bbc.co.uk XSS vulnerability

Vulnerable URL: http://www.bbc.co.uk/cbbc?xss"-prompt/XSSposed/-" Details: Description| Value ---|--- Patched:| Yes, at 28.08.2015 Latest check for patch:| 28.08.2015 14:17 GMT Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 82 Google Pagerank| 9 VIP website status:...

London Railway System Passwords Exposed During TV Documentary

The Weakest Link In the Information Security Chain is still – Humans. And this news has ability to prove this fact Right. One of London's busiest railway stations has unwittingly exposed their system credentials during a BBC documentary. The sensitive credentials printed and attached to the top o...

CVE-2014-7418

The CVE-2014-7418 entry corresponds to the BBC Knowledge Magazine app (Android, version 3.01). Multiple connected sources confirm the vulnerability: the app does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive informat...

CVE-2014-7418: Undefined Security Weakness

The BBC Knowledge Magazine aka com.magzter.bbcknowledge application 3.01 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Sick Facebook Scammers Exploit Robin Williams' Suicide

Scammers spare no incident to target as many victims as possible, and this time they are exploiting the tragic death of comic actor Robin Williams by offering the fake Facebook videos proclaiming a Goodbye video message that Williams made before his death. According to Symantec, this fake Faceboo...

BBC News iOS App Not Hacked, Breaking News Push Messages Sent in Error

If you are one of the users of the BBC News iPhone app, then you might have receive a strange message as a breaking news notification earlier this morning. The message was sent on two separate time durations. First the message reads: "NYPD Twitter campaign 'backfires' after hashtag hijacked," the...

Financial Times hacked by Syrian Electronic Army

The Financial Times has become the latest news outlet to be hacked by supporters of the Syrian president Bashar al-Assad, following a phishing attack on the company's email accounts. The posh broadsheet's Tech Blog - at https://blogs.FT.com/beyond-brics was compromised to run stories headlined...

Iran Defense Forum users logins compromised and Leaked

Iran Defense Forum users logins compromised and Leaked Hacker with name "Le0n B3lm0nt" claimed to hack into the Iran Defense Forum website irandefence.net and leak user details of all 3,212 members including their usernames, Emails and Passwords. Iran Defense Forum is an independent forum that is...

BBC Persia Hacked, Points Finger at Iran

The BBC reports that they were the victim of a “sophisticated cyber-attack,” which they believe is part of an ongoing Iranian campaign to disrupt the BBC Persian Service. The attack reportedly coincides with attempts to jam of the BBC’s satellite feeds into the Islamic republic. “We regard the...

BBC Persian TV hacked by Iranian government

BBC Persian TV hacked by Iranian government According to BBC News, today Iran hacked BBC Persian TV . This is not the first time the Iranian government has tampered with the BBC's Persian service, Zdnet Report. The Reason behind this attack is part of a broader attempt by the government to disrup...

Report: UK Newspaper Computer Hacking Could Be As Widespread As Phone Hacking

Investigations by the BBC suggest a widening probe into alleged computer hacking by UK newspapers. In all, the computer hacking may have been as widespread as now-notorious voicemail hacking conducted by reporters at Rupert Murdoch’s News of the World, and may have compromised classified British...

Geek.com Hacked, Found Hosting Exploit Kit

The security geeks at Geek.com were busy this weekend, after Web security firm zScaler found evidence that an exploit kit was using malicious iframe attacks to try to attack visitors to the company’s Web site, according to a Zscaler report Sunday. A post on the web security firm’s blog indicated...

BBC music websites get hacked !

THE BBC'S MUSIC WEBSITES have been hacked to stream malware using drive-by downloads for anyone browsing the infected webpages. Hackers set the drive-by malware up at the BBC's 6 Music website and the BBC 1Xtra radio station website. Researchers at the insecurity outfit Websense found the exploit...

BBC Sites Serving Malware

The websites of the BBC’s 6 music and 1Xtra radio stations have been injected with a malicious iframe and are redirecting users to a site serving up malware according to a Websense report Tuesday. The iframe, on both the BBC 6 music and 1Xtra webpages, is loading code from a malicious website fro...

Иинформация о 100 миллионах пользователей Facebook

Некий Ron Bowes сграбил всю инфу и выложил на пиратской бухте, которая не была закрыта настройками приватности. Пост на его бложеке: http://www.skullsecurity.org/blog/?p=887 BBC быстренько подсуетились раскрутили это как громадную новость Линк на торрент:...

Inside the BBC's Chimera botnet

By Dancho Danchev, ZDNet Earlier this month, the controversial BBC purchase of a botnet and modifying the infected hosts in the name of “public interest” sparked a lot of debate on the pros and cons of their action. Condemned by certain security vendors, and naturally, at least from guerrilla PR...

BBC defends, explains botnet purchase

After taking some heat for its decision to buy a botnet and use it to send spam and launch a denial-of-service attack against a site owned by Prevx, the BBC has released an editor’s note to explain and defend the broadcast experiment. Here’s the gist of the Beeb’s defense, via BBC Click executive...

BBC paid 'a few thousand dollars' for botnet

In a statement on Monday, the BBC said that its decision to purchase and use a botnet to espose the malware epidemic had been “in the public interest”. “It was not our intention to break the law,” the BBC told ZDNet UK on Monday. “There is a powerful public interest in demonstrating the ease with...

BBC botnet buy: What were they thinking?

By Roel Schouwenberg As Dancho Danchev pointed out, the BBC leased itself a botnet zdnet.com. I couldn’t quite believe it when I read it. The BBC, arguably one of the very best TV producers in the world, surely should have known better? There are so many things wrong about this that I hardly know...

[Full-disclosure] Cross Site Scripting (XSS) Vulnerability in Web Mail platform by "Mirapoint"

·= Security Advisory =· Issue: Cross Site Scripting XSS Vulnerability in Web Mail platform by "Mirapoint" Discovered Date: 19/09/2006 Author: Tal Argoni, LegendaryZion. talargoni at gmail.com Product Vendor: http://www.mirapoint.com/ Details: Mirapoint Web Mail platform is prone to a Cross Site...