=showComments&picId=EXPLOIT + Dork:"comjuicy" +...

Joomla Resman Cross Site Scripting

Joomla comresman XSS Vulnerability Author : SOLVER Bug Researchers Date : 13.06.2011 Name : Joomla comresman Bug Type : XSS Cross Site Scripting Infection : Hedef sistem uzerinde zararli Javascript kodlari calistirilabilir. Explanation : Joomla comresman eklentisini kullanan sitelerde gorulen bir...

Joomla Maplocator SQL Injection

Joomla Component maplocator SQL Injection Vulnerability Author : Fl0riX Bug Researchers Greetz : DreamPower - CWKOMANDO - Toprak - Equ - Err0r - 10line - SOLVER - All My Friends : Name : Joomla commaplocator info : http://extensions.joomla.org/extensions/maps-a-weather/geotagging/16996 Bug Type :...