mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0.6-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements...

mozilla-firefox

New mozilla-firefox packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-firefox-21.0-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements. For more...

WordPress Sites Targeted by Mass Brute-force Botnet Attack

US-CERT is aware of an ongoing campaign targeting the content management software WordPress, a free and open source blogging tool and web publishing platform based on PHP and MySQL. All hosting providers offering WordPress for web content management are potentially targets. Hackers reportedly are...

Massive Brute-force attack Targets Wordpress sites worldwide

A large distributed brute force attack against WordPress sites is understood to be occurring. A large botnet with more than 90,000 servers is attempting to log in by cycling through different usernames and passwords. According to a blog update on IXWebHosting, they are currently experiencing issu...

WHMCompleteSolution (WHMCS) Group Pay Plugin 1.5 - grouppay.php?hash SQL Injection

WHMCompleteSolution WHMCS Group Pay Plugin 1.5 - grouppay.php?hash SQL Injection Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin:...

seamonkey

New seamonkey packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/seamonkey-2.17-i486-1slack14.0.txz: Upgraded. This update contains security fixes and improvements. For more information,...

[Ghost Phisher] GUI suite for phishing and penetration attacks

Ghost Phisher is a Wireless and Ethernet security auditing and attack software program written using the Python Programming Language and the Python Qt GUI library, the program is able to emulate access points and deploy various internal networking servers for networking, penetration testing and...

mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0.5-i486-1slack14.0.txz: Upgraded. This release contains security fixes and improvements...

WHMCS Grouppay 1.5 SQL Injection

Tile: WHMCS grouppay plugin SQL Injection = 1.5 Author: HJauditing Employee Tim E-mail: [email protected] Web: http://hjauditing.com/ Plugin: http://kadeo.com.au/design-and-development/whmcs-dev/whmcs-modules/72-group-pay.html ============ Introduction ============ We have found a SQL injection...

Daddy's File Hosting Cross Site Scripting

Author: Mr.0c3aN Date: 3/29/2013 VULN/Exploit Name: Daddy's File Hosting - V2 XSS Vuln Main Info: XSS Vuln found in Daddy's File Hosting - V2. Simply just go to register page. All form is vulnerable to XSS. Try: "alert"Mr.0c3aN"; URL: http://demo.daddyscripts.com/dfh/v2/index.php?page=register 10...

U.S. and Russia–Not China–Lead List of Malicious Hosting Providers

China has become the go-to bogeyman behind every cyber attack or malware campaign, but if you’re looking for the most malicious hosting providers on the Web, you won’t find any of the top 10 in China. In fact, the United States and Russia have many more bad hosting providers in the top 20 than...

Free Hosting Manager 2.0.2 - Multiple SQL Injections

Free Hosting Manager 2.0.2 - Multiple SQL Injections ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13...

Free Hosting Manager <= 2.0.2 Multiple Vulnerabilities - Active Check

Free Hosting Manager is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Free Hosting Manager 2.0.2 - Multiple SQL Injections

------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors : http://www.fhm-script.com Download Link :...

Free Hosting Manager 2.0.2 SQL Injection

------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , [email protected] Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors : http://www.fhm-script.com Download Link :...

Free Hosting Manager v2.0.2 Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------- Software : Free Hosting Manager V2.0.2 Multiple SQLi Author : Saadat Ullah , email protected Author home : http://security-geeks.blogspot.com Date : 23/3/13 Vendors :...

mozilla-thunderbird

New mozilla-thunderbird packages are available for Slackware 13.37, 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/mozilla-thunderbird-17.0.4esr-i486-1slack14.0.txz: Upgraded. This release contains security fixes and...

Qool CMS 2.0 RC2 - Multiple Vulnerabilities

Qool CMS v2.0 RC2 XSRF Add Root Exploit in...

curl

New curl packages are available for Slackware 14.0, and -current to fix a security issue. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/curl-7.29.0-i486-1slack14.0.txz: Upgraded. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5messag...

Adobe ColdFusion Unspecified Sandbox Bypass (APSB12-26) (credentialed check)

The remote Windows host is running a version of ColdFusion that is affected by an unspecified sandbox permission bypass vulnerability. This vulnerability is present when ColdFusion is used in a shared-hosting environment. C Tenable Network Security, Inc. include"compat.inc"; if description...