Concrete CMS 5.5.21 - Multiple Vulnerabilities

Concrete CMS 5.5.21 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/53640/info Concrete CMS is prone to following vulnerabilities because it fails to properly handle user-supplied input. 1. Multiple cross-site scripting vulnerabilities 2. An arbitrary-file-upload vulnerabilit...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : backuppc vulnerability (USN-1444-1)

It was discovered that BackupPC did not properly sanitize its input when processing RestoreFile error messages, resulting in a cross-site scripting XSS vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing server output during a crafted server request, a...

Iran: We Have Discovered 'Hidden Agenda' Of Oil Ministry Attack

The Iranian government has discovered what it describes as a ‘hidden agenda’ behind a recent malware attack on the country’s Oil Ministry, according to a report published by the FARS News Agency. The statement, from Deputy Oil Minister Hamdollah Mohammadnejad, confirmed earlier reports that the...

International Police Association website defaced by Anonymous Hackers

Anonymous hackers deface International Police Association https://ipa-iac.org IPA on Friday afternoon and Anonymous hackers responsible left an angry message on the website's homepage, stating that they defaced the page "for the lulz" for fun but also warned that they might have stolen some...

OSX/iWorkS-A Trojan

2009 Discovered by Symantec in 2009, iWorkS was first identified in a version of the iWork 09 suite that popped up on file sharing sites with a trojan horse added to the installer. The incident was noteworthy for a few reasons: iWork is and was a fairly popular software suite, and, according to...

Car Maker Nissan Admits To Virus Infection, Loss of Employee Accounts

Car maker Nissan became the latest high profile firm to acknowledge being hacked. The company issued a statement last week saying that it detected a virus infection on its network that resulted int he theft of employee login credentials from a company data store. The intrusion was detected on Apr...

Every day buy UC_KEY not initialize the security risks and patch-vulnerability warning-the black bar safety net

Every day buy integrated ucenter one-stop login api,but UCkey not initialized will cause the attacker can log in to any account,or even operate the credit card information. Detailed description: $get = $post = array; $code = @$GET'code'; //get the token parsestrauthcode$code, 'DECODE', UCKEY, $ge...

Sabpab - Another Mac os Backdoor Trojan Discovered

Sabpab - Another Mac os Backdoor Trojan Discovered Security firm Sophos has discovered more malware for the Mac OS X platform called Sabpab. It uses the same Java vulnerability as Flashback to install itself as a "drive-by download." Users of older versions of Java now have still more malware to...

181000 records compromised in Utah Security Breach

181000 records compromised in Utah Security Breach Utah health officials said that hackers who broke into state computers last weekend stole far more medical records than originally thought, and the data likely includes Social Security numbers of children who have received public assistance. The...

Ubuntu Update for thunderbird USN-1282-1

Ubuntu Update for Linux kernel vulnerabilities USN-1282-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12821.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for thunderbird USN-1282-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net...

NASA Computers Hacked Repeatedly in Last Two Years

NASA has been hit repeatedly by hackers during the last two years – including an incident where attackers compromised systems at the agency’s Jet Propulsion Laboratory. The situation was revealed in testimony Feb. 29 by NASA Inspector General Paul Martin before the House Science, Space and...

CMS Wizard Cross Site Scripting

================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...

CMS wizard Cross Site Scripting

================================================================= -=CMS wizard Cross Site Scripting ================================================================= Author: XaDaL Date: 14-02-2012 vendor: http://www.cmswizard.co.uk/ tested on: windows mobile dork : powered by CMS wizard This...

Anonymous Leaks FBI, Scotland Yard Phone Call Detailing Hacking Investigations

Hacktivists with the online collective Anonymous have released a recording of a sensitive phone call between officials with the FBI, Scotland Yard and other foreign police agencies related to ongoing investigations into hacking. The conference call, which occurred Jan. 17, focused on the continue...

Another Malware from Android Market infect Millions of Users

Another Malware from Android Market infect Millions of Users Malware might have infected more than 5 million Android mobile devices via deliberately corrupted apps sold in the Android Marketplace, according to security firm Symantec. They reckoned Android.Counterclank, a slight variant of...

Data Stealing Malware on Internal Computer of Japan Space Agency

Data Stealing Malware on Internal Computer of Japan Space Agency Japan Aerospace Exploration Agency JAXA announce that their computer has been infected with a virus, leading to a possible leak of data on its H-II Transfer Vehicle HTV the craft popularly known as Konotori that hauls cargo for the...

URL redirection Vulnerability in Google & Facebook

URL redirection Vulnerability in Google An open redirect is a vulnerability that exists when a script allows redirectionto an external site by directly calling a specific URL in an unfiltered,unmanaged fashion, which could be used to redirect victims to unintended,malicious web sites. A web...

Chinese Government taking strong step against Cyber Crime

Chinese Government taking strong step against Cyber Crime The Chinese government is working with domestic Internet search engines like Baidu Inc and Sohu.com and financial institutions to prevent phishing attacks on unsuspecting Chinese web users. The Chinese government has announced that it will...

WordPress CartPress 1.6 Cross Site Scripting

Exploit Title: CartPress plugin for Wordpress XSS Date: 12/31/2011 Author: 6Scan http://6scan.com security team Software Link: http://wordpress.org/extend/plugins/thecartpress/ Version: =1.6 fix was added to existing 1.6 Tested on: Linux Description: Due to lack of filtering, malicious users coul...

Anonymous Hacks Security Think Tank STRATFOR

Hackers with Anonymous have struck a well-known security and intelligence think tank based in Texas and made off with some 200 GB of credit card data and other information. Members of the loosely-affiliated collective announced the attack on STRATFOR on Twitter. Among the items reportedly pilfere...