Lucene search
+L

262 matches found

The Hacker News
The Hacker News
added 2011/08/19 2:52 a.m.4 views

78000 Indian Blogs Hacked by ZHC

78000 Indian Blogs Hacked by ZHC Each and every blog hosted on Blog.co.in has been hacked by ZCOMPANY HACKING CREW. There are around 78000 blogs hosted on this service , Represent Indian blogs Service. Reason of Hacking By hackers : ZCompany Hacking Crew Observes Black Day with the people of Indi...

7.3AI score
Exploits0
ThreatPost
ThreatPost
added 2011/08/03 3:36 p.m.16 views

Hackers Exploiting Zero-Day in WordPress Themes

Hackers are actively exploiting a zero-day vulnerability that may be affecting millions of WordPress users. The bug was found in an image re-sizing utility that comes built-in to a number of commercial and free themes on the popular blogging platform. The vulnerability, discovered by Feedjit...

0.9AI score
Exploits0References4
NVD
NVD
added 2011/03/28 4:55 p.m.20 views

CVE-2011-0440

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

5.8CVSS7.1AI score0.01035EPSS
Exploits0References6
UbuntuCve
UbuntuCve
added 2011/03/28 4:55 p.m.23 views

CVE-2011-0440

Cross-site request forgery CSRF vulnerability in Mahara 1.2.x before 1.2.7 and 1.3.x before 1.3.4 allows remote attackers to hijack the authentication of arbitrary users for requests that delete blogs...

5.8CVSS6AI score0.01035EPSS
Exploits0References3
CVE
CVE
added 2011/03/28 4:0 p.m.57 views

CVE-2011-0440

Mahara is affected by CVE-2011-0440: a CSRF vulnerability in Mahara 1.2.x (before 1.2.7) and 1.3.x (before 1.3.4) allows an attacker to hijack a user’s session and perform blog deletions via forged requests. The OpenVAS entries corroborate multiple Mahara vulnerabilities tied to CVE-2011-0440, an...

5.8CVSS7.1AI score0.01035EPSS
Exploits0References6Affected Software1
The Hacker News
The Hacker News
added 2011/03/21 7:6 p.m.12 views

70 Wordpress blogs HaCkeD By The 077 ( Hamdi HaCker ) Tunisian HaCker !

70 Wordpress blogs HaCkeD By The 077 Hamdi HaCker Tunisian HaCker ! Hacked Wordpress Blogs :...

7AI score
Exploits0
exploitpack
exploitpack
added 2011/03/16 12:0 a.m.24 views

pointter PHP content management system 1.2 - Multiple Vulnerabilities

pointter PHP content management system 1.2 - Multiple Vulnerabilities Pointter PHP Content Management System 1.2 Multiple Vulnerabilities Vendor: PangramSoft GmbH Product web page: http://www.pointter.com Affected version: 1.2 Summary: Pointter PHP Content Management System is an advanced, fast a...

0.5AI score
Exploits0
0day.today
0day.today
added 2011/02/23 12:0 a.m.16 views

bitweaver 2.8.1 Persistant XSS / SQL Injection Vulnerability

Exploit for php platform in category web applications author: lemlajt software : bitweaver @ sourceforge.net version: 2.8.1 tested on: linux cve : PoC : 1. submit an article POST http://localhost/www/cmsadmins/bitweaver2.8.1/bitweaver/articles/edit.php form-data;...

7.1AI score
Exploits0
Packet Storm
Packet Storm
added 2010/06/30 12:0 a.m.32 views

Comunidades.net SQL Injection / Shell Upload

$ Exploit Title : Comunidades.net Multi Vulnerability $ Date : 29-06-2010 $ Author : MasterGipy $ Email : mastergipy at gmail.com $ Bug : SQL Injection & Arbitrary Remote File Upload $ Site : http://comunidades.net/ $ Google Dork : n/a = Blogs - Comunidades.net = SQL Injection $ Exploit:...

