8571 matches found
New Tabbed Browsing Phishing Attack Exploits User Trust
A researcher has developed a new type of phishing attack that takes advantage of the way that browsers handle tabbed browsing and enables an attacker to use a script running in one tab to completely change the content in another tab. The attack, demonstrated by Aza Raskin of Mozilla, could be use...
Rich Mogull on Database Security and Encryption
Dennis Fisher talks with analyst Rich Mogull of Securosis about his new report on database encryption, the value and danger of storing credit-card data and why more companies don’t get rid of sensitive data more quickly. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground...
Joomla Card View JX Cross Site Scripting
Exploit Title: Joomla Component Card View JX XSS Vulnerabilities Date: 01.05.2010 Author: Valentin Category: webapps/0day Version: Tested on: CVE : Code : :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Componen...
Joomla! Component Card View JX - Cross-Site Scripting
Joomla! Component Card View JX - Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...
Joomla Component Card View JX XSS Vulnerabilities
Exploit for php platform in category web applications ================================================= Joomla Component Card View JX XSS Vulnerabilities ================================================= :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General...
Joomla! Component Card View JX - Cross-Site Scripting
:::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected] :::::::::::::::::::::::::::::::::::::: 0x2...
Blippy Accidentally Gives Up Credit Card Numbers
Blippy users recently got a taste of the social media fad’s dark side when simple Google searches turned up 127 transactions that included credit card numbers of four users. Read the full article. The Register...
Fake iPad, iPhone Giveaways Hit Twitter
Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...
Whole Foods Fan Page Scam on Facebook
Upscale grocery conglomerate Whole Foods Market said it is continuing to clamp down on a series of Facebook-based scams that entice users with a purported $500 gift card from the Austin, Texas-based supermarket chain. Read the full article. CNet...
J.C. Penney Was 'Company A' in Breach Case
Retailer JC Penney fought to keep its name secret during court proceedings related to the largest breach of credit card data on record, according to documents recently unsealed. Read the full article. Computerworld...
Directory traversal
Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...
CVE-2009-4740
Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...
CVE-2009-4740
Summary: CVE-2009-4740 describes a directory traversal vulnerability in the Webesse E-Card (ws_ecard) extension for TYPO3, affecting version 1.0.2 and earlier. Affected software: TYPO3 environment with ws_ecard extension (version ≤ 1.0.2). Vulnerability details: Directory traversal via the ws_eca...
CVE-2009-4740
Directory traversal vulnerability in the Webesse E-Card wsecard extension 1.0.2 and earlier for TYPO3 has unspecified impact and remote attack vectors...
post Card - catid SQL Injection
post Card - catid SQL Injection post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home : www.iqs3cur1ty.com & www.iq-ty.com MaiL : [email protected] script : http://webbdomain.com/php/postcarden/index2.php script : http://webbdomain.com/php/postcardir/index2.php version : a...
TJX Hacker Gets 20-Year Jail Sentence
Hacker mastermind Albert Gonzalez was sentenced Thursday in U.S. District Court to two concurrent 20-year stints in prison for his role in what prosecutors called the “unparalleled” theft of millions of credit card numbers from major U.S. retailers. U.S. District Court Judge Patti B. Saris...
TJX Browser Exploit Accomplice Gets Probation
A computer security professional who sold Internet Explorer exploit code to credit card hacker Albert Gonzalez was sentenced Tuesday to three years probation and a $10,000 fine. Jeremy Jethro, 29, was paid $60,000 by Gonzalez for a zero-day exploit against Microsoft’s browser, “the purpose and...
Feds Seek 25-Year Sentence for TJX Hacker
Computer hacker Albert Gonzalez deserves a quarter-century behind bars for leading a gang of cyberthieves who stole tens of millions of credit and debit card numbers from a transaction processor and several giant retail chains, federal prosecutors argued in a recent court filing. Read the full...
Mariposa Bot Found Pre-Loaded on Second Vodafone Handset
It seems that the HTC Magic phone distributed by Vodafone in Spain that security researchers discovered recently was pre-loaded with the Mariposa bot client was not an isolated incident after all, as the concerned party had claimed. An employee of another Spanish security vendor found the same...