JVN#91881278: Documents Pro (formerly Files HD) vulnerable to cross-site scripting

Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a cross-site scripting vulnerability. Impact When a user uses Documents Pro through a web browser, an arbitrary script may be executed on the user's web browser. Solution Update the...

JVN#52197991: Documents Pro (formerly Files HD) vulnerable to directory traversal

Documents Pro provided by Olive Toast Software Ltd. is a document viewer for iOS devices. Documents Pro contains a directory traversal vulnerability. Impact A guest user may view, delete or perform other actions on files that it does not have privileges to. Solution Update the software Update to...

Out-of-bounds

Google Chrome before 24.0.1312.52 does not properly handle image data in PDF documents, which allows remote attackers to cause a denial of service out-of-bounds read via a crafted document...

Malware stole 3000 confidential Documents from Japan ministry

Japan ministry become the recent victim of a cyber attack through a malware that suspected to have compromised and sent overseas more than 3,000 confidential documents from the ministry, including many on global trade negotiations. After investigation, experts found that Hackers use "HTran" the...

Malware stole 3000 confidential Documents from Japan ministry

Japan ministry become the recent victim of a cyber attack through a malware that suspected to have compromised and sent overseas more than 3,000 confidential documents from the ministry, including many on global trade negotiations. After investigation, experts found that Hackers use "HTran" the...

CVE-2012-6463

Cross-site scripting XSS vulnerability in Opera before 12.10 allows remote attackers to inject arbitrary web script or HTML via vectors involving an unspecified sequence of loading of documents and loading of data: URLs...

OpenDocMan 1.2.6.2 SQL Injection / Access Bypass

1 - Unprotected id parameter ----------------------------- In check-in.php the id variable is not filtered so that one can put in additional SQL statements. I have been able to get a UNION SELECT query to run but I do not think it's exploitable because there is a second query that runs with the i...

United Socialist Party of Venezuela's twitter account hacked

LulzSec Peru hack the official twitter account @partidopsuv of the United Socialist Party of Venezuela PSUV, in the evening hours of Thursday. Hackers start twitting from hacked account, "No to communism. Corrupt Chavez get out." In a blog post Party people announce that their twitter account is...

Oracle Forms Recognition Detection

The remote host has Oracle Forms Recognition installed. Oracle Forms Recognition is a software toolset for processing captured documents and delivering the data to backend systems. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid62819; scriptversion"1.9";...

Cross domain access to object constructors can be used to facilitate cross-site scripting – Opera Security Advisories

JavaScripts are able to redefine and override the methods of native objects. They may also do this with the native objects of any document that shares the same origin. By redefining the methods of another document through the constructor property of the document’s host objects, a malicious script...

A small note to get it+jsp on vulnerability analysis-vulnerability warning-the black bar safety net

Directory: 0×0 0:Baidu is black thinking 0×0 1:simply scored it 0×0 2:Google+related information 0×0 3:for jsp vulnerability analysis 0×0 4:for oracle release pants science 0×0 0:Baidu is black thinking Look under the vulnerability information: -----------------------------------------...

Anonymous leaks Classified Documents from Greek Finance Ministry server

Collective hacking group Anonymous leaks username-passwords and classified documents from Greek Finance Ministry server. Just a few days before the Greek Parliament is scheduled to vote on a $17.45 billion spending cut and tax hike plan. Attack was carried out under anonymous operation named -...

Anonymous hackers threatened Zynga For Mistreating Employees

Hacking Group Anonymous has threatened to target Zynga, according to a post on the group's official news channel and a since-deleted YouTube video but it was removed because it was considered a "violation of YouTube's policy on depiction of harmful activities" which suggests that the social game...

Hacker leaks source code of NASA website belongs to US Government computer

A Hacker going by name - "LegitHacker97" claiming that he successfully access a NASA subdomain website , that actually belongs to a US Government computer, as mentioned on homepage. WARNING This is a US Government computer Hacker also dump a 82.51 MB compressed or 337 MB uncompressed Archive five...

Anonymous going to lauch wikileaks like project called TYLER

International hacker group Anonymous is going to create a WikiLeaks competitor scandalous leak portal called Tyler, for the publication of secret information from governments of various countries. One of the group's members, who specified that he is representing the collective, spoke about the...

Cartweaver 3 Local File Inclusion Vulnerability

Exploit for php platform in category web applications Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8...

Cartweaver 3 - Local File Inclusion

Cartweaver 3 - Local File Inclusion Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the...

Cartweaver 3 - Local File Inclusion

Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the Help Documents located in...

Cartweaver 3 Local File Inclusion

Exploit Title: Cartweaver 3 LFI exploit Google Dork: inurl:cw3/admin/ inurl:/admin/helpfiles/ Be creative! Date: 13.10.2012 Exploit Author: HaxOr Vendor Homepage: https://www.cartweaver.com Version: 3 Tested on: Windows 7 and Windows 8 Vulnerability is in the Help Documents located in...

CVE-2012-0182

CVE-2012-0182 affects Microsoft Word 2007 SP2/SP3, where memory handling during Word document parsing can be exploited to execute arbitrary code via a crafted document (Word PAPX Section Corruption). The vulnerability enables remote code execution, with Microsoft’s mitigation being the MS12-064 s...