Popular Facebook Games Exposing User Data to Third Parties

Facebook privacy has been a recurring topic in the news. With the massive number of users on the site, the amount of personal data involved is enormous. Recently, it has been revealed that many popular third-party apps, mainly games like Farmville and Texas HoldEm Poker, are leaking the unique...

The Shellcoder's Handbook : 1st & 2nd Edition Download

Shellcoder's Programming Uncovered Kris Kaspersky ISBN-10: 193176946X Product Description How hackers, viruses, and worms attack computers from the Internet and exploit security holes in software is explained in this outline of antivirus software, patches, and firewalls that try in vain to...

Rethinking Stuxnet

It’s hard to think of a story in the last few years that has generated more hype, conjecture, posturing, hyperbole and misdirection than Stuxnet, with the possible exception of the Aurora attacks. The commentary and hype around Stuxnet has shifted and morphed over the last few months, and now it...

SmarterMail 7.x Cross Site Scripting

Source URL http://cloudscan.blogspot.com/2010/10/vendor-smartertoolscom-smartermail-7x.html Vendor: smartertools.com SmarterMail 7.x 7.2.3925 Date: 2010-10-01 Author : David Hoyt sqlhacker – Hoyt LLC Contact : [email protected] Home : http://cloudscan.me Dork : insite: SmarterMail Enterprise 7.1 B...

CMS Mysite Cross Site Scripting / SQL Injection

Hello Full-Disclosure! I want to warn you about Full path disclosure, Cross-Site Scripting and SQL Injection vulnerabilities in CMS MYsite. It's Ukrainian commercial CMS. Full path disclosure WASC-13: http://site/portal/modules.php?name=Ads XSS WASC-08:...

openSUSE Security Update : MozillaFirefox (openSUSE-SU-2010:0632-1)

Mozilla Firefox was updated to version 3.6.10, fixing various bugs and security issues. Following security issues were fixed: MFSA 2010-49 / CVE-2010-3169: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. So...

CMS WebManager-Pro SQL Injection

Hello Bugtraq! I want to warn you about SQL Injection and Redirector URL Redirector Abuse vulnerabilities in CMS WebManager-Pro SecurityVulns ID:11108. It's Ukrainian commercial CMS. SQL Injection: http://site/c.php?id=1%20and%20version=5 Redirector:...

sudo is decorated with global decorator

The reasoning behind preventing theme developers from theming the admin areas was because if you don't know what you are doing then you can mess things up to such an extent that you are unable to use confluence. By decorating the sudo login pages using the global decorator it exposes the user to...

Gigya Socialize 1.1.8 For WordPress Cross Site Scripting

Hello Bugtraq! I want to warn you about security vulnerabilities in plugin Gigya Socialize for WordPress. ----------------------------- Advisory: Vulnerabilities in Gigya Socialize for WordPress ----------------------------- URL: http://websecurity.com.ua/4153/ -----------------------------...

Google Ditching Windows Over Security Makes Little Sense

The Financial Times is reporting that Google is phasing out the internal use of Microsoft’s Windows operating system because of security concerns. The report, which is short on solid sourcing, quotes Google’s employees as saying the company is steering people towards using Apple’s Mac or the Linu...

Webiz - SQL Injection

Webiz - SQL Injection @@@@@@ @@ @@ @@@@@ @@@@@ @@ @@@@ @@ @@@@@@ @@@ @@@@ @@ @@ @@ @@ @@ @@ @@ @@ @ @@ @@ @@ @ @ @@ @ @@ @@@@@ @@ @@ @@@@@ @@ @@ @@ @@@@@ @@ @ @ @@ @@ @@ @@ @@ @@ @@ '' @@ @ @@ @@ @@ @ @ @@ @ @@ @@ @@ @@@@@ @@ @@ @@ @ @@ @@ @@ @@@ @@ @ [email protected] [email protected] VBHACKER.NET...

Liquid XML Studio LtXmlComHelp8.dll ActiveX OpenFile Buffer Overflow

Liquid Technologies develops and maintains an XML editor, Liquid XML Studio. Liquid XML is composed of an XML developers toolkit and IDE, enabling developers to design and develop XML Schema and applications. Bundled with the application is an ActiveX component that is registered on the system...

Digital Brand Web Brand Developers XSS Vulnerability

Exploit for php platform in category web applications ==================================================== Digital Brand Web Brand Developers XSS Vulnerability ==================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' ...

[SECURITY] Fedora 12 Update: kdesdk-4.4.2-1.fc12

A collection of applications and tools used by developers, including: cervisia: a CVS frontend kate: advanced text editor kbugbuster: a tool to manage the KDE bug report system kcachegrind: a browser for data produced by profiling tools e.g. cachegr ind kompare: diff tool kuiviewer: displays...

Debian DSA-1910-1 : mysql-ocaml - missing escape function

It was discovered that mysql-ocaml, OCaml bindings for MySql, was missing a function to call mysqlrealescapestring. This is needed, because mysqlrealescapestring honours the charset of the connection and prevents insufficient escaping, when certain multibyte character encodings are used. The adde...

SQL Injection Hits Social Net for Developers

A SQL injection flaw has been discovered in Rockyou.com – a social networking application development website used by app developers for Bebo, Facebook and Myspace; The flaw could have allowed hackers access to the 32 million usernames and passwords. Read the full article. eWEEK Europe...

eBay to developers: Change your passwords

From IDG News Service Juan Carlos Perez Members of the eBay Developers Program must change their account passwords because the e-commerce company recently discovered a way in which account information could be accessed by malicious hackers. This requirement comes “out of an abundance of caution” ...

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution (969706)

Microsoft Security Bulletin MS09-035 - Moderate Vulnerabilities in Visual Studio Active Template Library Could Allow Remote Code Execution 969706 Published: July 28, 2009 Version: 1.0 General Information Executive Summary This security update addresses several privately reported vulnerabilities i...

SuSE Security Advisory SUSE-SA:2009:023 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:023. OpenVAS Vulnerability Test $Id: susesa2009023.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:023 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Mandriva Update for rdesktop MDKA-2007:076 (rdesktop)

Check for the Version of rdesktop OpenVAS Vulnerability Test Mandriva Update for rdesktop MDKA-2007:076 rdesktop Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...