Hornbill Supportworks ITSM 1.0.0 SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Hacking Facebook users just from chat box using multiple vulnerabilities

Nir Goldshlager, Founder/CEO at Break Security known for finding serious flaws in Facebook once again on The Hacker News for sharing his new finding i.e Stored Cross-site Scripting XSS in Facebook Chat, Check In and Facebook Messenger. Stored Cross-site Scripting XSS is the most dangerous type of...

Command injection

The DataSim and DataPid demonstration clients in Cogent Real-Time Systems Cogent DataHub before 7.3.0, OPC DataHub before 6.4.22, Cascade DataHub before 6.4.22 on Windows, and DataHub QuickTrend before 7.3.0 allow remote servers to cause a denial of service incorrect pointer access and client cra...

ThinkSNS V3缺陷-02

简要描述： ThinkSNS V3正式放出，特表示祝贺。 不带刷的，友情检测（因为我们公司要用！真的要用！！） 详细说明： 关键词：任意用户微博（动态）删除！ 删除个人微博（动态）请求如下 POST /t3/index.php?app=public&mod=Feed&act=removeFeed HTTP/1.1 Host: demo.thinksns.com User-Agent: Mozilla/5.0 Windows NT 6.1; rv:19.0 Gecko/20100101 Firefox/19.0 Accept: application/json,...

Hacking Google users with Google's GooPass phishing attack

Google Drive is the new home for Google Docs, that users can access everywhere for Storing files safely. In a recent demonstration hacker successfully performed an attack on Google Docs to trick users to grab their Facebook, Gmail, Yahoo credentials with Credit Card Information. Security research...

Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities

Document Title: =============== Apple iOS 6.1 - 2x PassCode Bypass Vulnerabilities References: =========== http://www.vulnerability-lab.com/getcontent.php?id=874 Advisory: http://www.vulnerability-lab.com/getcontent.php?id=875 View: http://www.youtube.com/watch?v=oKOj0GMf810 Release Date:...

IP.Gallery 4.2.x and 5.0.x Persistent XSS Vulnerability

Exploit for php platform in category web applications Exploit Title: IP.Gallery 4.2.x and 5.0.x persistent XSS vulnerability image title is vulnerable to persistent XSS vulnerability which allow any normal member to hack any administrator account or any other member account. we contacted the vend...

Anonymous Hackers leaks video of Steubenville rape case

Two high school football players in Steubenville, Ohio are under arrest for the sexual assault of a 16-year-old girl. Newly leaked video sheds more light on what may have happened to a girl who told police she was raped by these high school football players in August. Trent Mays and Ma'lik...

Anonymous Hackers leaks video of Steubenville rape case

Two high school football players in Steubenville, Ohio are under arrest for the sexual assault of a 16-year-old girl. Newly leaked video sheds more light on what may have happened to a girl who told police she was raped by these high school football players in August. Trent Mays and Ma'lik...

Etsy for iPhone loophole allows attacker to hijack Accounts

Mohamed Ramadan from Attack-Secure discovered a critical vulnerability in Etsy's iPhone application. Etsy is a social commerce website focused on handmade or vintage items as well as art and craft supplies. Any attacker on the same network can sniff traffic including user password invisibly witho...

ManageEngine MSPCentral 9 Cross Site Request Forgery / Cross Site Scripting

-------------------------------------------------------------- REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED REDACTED ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY ADVISORY -------------------------------------------------------------- RA004: Multiple vulnerabilities in ManageEngi...

Skype Account Service - Reset (Session) Vulnerability

Document Title: =============== Skype Account Service - Reset Session Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=765 Download: http://www.vulnerability-lab.com/resources/videos/765.wmv View: http://www.youtube.com/watch?v=RPTEaJftNw0 Advisory:...

English Defence League defaced by ZCompany Hacking Crew

ZCompany Hacking Crew members hack and deface English Defence League official website https://englishdefenceleague.org,a far-right British organization . Deface page include text "Fuck Zionist Jews! – Boycot israel! – Fuck the American Government! - Fuck fascist Organizations like EDL" and a...

CVE-2011-5101

The Rumor technology in McAfee SaaS Endpoint Protection before 5.2.4 allows remote attackers to relay e-mail messages via unspecified vectors, as demonstrated by relaying spam...

FinFisher spyware found running on computers all over the world

FinFisher, a software application used by law enforcement agencies for surveillance, appears to be far more widespred than originally thought.Sold by British company Gamma Internationl Gmbh, FinFisher secretly monitors computers by turning on webcams, recording everything the user types with a...

Worksforweb iAuto - Multiple Cross-Site Scripting HTML Injection Vulnerabilities

Worksforweb iAuto - Multiple Cross-Site Scripting HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54812/info Worksforweb iAuto is prone to multiple cross-site scripting and HTML-injection vulnerabilities because it fails to properly sanitize user-supplied input. Successfu...

Barracuda Email Security Service - Multiple HTML Injection Vulnerabilities

Barracuda Email Security Service - Multiple HTML Injection Vulnerabilities source: https://www.securityfocus.com/bid/54773/info Barracuda Email Security Service is prone to multiple HTML-injection vulnerabilities because it fails to properly validate user-supplied input. An attacker may leverage...

Open Source Smart Meter Hacking Framework can Hack into the Power Grid

A researcher specializing in smart grids has released an open-source tool designed to assess the security of smart meters. Dubbed 'Termineter,' the framework would allow users, such as grid operators and administrators, to test smart meters for vulnerabilities. It claims will let security...

Orion Browser Dumper v1.0 released

Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...

Discuz NT multiple versions of a file upload vulnerability-vulnerability warning-the black bar safety net

Affected versions: seems to have affected. Vulnerability file:tools/ajax. aspx Vulnerability analysis:the page where the ajax request, there is no permission validation, visitors to the permissions you can call all the methods, it is dangerous to write, so with the following vulnerabilities. ! Wh...