0.3AI score
Exploits0
Prion
Prion
added 2010/06/15 2:30 p.m.21 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

4.3CVSS5.9AI score0.01223EPSS
Exploits0References6Affected Software1
Cvelist
Cvelist
added 2010/06/14 7:0 p.m.23 views

CVE-2010-2277

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.5.x before 2.5.0.2 allow remote attackers to inject arbitrary web script or HTML via the 1 create or 2 edit form in the Communities component, the 3 verbiage field in the Bookmarks component, or 4 unspecified vectors...

5.6AI score0.01223EPSS
Exploits0References6
ThreatPost
ThreatPost
added 2010/04/19 6:50 p.m.11 views

Network Solutions' Customers Hacked Again

A week after Web hosting company Network Solutions dealt with a large-scale infection of WordPress-driven blogs, the company acknowledged that other sites it hosts have been compromised. Read the full article. Computerworld...

3.3AI score
Exploits0References2
ThreatPost
ThreatPost
added 2010/04/09 6:44 p.m.10 views

Wordpress Users Notice Malware Redirect Hacks

A large number of bloggers using WordPress are reporting that their sites recently were hacked and are redirecting visitors to a page that tries to install malicious software. Read the full article. KrebsonSecurity...

2.4AI score
Exploits0References2
exploitpack
exploitpack
added 2010/03/24 12:0 a.m.92 views

vBulletin Blog 4.0.2 - Title Cross-Site Scripting

vBulletin Blog 4.0.2 - Title Cross-Site Scripting Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, ...

6.8AI score
Exploits0
Exploit DB
Exploit DB
added 2010/03/24 12:0 a.m.1045 views

vBulletin Blog 4.0.2 - Title Cross-Site Scripting

Vbulletin Blog 4.0.2 XSS Vulnerability Author: FormatXformat Version: Vbulletin 4.0.2 Dork: Powered by vBulletin™ Version 4.0.2 Copyright © 2010 vBulletin Solutions, Inc. All rights reserved. The script is affected by Permanent XSS vulnerability, so you can put in bad java script code alert'put...

7.4AI score
Exploits0
0day.today
0day.today
added 2009/12/15 12:0 a.m.19 views

Ez Blog v1.0 (XSS/XSRF) Multiple Vulnerabilities

Exploit for unknown platform in category web applications ================================================ Ez Blog v1.0 XSS/XSRF Multiple Vulnerabilities ================================================ ----------------------------------------------------------------------------------------------...

7.1AI score
Exploits0
xssed
xssed
added 2009/09/05 12:0 a.m.7 views

Unfixed Script Insertion vulnerability at blogs.siliconindia.com

Security researcher spo0feR, has submitted on 09/05/2009 a Script Insertion vulnerability affecting blogs.siliconindia.com, which at the time of submission ranked 3359 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 09/12/2011. It is currently...

Exploits0References1
Prion
Prion
added 2009/06/22 8:30 p.m.17 views

Directory traversal

Directory traversal vulnerability in commsrss.php in fuzzylime cms before 3.01b allows remote attackers to include and execute arbitrary local files via a .. dot dot in a files array element for a blogs action, as demonstrated by the files0 parameter...

10CVSS7.6AI score0.08557EPSS
Exploits0References4Affected Software1
NVD
NVD
added 2008/10/31 6:9 p.m.14 views

CVE-2008-4805

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the community title, 2 API input, and vectors related to the 3 Homepage, 4 Blogs, 5 Profiles, 6 Dogear, 7 Activities, and 8 Global Search...

4.3CVSS5.5AI score0.01223EPSS
Exploits0References6
Prion
Prion
added 2008/10/31 6:9 p.m.11 views

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in IBM Lotus Connections 2.x before 2.0.1 allow remote attackers to inject arbitrary web script or HTML via 1 the community title, 2 API input, and vectors related to the 3 Homepage, 4 Blogs, 5 Profiles, 6 Dogear, 7 Activities, and 8 Global Search...

4.3CVSS5.8AI score0.01223EPSS
Exploits0References6Affected Software1
Rows per page
Query Builder