Directory Traversal in FTPGetter

Vulnerability ID: HTB22567 Reference: http://www.htbridge.ch/advisory/directorytraversalinftpgetter.html Product: FTPGetter Vendor: FTPGetter Team http://www.ftpgetter.com/ Vulnerable Version: 3.51.0.05 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type: File Conte...

Directory Traversal in AutoFTP Manager

Vulnerability ID: HTB22566 Reference: http://www.htbridge.ch/advisory/directorytraversalinautoftpmanager.html Product: AutoFTP Manager Vendor: DeskShare http://www.deskshare.com/afm.aspx Vulnerable Version: 4.31 and Probably Prior Versions Vendor Notification: 05 August 2010 Vulnerability Type:...

SoftX FTP Client 3.3 Directory Traversal

Vulnerability ID: HTB22541 Reference: http://www.htbridge.ch/advisory/directorytraversalinsoftxftpclient.html Product: SoftX FTP Client Vendor: SoftX.Org http://www.softx.org/ftp.html Vulnerable Version: 3.3 for windows and Probably Prior Versions Vendor Notification: 27 July 2010 Vulnerability...

i-Web Suite SQL Injection / Cross Site Scripting

========================================= Vulnerability ID: HTB22544 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityiniwebsuite.html Product: i-Web Suite Vendor: immediaC world wide Inc http://www.immediac.com/ Vulnerable Version: Current at 27.07.2010 and Probably Prior Versions Vend...

RBS WorldPay Suspect Extradited to U.S.

Federal prosecutors say they have have extradited one of the leaders of an international crime ring accused of hacking in to bank card processor RBS WorldPay and stealing more than $9.4m in a 12-hour period. Read the full article. The Register...

XSS vulnerability in allinta CMS

Vulnerability ID: HTB22528 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinallintacms.html Product: Allinta CMS Vendor: Allinta http://www.allinta.com/ Vulnerable Version: Current at 22.07.2010 and Probably Prior Versions Vendor Notification: 26 July 2010 Vulnerability Type: XSS Cros...

SQL injection vulnerability in BXR

Vulnerability ID: HTB22506 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinbxr.html Product: BXR Vendor: Hulihan Applications http://hulihanapplications.com/projects/bxr Vulnerable Version: 0.6.8 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Typ...

Российский студент получил реальный срок за взлом электронной почты

Омский суд вынес приговор студенту педагогического колледжа - 7 месяцев лишения свободы в колонии-поселении - за то, что он взломал электронный ящик незнакомого человека, а затем требовал с него деньги за возврат аккаунта. Октябрьский районный суд Омска вынес приговор в отношении...

SiteLoom CMS 21.07.2010 Cross Site Scripting

Vulnerability ID: HTB22516 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinsiteloomcms.html Product: SiteLoom CMS Vendor: SiteLoom ApS http://www.siteloom.dk/ Vulnerable Version: Current at 21.07.2010 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: X...

Directory Traversal Vulnerability in FTP Commander Pro

Vulnerability ID: HTB22511 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderpro.html Product: FTP Commander Pro Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 8.0 and Probably Prior Versions Vendor Notification:...

Def Con 18 In Images

Roughly 10,000 computer hacking enthusiasts, poseurs, geeks, nerds and government agents gathered for DefCon this weekend. In its 18th year, the world’s largest hacker convention draws people from all walks of life to learn about the latest hacking techniques. Read the full article. Wired...

Campsite 3.3.6 Cross Site Scripting

=============================================================== Vulnerability ID: HTB22494 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincampsite.html Product: Campsite Vendor: Sourcefabric o.p.s http://www.sourcefabric.org/ Vulnerable Version: 3.3.6 and Probably Prior Versions...

FTP Commander Pro 8.0 Directory Traversal

Vulnerability ID: HTB22511 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinftpcommanderpro.html Product: FTP Commander Pro Vendor: InternetSoft Corporation http://www.internet-soft.com/ftpcomm.htm Vulnerable Version: 8.0 and Probably Prior Versions Vendor Notification:...

TurboFTP 6 Client Directory Traversal

Vulnerability ID: HTB22509 Reference: http://www.htbridge.ch/advisory/directorytraversalvulnerabilityinturboftp6client.html Product: TurboFTP 6 Client Vendor: TurboSoft, Inc http://www.turboftp.com/ Vulnerable Version: 6.30.806 32 and 64 bit and Probably Prior Versions Vendor Notification: 19 Jul...

Video Streaming Feed at Black Hat Hacked

A security expert found a way to catch the talks at Black Hat for free, thanks to bugs in the video streaming service used by the security conference. Read the full article. IDG News Service...

Freeway CMS 1.4.3.210 SQL Injection

----------------------------------------------------------------------------------------- Freeway CMS 1.4.3.210 SQL Injection Vulnerability ----------------------------------------------------------------------------------------- +Title Freeway CMS 1.4.3.210 SQL Injection Vulnerability +Author...

XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

The Persistent Adversary: Targeted Hacking Attacks and What They Mean For Your Business

Join Dennis Fisher, Ryan Naraine and their special guests, Oliver Day, Andy Ellis, and Robert Hansen as they take a look at the rising sophistication of real-world, web-based cyber attacks from the offensive, defensive and end-user perspective. / //These variables control the player launch proces...

XSS vulnerability in WebPress

Vulnerability ID: HTB22479 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwebpress1.html Product: WebPress Vendor: YWP http://www.goywp.com/ Vulnerable Version: Current at 01.07.2010 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: XSS Cross Site...

Koobi CMS (galid) Multiple XSS Vulnerabilities

Exploit for php platform in category web applications ============================================== Koobi CMS galid Multiple XSS Vulnerabilities ============================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...