Snapdeal.com Cross Site Scripting / Redirection

Site: http://www.snapdeal.com Threat/Vulnerability: Cross site scripting a.k.a XSS, URL Redirection Severity : Moderate Author: Karthik R a.k.a 3psil0nlambda I have informed the owner CEO but got no response, acknowledgement of receipt of the mail. About the Site: India's fastest growing shopping...

#Flame Malware - 21st Century Massive cyber attack on Iran

Flame Malware - 21st Century Massive cyber attack on Iran A massive, highly sophisticated piece of malware has been newly found infecting systems in Iran and elsewhere and is believed to be part of a well-coordinated, ongoing, state-run cyber-espionage operation. The Flame computer virus not only...

DHS Warns of Potential Scams and Attack in Run-up to London Olympics

Hacktivists, malware, scams, data theft and DDoS attacks are among the Department of Homeland Security’s concerns regarding this summer’s Olympic Games set to take place in London, according to the DHS Cybersecurity and Communications Integration Center’s Strategic Outlook. The document focuses...

phAlbum PHP Gallery Script Cross Site Scripting

Exploit Title: phAlbum php Gallery Script Reflected XSS Vulnerability Date: 2012 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability Web Site: www.eyupcelik.com.tr Issue: Reflected XSS Risk level: High Malicious users may inject JavaScript, VBScript, ActiveX, HTML or...

Concrete CMS 5.5.21 - Multiple Vulnerabilities

Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : backuppc vulnerability (USN-1444-1)

It was discovered that BackupPC did not properly sanitize its input when processing RestoreFile error messages, resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a...

Iran: We Have Discovered 'Hidden Agenda' Of Oil Ministry Attack

The Iranian government has discovered what it describes as a ‘hidden agenda’ behind a recent malware attack on the country’s Oil Ministry, according to a report published by the FARS News Agency. The statement, from Deputy Oil Minister Hamdollah Mohammadnejad, confirmed earlier reports that the...

International Police Association website defaced by Anonymous Hackers

Anonymous hackers deface International Police Association https://ipa-iac.org IPA on Friday afternoon and Anonymous hackers responsible left an angry message on the website's homepage, stating that they defaced the page "for the lulz" for fun but also warned that they might have stolen some...

OSX/iWorkS-A Trojan

2009 Discovered by Symantec in 2009, iWorkS was first identified in a version of the iWork 09 suite that popped up on file sharing sites with a trojan horse added to the installer. The incident was noteworthy for a few reasons: iWork is and was a fairly popular software suite, and, according to...

Car Maker Nissan Admits To Virus Infection, Loss of Employee Accounts

Car maker Nissan became the latest high profile firm to acknowledge being hacked. The company issued a statement last week saying that it detected a virus infection on its network that resulted int he theft of employee login credentials from a company data store. The intrusion was detected on Apr...

Every day buy UC_KEY not initialize the security risks and patch-vulnerability warning-the black bar safety net

Every day buy integrated ucenter one-stop login api,but UCkey not initialized will cause the attacker can log in to any account,or even operate the credit card information. Detailed description: $get = $post = array; $code = @$GET'code'; //get the token parsestrauthcode$code, 'DECODE', UCKEY, $ge...

Sabpab - Another Mac os Backdoor Trojan Discovered

Sabpab - Another Mac os Backdoor Trojan Discovered Security firm Sophos has discovered more malware for the Mac OS X platform called Sabpab. It uses the same Java vulnerability as Flashback to install itself as a "drive-by download." Users of older versions of Java now have still more malware to...

181000 records compromised in Utah Security Breach

181000 records compromised in Utah Security Breach Utah health officials said that hackers who broke into state computers last weekend stole far more medical records than originally thought, and the data likely includes Social Security numbers of children who have received public assistance. The...

Ubuntu Update for thunderbird USN-1282-1

Ubuntu Update for Linux kernel vulnerabilities USN-1282-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12821.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for thunderbird USN-1282-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

NASA Computers Hacked Repeatedly in Last Two Years

NASA has been hit repeatedly by hackers during the last two years – including an incident where attackers compromised systems at the agency’s Jet Propulsion Laboratory. The situation was revealed in testimony Feb. 29 by NASA Inspector General Paul Martin before the House Science, Space and...

CMS Wizard Cross Site Scripting

================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...

CMS wizard Cross Site Scripting

================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...

Anonymous Leaks FBI, Scotland Yard Phone Call Detailing Hacking Investigations

Hacktivists with the online collective Anonymous have released a recording of a sensitive phone call between officials with the FBI, Scotland Yard and other foreign police agencies related to ongoing investigations into hacking. The conference call, which occurred Jan. 17, focused on the continue...

Another Malware from Android Market infect Millions of Users

Another Malware from Android Market infect Millions of Users Malware might have infected more than 5 million Android mobile devices via deliberately corrupted apps sold in the Android Marketplace, according to security firm Symantec. They reckoned Android.Counterclank, a slight variant of...

Data Stealing Malware on Internal Computer of Japan Space Agency

Data Stealing Malware on Internal Computer of Japan Space Agency Japan Aerospace Exploration Agency JAXA announce that their computer has been infected with a virus, leading to a possible leak of data on its H-II Transfer Vehicle HTV the craft popularly known as Konotori that hauls cargo for the...