The Open Pentest Bookmark Collection v1.4

We are pleased to announce the release of version 1.4 yes 1.3 squeaked by without a blog post of the Open Pentest Bookmarks Collection. They have added a large amount of community submissions, with the addition of severalnew sections. They have also moved around some of the bookmarks to better...

HTB22897: SQL injection vulnerability in Ripe website manager

Vulnerability ID: HTB22897 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor Notification: 10...

Ripe Website Manager 1.1 XSRF / XSS / SQL Injection

================================ Vulnerability ID: HTB22898 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinripewebsitemanager.html Product: Ripe website manager Vendor: Ripe website manager Team http://www.ripewebsitemanager.com/ Vulnerable Version: 1.1 and probably prior versions Vendor...

SyndeoCMS 2.8.02 XSS / Path Disclosure / SQL Injection

================================= Vulnerability ID: HTB22899 Reference: http://www.htbridge.ch/advisory/pathdisclosureinsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerability Type:...

SyndeoCMS 2.8.02 - Multiple Vulnerabilities (2)

SyndeoCMS 2.8.02 - Multiple Vulnerabilities 2 Vulnerability ID: HTB22901 Reference: http://www.htbridge.ch/advisory/sqlinjectioninsyndeocms.html Product: SyndeoCMS Vendor: http://www.syndeocms.org/ http://www.syndeocms.org/ Vulnerable Version: 2.8.02 Vendor Notification: 10 March 2011 Vulnerabili...

Email & Bank Account of DIRECTOR,Indian Ministry of Communications & IT Hacked by Zcompany Hacking Crew !

Email & Bank Account of DIRECTOR,Indian Ministry of Communications & IT Hacked by Zcompany Hacking Crew ! Last Night 24 March,2011 we The Hacker News got an email from id of Amar Singh Meena,DIRECTOR TTEC, Ministry of Communications & IT. But this email was sent by a Hacker from his email id havi...

1389 Indian websites defaced By ZCompany Hacking Crew & TeaMp0isoN

1389 Indian websites defaced By ZCompany Hacking Crew & TeaMp0isoN Hacked Sites List : https://pastebin.com/ji5AsDgY Note : Some sites have been restored & some may have 404 errors, but all sites were mirrored, if a site wasent mirrored it means the site was already hacked in the past by someone...

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence !

Jesse William McGraw , Clinic Hacker Gets 9 Year Sentence ! A former security guard at a Dallas medical office has been sentenced to more than nine years in prison in a hacking case that drew national attention because the hacker posted video of the crimes on YouTube. Jesse William McGraw was...

Zynga hacker,Ashley Mitchell jailed for two years !

Zynga hacker,Ashley Mitchell jailed for two years ! British bloke Ashley Mitchell, 29, has been jailed for two years after stealing some 400 billion virtual gaming chips gaming company Zynga. Mitchell hacked his way into Zynga's back-end systems by pinching the identities of two Zynga employees a...

3 websites hacked By Rao Assasin Hacker !

3 websites hacked By Rao Assasin Hacker ! Hacked sites : https://www.zooguiden.com/index.html https://www.ridleder.com/index.html https://www.bcwater.gov.cn/index.html News Source : Rao Assasin Hacker...

Paki UrduHack Security Team Is No More !

Paki UrduHack Security Team Is No More ! The UrduHack Team Said This: I HAVE FINALLY DECIDED TO SHUTDOWN THIS SITE AND PAKI URDUHACK SECURITY TEAM FOREVER. FROM THIS MOMENT FORWARD,URDUHACK TEAM IS NO MORE,IT'S BEEN A WONDERFULL JOURNEY. DUE TO PERSONAL LIFE MATTER'S I DECIDED TO SHUTDOWN URDUHAC...

Exposure : How does the Tunisian government steal passwords on Facebook !

You perhaps have followed the recent actualities about Tunisian Government stealing accounts on facebook. Read More Here... There's how they do: Here's the web page of Facebook as seen when you're connected in Tunisia https://pastebin.com/WV0C9t0F Let's take a look at that javascript curious part...

Rating-Widget 1.3.1 Cross Site Scripting

===================================== Vulnerability ID: HTB22891 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin2.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011...

Fox Sitcom Will Depict Pen Testing Firm

Hollywood is taking another crack at hacker culture – this time with a decidedly contemporary twist: a sitcom that will depict the zany doings of a group of security geeks who work as corporate penetration testers. The new show, breakingin, is scheduled to debut on April 6 and will star Christian...

Hackers Exploit BlackBerry Browser Bug !

Research in Motion has found a security flaw and recommended that user disable JavaScript in browsers on certain phones, threatening the BlackBerry maker's iron-clad reputation for security. "The issue could result in remote code execution on affected BlackBerry smartphones," the Waterloo,...

Sodahead Polls 2.0.2 Cross Site Scripting

================================ Vulnerability ID: HTB22894 Reference: http://www.htbridge.ch/advisory/xssinsodaheadpollswordpressplugin1.html Product: Sodahead Polls wordpress plugin Vendor: SodaHead.com SodaHead.com Vulnerable Version: 2.0.2 Vendor Notification: 03 March 2011 Vulnerability Type...

HTB22890: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22890 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin1.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

HTB22889: XSS in Rating-Widget wordpress plugin

Vulnerability ID: HTB22889 Reference: http://www.htbridge.ch/advisory/xssinratingwidgetwordpressplugin.html Product: Rating-Widget wordpress plugin Vendor: Vova Feldman http://rating-widget.com/ Vulnerable Version: 1.3.1 Vendor Notification: 03 March 2011 Vulnerability Type: XSS Cross Site...

LotusCMS 3.0.3 - Multiple Vulnerabilities

Vulnerability ID: HTB22886 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinlotuscms.html Product: LotusCMS Vendor: Arboroia Network http://www.lotuscms.org/ Vulnerable Version: 3.0.3 and probably prior versions Vendor Notification: 01 March 2011 Vulnerability Type: CSRF Cross-Site Request...

Report: DDoS Attacks On the Rise in 2011

Distributed denial-of-service DDoS attacks are on the rise, according to a report released by Trustwave this week. The company’s semi-annual Web Hacking Incident Database WHID report found the attacks jumped 22 percent from the first half of 2010, overtaking methods such as SQL injections and...