Joomla! Component com_question - SQL Injection

|Title : Joomla comquestion SQL Injection Vulnerability |Vendor : http://www.alex-ensdorf.de/ |Version : Joomla 1.5 |Date : 15/5/2011 |Author : NeX HaCkEr |Contact : [email protected] | Exploit : | http://localhost/Joomla/index.php/?option=comquestion&catID=SQL |...

Alex Hutton on the 2011 Verizon Data Breach Investigations Report

Dennis Fisher talks with Alex Hutton of Verizon about the 2011 Data Breach Investigations Report, the massive decrease in the number of records breached, the increase in the number of incidents and the clues to the cover challenge that may or may not be embedded in the report. Podcast audio...

Fixed XSS vulnerability at www.millets.co.uk

Security researcher sashrigby, has submitted on 13/04/2011 a cross-site-scripting XSS vulnerability affecting www.millets.co.uk, which at the time of submission ranked 103181 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is...

Report: Rustock Operators or Operator

A Krebsonsecurity piece looks into the unknown party behind the Rustock botnet, and whether it may have been operated by just one person. By interviewing investigators involved in the takedown, a joint operation carried out by Microsoft, FireEye, and various law enforcement agencies, Krebs...

Alex Lanstein on the Rustock Botnet Takedown

Dennis Fisher talks with Alex Lanstein of FireEye about this week’s takedown of the Rustock botnet, the important legal precedent it helped set with Microsoft’s lawsuit and the mechanics behind the operation and dismantling of large-scale botnets. Podcast audio courtesy of sykboy65 Subscribe to t...

Log1 CMS 2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Emai...

Log1 CMS 2.0 - Multiple Vulnerabilities

Log1 CMS 2.0 - Multiple Vulnerabilities +---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email :...

Mozilla Foundation Security Advisory 2011-07

Mozilla Foundation Security Advisory 2011-07 Title: Memory corruption during text run construction Windows Impact: Critical Announced: March 1, 2011 Reporter: Alex Miller Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Alex Miller reported that wh...

NextGEN Gallery WordPress Plugin 1.7.3 Path Disclosure

Vulnerability ID: HTB22862 Reference: http://www.htbridge.ch/advisory/pathdisclosureinnextgengallerywordpressplugin.html Product: NextGEN Gallery wordpress plugin Vendor: Alex Rabe http://alexrabe.de/ Vulnerable Version: 1.7.3 Vendor Notification: 15 February 2011 Vulnerability Type: Path...

Alex Howard on Government Security, Internet Freedom and Open Gov

In the triumphant return of the Digital Underground podcast, Dennis Fisher talks with Alex Howard @digiphile of O’Reilly Media about the open government and open data movements, how they’re affecting security and the ways in which Internet freedom and privacy play into the current climate online...

Unfixed XSS vulnerability at www.alex-commerce.edu.eg

Security researcher Xacker, has submitted on 02/04/2011 a cross-site-scripting XSS vulnerability affecting www.alex-commerce.edu.eg, which at the time of submission ranked 213715 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/04/2011. It is...

Indian hacker Atul Alex plants back door in Symbian firmware !

Indian hacker Atul Alex has had a look at the firmware for Symbian S60 smartphones and come up with a back door for it. By modifying version 5 of the original software – which runs on such devices as the Nokia 5800, Nokia X6, Nokia 5530XM, Sony Ericsson Satio and Sony Ericsson Vivaz – he has...

Unfixed XSS vulnerability at macquarie.newsweaver.com

Security researcher db, has submitted on 29/11/2010 a cross-site-scripting XSS vulnerability affecting macquarie.newsweaver.com, which at the time of submission ranked 171626 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is...

Alex Hutton on the VERIS Community App and Data Breaches

Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Unfixed XSS vulnerability at www.godsafe.net

Security researcher nullbyt3, has submitted on 11/07/2010 a cross-site-scripting XSS vulnerability affecting www.godsafe.net, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

Alex Hutton on the Verizon Data Breach Investigations Report

Dennis Fisher talks with Alex Hutton of the Verizon Business RISK team about the new Data Breach Investigations Report, the involvement of the Secret Service in this year’s report and the need for more and better data on attacks and successful defenses. Podcast audio courtesy of sykboy65 Subscrib...

Unfixed XSS vulnerability at www.filtertek.com

Security researcher Syntax3rr0r, has submitted on 24/05/2010 a cross-site-scripting XSS vulnerability affecting www.filtertek.com, which at the time of submission ranked 9146552 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/06/2010. It is...

CA20100304-01: Security Notice for CA SiteMinder

CA20100304-01: Security Notice for CA SiteMinder Issued: March 04, 2010 CA's support is alerting customers to a security risk with CA SiteMinder. Multiple cross site scripting XSS vulnerabilities exist that can allow a remote attacker to potentially gain sensitive information. CA has provided...

Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4

No description provided by source. !/bin/sh Tod Miller Sudo 1.6.x before 1.6.9p21 and 1.7.x before 1.7.2p4 local root exploit March 2010 automated by kingcope Full Credits to Slouching echo Tod Miller Sudo local root exploit echo by Slouching echo automated by kingcope if $ != 1 then echo "usage:...

Microsoft Animated Cursor .ANI Buffer Overflow

MS Animated Cursor .ANI BOF Perl Edition MS07-017 Discovered by Alex Sotirov from Determina,So all rights are reserved to him! Written by Jacky! This exploit is written in Perl , and it's the first MS07-017 exploit As i saw which be written in perl! THIS EXPLOIT IS FOR EDUCATIONAL PURPOSES ONLY !...