Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4680

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2011-4680: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the customer portal in vtiger CRM before 5.2.0 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2011-5026

Name of the Vulnerable Software and Affected Versions vtiger CRM versions prior to 5.2.0 Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the customer portal of vtiger CRM. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via...

Personal Information of 3.5 Million Poker Players Spilled Online

Customers of the online poker Website Ultimate Bet UB are the victims of a data breach that spilled the private information of up to 3.5 million of its customers online over the weekend. Ultimate Bet, a property of the Cereus Poker Network, saw a slew of customer information posted online includi...

No Fix for Duqu Bug in November Microsoft Patches?

Microsoft plans on shipping four bulletins, of which only one is rated critical, in the November edition of Patch Tuesday. But it looks doubtful that the company will issue a fix for the vulnerability discovered this week being used by the Duqu installer. The patch is set for release on Tuesday,...

blueHOMES hacked - 500k users data and Password in Plain text leaked

blueHOMES hacked - 500k users data and Password in Plain text leaked Some Anonymous Hacker hack the French property and property Germany Dealers website blueHOMES.com . About 500,000 Users data claim to be hacked by Hacker and also database include all customer passwords in plaintext, including...

Important: Red Hat Security Advisory: JBoss Enterprise SOA Platform 5.1.0 security update

Updated Spring Framework 3 files for JBoss Enterprise SOA Platform 5.1.0 that fix multiple security issues are now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

FBC Market CMS v1.1 - Multiple Web Vulnerabilities

Document Title: =============== FBC Market CMS v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=281 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 281...

FBC Market CMS v1.1 - Multiple Web Vulnerabilities

Document Title: =============== FBC Market CMS v1.1 - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=281 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 281...

Important: Red Hat Security Advisory: jbossws-common security update

An updated jbossws-common.jar file for JBoss Enterprise Portal Platform 5.1.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System CVSS...

Important: Red Hat Security Advisory: jbossws-common security update

An updated jbossws-common.jar file for JBoss Enterprise Application Platform 5.1.1 that fixes one security issue is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having important security impact. A Common Vulnerability Scoring System...

FBI Jobs Center Website - Multiple XSS Vulnerabilities

Document Title: =============== FBI Jobs Center Website - Multiple XSS Vulnerabilities Release Date: ============= 2011-09-12 Vulnerability Laboratory ID VL-ID: ==================================== 271 Product & Service Introduction: =============================== ARE YOU FIT ENOUGH TO BECOME AN...

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability

HDFC Bank Database Hacked by zSecure team using SQL injection vulnerability zSecure team is back in news again, this time they have discovered a critical SQL injection vulnerability in HDFC Bank's Web Portal. Using this critical flaw HDFC Bank's various databases can be accessed and dumped as wel...

RTL TV Website - Persistent Service Vulnerabilities

Document Title: =============== RTL TV Website - Persistent Service Vulnerabilities Release Date: ============= 2011-08-27 Vulnerability Laboratory ID VL-ID: ==================================== 257 Product & Service Introduction: =============================== RTL Television formerly RTL plus i...

350,000 Epson Korea customers data breached

350,000 Epson Korea customers data breached Epson Korea Co., Ltd. said that hackers had breached the personal data of its 350,000 registered customers last week. An official at the South Korean affiliate of Seiko Epson Corp. said the company has reported the case to the communications regulator. ...

Idea Cellular Web Portal Hacked, Customers Info may be exposed !

Idea Cellular Web Portal Hacked, Customers Info may be exposed ! Again a critical SQL Injection Vulnerability has been discovered by zSecure Team in a high profile web portal. This time it's Ideacellular web portal which compromises the entire site database. Any malicious smart black hats can...

Idea Cellular Web Portal Hacked, Customers Info may be exposed !

Idea Cellular Web Portal Hacked, Customers Info may be exposed ! Again a critical SQL Injection Vulnerability has been discovered by zSecure Team in a high profile web portal. This time it's Ideacellular web portal which compromises the entire site database. Any malicious smart black hats can...

California Approves Data Security Rules for Smart Meters

The state of California has approved new rules to protect the data stored on so-called “smart meters,” in an effort to protect customer consumption data as household utilities are wired and connected to an IP-enabled “smart grid.” The California Public Utilities Commission CPUC, which regulates...

Asterisk2Billing v1.9.4 - SQL Injection Vulnerability

Document Title: =============== Asterisk2Billing v1.9.4 - SQL Injection Vulnerability Release Date: ============= 2011-08-11 Vulnerability Laboratory ID VL-ID: ==================================== 246 Product & Service Introduction: =============================== Asterisk ist eine freie Software...