Paktribune.com compromised, 800+ emails/passwords Exposed !

Paktribune.com compromised, 800+ emails/passwords Exposed ! Hacked Site :- https://paktribune.com Hack Proof :- Hacked by mohit Pande Toshu...

Datefinder.co.nz - Free Dating Site Pwnd by Fr0664/FCA

Datefinder.co.nz - Free Dating Site Pwnd by Fr0664/FCA Fr0664/FCA hack Datefinder.co.nz and Expose 252 emails/passwords @...

Bryantx.gov - City of Bryan Hacked and 175 emails/passwords Exposed By Fr0664/FCA

Bryantx.gov - City of Bryan Hacked and 175 emails/passwords Exposed By Fr0664/FCA Hacker Expose 175 emails/passwords at...

Anonleaks - HBGary Email Viewer Portal ,71,800 Emails Exposed !

Anonleaks - HBGary Email Viewer Portal,71,800 Emails Exposed ! Inboxes new [email protected] - Greg Hoglund - 27,606 emails torrent [email protected] - Aaron Barr - 16,906 emails torrent [email protected] - Ted Vera - 12,134 emails torrent [email protected] - Phil Wallisch - 15,156 emails torrent...

CVE-2010-4218

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

CVE-2010-4218: Undefined Security Weakness

Unspecified vulnerability in Web Services in IBM ENOVIA 6 has unknown impact and attack vectors, related to a system that becomes "exposed to the internet."...

Xunlei XPPlayer ActiveX Remote Exec 0day POC

Date: 2010.01.17 Author: superli Software Link: http://down.sandai.net/Thunder5.9.14.1246.exe Version: = 5.9.14.1246 Tested on: xpsp3 ie6 Greeting to Xunlei Security Center guys,your guys still not yet release patch or new version to fix the vunl which also can attack Xunlei KanKan...

The Uploader 2.0 File Disclosure

Title: The Uploader 2.0 Remote File disclosure Vulnerability Author: Stack http://server/theuploader/api/downloadchecker.php?filename=../config.inc.php next open the config.inc.php file and you got the MySQL configuration user & password :d //MySQL configuration and connection functions...

123456 is Most Common Hotmail Password

A researcher who examined 10,000 Hotmail, MSN and Live.com passwords that were recently exposed online has published an analysis of the list and found that “123456″ was the most commonly used password, appearing 64 times. Read the full story Kim Zetter/Wired Threat Level More from Dancho Danchev...

Cross site scripting

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

CVE-2009-2076

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

CVE-2009-2076

Cross-site scripting XSS vulnerability in Views 6.x before 6.x-2.6, a module for Drupal, allows remote authenticated users to inject arbitrary web script or HTML via 1 exposed filters in the Views UI administrative interface and in the 2 view name parameter in the define custom views feature. NOT...

PT-2009-4529 · Drupal · Drupal Views

Name of the Vulnerable Software and Affected Versions: Drupal Views module versions prior to 6.x-2.6 Description: A cross-site scripting XSS issue allows remote authenticated users to inject arbitrary web script or HTML via exposed filters in the Views UI administrative interface and the view nam...

PT-2009-1033 · Nss Ldap · Nss Ldap

Name of the Vulnerable Software and Affected Versions: nss-ldapd versions prior to 0.6.8 Description: The issue is related to errors in privilege management, allowing a local user to obtain the cleartext password for the LDAP server. This can be achieved by reading the bindpw field from the...

CVE-2009-0250

Ryneezy phoSheezy 0.2 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the file containing the administrator's password hash via a direct request for config/password...

WowWee Rovio Insufficient Access Controls

SUMMARY WowWee Rovio - Insufficient Access Controls - Covert Audio/Video Snooping Possible OVERVIEW Rovio from WowWee does not adequately secure all accessible URLs or media streams, enabling an unauthorized user with network access to the robotic webcam platform the ability to listen to and view...

Ocean12 Calendar Manager Gold Database Disclosure Vulnerability

No description provided by source. --------------------------------------------------------- Portal Name: Ocean12 Calendar Manager Gold Version: 2.04 Vendor : http://ocean12tech.com/products/o12calgold Dork: Maintained with the Ocean12 Calendar Manager Gold v2.04 Author : PouyaServer ,...

JBossEAP allows download of non-EJB class files

The default configuration of the JBossAs component in Red Hat JBoss Enterprise Application Platform aka JBossEAP or EAP, possibly 4.2 before CP04 and 4.3 before CP02, when a production environment is enabled, sets the DownloadServerClasses property to true, which allows remote attackers to obtain...

WirelessIP5000 has multiple vulnerabilities

Overview WirelessIP5000, a wireless IP phone from Hitachi Cable, contains multiple vulnerabilities; - Illegal access using the port TCP3390 - SNMP access using an arbitrary community name - Access to the HTTP server by an unauthorized user in the factory default configuration - The HTTP server...

PT-2008-3126 · Mysql Server · Phpmyadmin

Name of the Vulnerable Software and Affected Versions: phpMyAdmin versions prior to 2.11.5.1 Description: The issue allows local users to obtain sensitive information, including the MySQL username, password, and the Blowfish secret key, which are stored in cleartext in a Session file under /tmp...