262 matches found
78000 Indian Blogs Hacked by ZHC
78000 Indian Blogs Hacked by ZHC Each and every blog hosted on Blog.co.in has been hacked by ZCOMPANY HACKING CREW. There are around 78000 blogs hosted on this service , Represent Indian blogs Service. Reason of Hacking By hackers : ZCompany Hacking Crew Observes Black Day with the people of Indi...
Hackers Exploiting Zero-Day in WordPress Themes
Hackers are actively exploiting a zero-day vulnerability that may be affecting millions of WordPress users. The bug was found in an image re-sizing utility that comes built-in to a number of commercial and free themes on the popular blogging platform. The vulnerability, discovered by Feedjit...
CVE-2011-0440
Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...
CVE-2011-0440
Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...
CVE-2011-0440
Mahara is affected by CVE-2011-0440: a CSRF vulnerability in Mahara 1.2.x (before 1.2.7) and 1.3.x (before 1.3.4) allows an attacker to hijack a user’s session and perform blog deletions via forged requests. The OpenVAS entries corroborate multiple Mahara vulnerabilities tied to CVE-2011-0440, an...
70 Wordpress blogs HaCkeD By The 077 ( Hamdi HaCker ) Tunisian HaCker !
70 Wordpress blogs HaCkeD By The 077 Hamdi HaCker Tunisian HaCker ! Hacked Wordpress Blogs :...
pointter PHP content management system 1.2 - Multiple Vulnerabilities
pointter PHP content management system 1.2 - Multiple Vulnerabilities Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast a...
bitweaver 2.8.1 Persistant XSS / SQL Injection Vulnerability
Exploit for php platform in category web applications author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php form-data;...
Comunidades.net SQL Injection / Shell Upload
$ Exploit Title : Comunidades.net Multi Vulnerability $ Date : 29-06-2010 $ Author : MasterGipy $ Email : mastergipy at gmail.com $ Bug : SQL Injection & Arbitrary Remote File Upload $ Site : http://comunidades.net/ $ Google Dork : n/a = Blogs - Comunidades.net = SQL Injection $ Exploit:...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...
CVE-2010-2277
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...
Network Solutions' Customers Hacked Again
A week after Web hosting company Network Solutions dealt with a large-scale infection of WordPress-driven blogs, the company acknowledged that other sites it hosts have been compromised. Read the full article. Computerworld...
Wordpress Users Notice Malware Redirect Hacks
A large number of bloggers using WordPress are reporting that their sites recently were hacked and are redirecting visitors to a page that tries to install malicious software. Read the full article. KrebsonSecurity...
vBulletin Blog 4.0.2 - Title Cross-Site Scripting
vBulletin Blog 4.0.2 - Title Cross-Site Scripting Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, ...
vBulletin Blog 4.0.2 - Title Cross-Site Scripting
Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, so you can put in bad java script code alert'put...
Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities
Exploit for unknown platform in category web applications ================================================ Ez Blog v1.0 XSS/XSRF Multiple Vulnerabilities ================================================ ----------------------------------------------------------------------------------------------...
Unfixed Script Insertion vulnerability at blogs.siliconindia.com
Security researcher spo0feR, has submitted on 09/05/2009 a Script Insertion vulnerability affecting blogs.siliconindia.com, which at the time of submission ranked 3359 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...
Directory traversal
Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...
CVE-2008-4805
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the community title, 2 API input, and vectors related to the 3 Homepage, 4 Blogs, 5 Profiles, 6 Dogear, 7 Activities, and 8 Global Search...
Cross site scripting
Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the community title, 2 API input, and vectors related to the 3 Homepage, 4 Blogs, 5 Profiles, 6 Dogear, 7 Activities, and 8 Global Search...