Design/Logic Flaw

Opera 10.50 allows remote attackers to obtain sensitive information via crafted XSLT constructs, which cause Opera to return cached contents of other pages...

Fake iPad, iPhone Giveaways Hit Twitter

Not surprisingly, spam using the Apple iPad as a lure to get users to give up personal or credit card information has began to make rounds of Twitter users. Read the full article. Help Net Security...

CVE-2010-1314

creationtimestamp| type| source ---|---|--- 2010-04-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12086...

IncrediMail 2.0 Buffer Overflow

IncrediMail 2.0 activeX Authenticate bof poc by d3b4g Tested: incerdiMail 2.0 Vendor url:http://www.incredimail.com/english/splash.aspx Tested on windows XP SP3 1-03-2010 Debugging info -------------- Exception Code: ACCESSVIOLATION Disasm: 678914AE MOV EDX,ECX ImSpoolU.dll Seh Chain:...

Joomla! Component User Status - Local File Inclusion

Joomla! Component User Status - Local File Inclusion --------------------------------------------------------------------------------- Joomla Component User Status Local File Inclusion --------------------------------------------------------------------------------- Author : Chip D3 Bi0s Group :...

Input validation

MediaWiki before 1.15.2 does not prevent wiki editors from linking to images from other web sites in wiki pages, which allows editors to obtain IP addresses and other information of wiki users by adding a link to an image on an attacker-controlled web site, aka "CSS validation issue."...

ZKSoftware ZK5000 - Remote Information Disclosure

ZKSoftware ZK5000 - Remote Information Disclosure source: https://www.securityfocus.com/bid/39789/info The ZKSoftware ZK5000 device is prone to a remote information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Respons...

Free Real Estate Contact Form 1.09 - Local File Inclusion

Securitylab.ir Application Info: Name: Free Real Estate Contact Form Version: 1.09 Vendor: http://www.phpkobo.com/realestatecontact.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/sys/common.inc.php?LANGCODE=../../../../../../../etc/passwd%00...

Short URL 1.01 - Local File Inclusion

Short URL 1.01 - Local File Inclusion Securitylab.ir Application Info: Name: Short URL Version: 1.01 Vendor: http://www.phpkobo.com/shorturl.php Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability:...

Address Book Script 1.9 Local File Inclusion

Securitylab.ir Application Info: Name: Address Book Script Version: 1.9 Vendor: http://www.phpkobo.com/scripts/AB201109/AB201109.zip Vulnerability Info: Type: Local File Inclusion Risk: Medium Vulnerability: http://site.com/codelib/cfg/common.inc.php?LANGCODE=../../../../../../etc/passwd%00...

The new cloud 4. 0 registered upload vulnerability-vulnerability warning-the black bar safety net

First download a serawebinfo Put the following configuration file is saved as xunyun. seraph url=http://localhost/users/upload. asp? action=save&ChannelID=1&sType= filefield=File1 filefield2= filename=2 0 0 9 8 1 6 2 3 5 5 4. cer;. gif filename2= local=C:\Documents and Settings\seraph\ 桌面 \1.jpg...

SNMP Query Airport Version

It is possible to obtain the version and model type of the remote Airport device by sending SNMP requests to the remote host. An attacker may use this information to gain more knowledge about the target network. TRUSTED...

Bijie hotline enterprise built Station system vulnerabilities-vulnerability warning-the black bar safety net

google inurl:friendlink. asp website description: Email: exp: Broke Management User name password （poc:cmd5 encryption 3. Background address: admin/adminlogin. asp 4. Background a database backup...

P2P Networks Can Nab Private Medical Info

The personal health and financial information stored in thousands of North American home computers may be vulnerable to theft through file-sharing software, according to a research study published online in the Journal of the American Medical Informatics Association. Read the full article...

Facebook scams

Beware of scams on Facebook. Two common ones are: 1 One of your friends all of a sudden sends you a message that he needs emergency money because he got robbed or something in a far away land. You are then engaged in a conversation to wire him some money. This is what happens when your friend has...

Privacy

Click on your name, then click on Edit profile. Note that my birthday is Jan 1st. There is no reason for Facebook to know my real birthday. Facebook needs to know the year you’re born to “establish” that you’re 18. So, that’s the only thing they need. Then, since my birthday is fake, I don’t show...

As you create an account

As you create an account on Facebook, be careful about all the personal information you volunteer during the registration process. Facebook only needs your name and a fake birthday. Do NOT use the same password you use for your e-mail or other sensitive online accounts. If your Facebook account i...

JVN#73331060 tDiary plugin tb-send.rb vulnerable to cross-site scripting

tDiary is a weblog software. tDiary plugin tb-send.rb contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on some web browsers. Solution Update the Software Update according to the information provided by the developer. Products Affected tDiary 2.2.2full set...

Softbiz Auktios Script Multiple SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ============================================================= Softbiz Auktios Script Multiple SQL Injection Vulnerabilities =============================================================...

Ac4p.com Gallery 1.0 Cross Site Scripting / Shell Upload / Bypass / Disclosure

======================================================================================== | Title : Ac4p.com Gallery v1.0 Mullti Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | Web Site : www.iq-ty.com |...