Default configuration

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views...

CVE-2013-7063

The Invitation module 7.x-2.x for Drupal does not properly check permissions, which allows remote attackers to obtain sensitive information via unspecified default views...

CVE-2013-7063

The CVE-2013-7063 issue affects the Drupal Invitation module (7.x-2.x) through vulnerable access checks. The module does not adequately enforce permissions, allowing remote attackers to obtain sensitive information via default views. Affected versions are Invitation 7.x-2.x prior to 7.x-2.2; Drup...

Localize: Atttacker can send "Invitation Request" to a Project that is not even created yet!

Hei, How you doing ? just found another bug on Invitation Process. This one is really interesting! With this bug, Attacker can send invitation request to a project that is even not created yet :p POC ------ Process is same as other two issues that i reported earlier, Just send an Invitation...

Foursquare vulnerability that exposes 45 million users' email addresses

A location based Social Networking platform with 45 million users,'Foursquare' was vulnerable to the primary email address disclosed. Foursquare is a Smartphone application that gives you details of nearby cafes, bars, shops, parks using GPS location and also tells about your friends nearby...

Critical vulnerabilities discovered in Gazelle and TBDEV.net

Hi guys, Gazelle and TBDEV.NET are the most popular web applications used as BitTorrent trackers. A BitTorrent tracker is an application that assists in the communication between peers using the BitTorrent protocol. BitTorrent trackers can be public/open where anybody can join or private where an...

SA-CONTRIB-2013-093 - Invitation - Access Bypass

The Invitation module restricts registration to users who have an invite code for running a private beta. The module provides default views that don't check access to views prior to displaying private information like usernames and email addresses. CVE identifiers issued CVE-2013-7063 Versions...

Vulnerability in Facebook discloses Primary Email Address of any account

When you sign up on Facebook, you have to enter an email address and that email address becomes your primary email address on Facebook. In a recent disclosure by a Security researcher, Stephen Sclafani - The Social Networking site Facebook was vulnerable to disclosure of primary email address of...

Vulnerability in Facebook discloses Primary Email Address of any account

When you sign up on Facebook, you have to enter an email address and that email address becomes your primary email address on Facebook. In a recent disclosure by a Security researcher, Stephen Sclafani - The Social Networking site Facebook was vulnerable to disclosure of primary email address of...

New PDF Attack Targets Aviation Defense Industry

FireEye reported today it had detected a new critical PDF attack targeting the aviation defense industry. Malware Page exploits a stack-based buffer overflow vulnerability in Adobe Acrobat and Adobe Reader. An attacker would be able to execute code remotely via a crafted argument to the getIcon...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

CVE-2011-3254

Cross-site scripting XSS vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note...

CVE-2011-3254

Cross-site scripting XSS vulnerability in Calendar in Apple iOS before 5 allows remote attackers to inject arbitrary web script or HTML via an invitation note...

Invitation for DEF-CON Chennai (DC602028) Meet

Invitation for DEF-CON Chennai DC602028 Meet We like to invite all the Like Minded People , who are interested in Cyber Security to attend the meet. We are DEF-CON registered Group. Our Group ID is DC602028 Tickets for the Meet We have very limited tickets for the DEF-CON ChennaiDC602028 Meet. Fo...

Lotus Domino SMTP router, EMAIL server and client DoS

No description provided by source. Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered...

Lotus Domino SMTP router, EMAIL server and client DoS

Exploit for multiple platform in category dos / poc Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered...

Lotus Domino Denial Of Service

Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered -http://forums.kerio.com/index.php?t=msg&th=19863&start=0 Software Link: none -...

Lotus Domino SMTP Router & Email Server and Client - Denial of Service

Exploit Title: Lotus Domino SMTP router, EMAIL server and client DoS - all 3 may crash Date: July 16, 2011 Author: None - looks like a malformed Kerio generated calendar invitation was the reason this was discovered -http://forums.kerio.com/index.php?t=msg&th=19863&start=0 Software Link: none -...

phpMyBitTorrent 2.0.4 - SQL Injection

phpMyBitTorrent 2.0.4 - SQL Injection Exploit Title: phpMyBitTorrent 2.0.4 SQL injection Google Dork: inurl:"user.php?op=register" Date: 14/FEB/2011 Author: [email protected] Software Link: http://sourceforge.net/projects/phpmybittorrent/ Version: 2.0.4 Tested on: nix...

phpMyBitTorrent 2.0.4 SQL Injection

Exploit Title: phpMyBitTorrent 2.0.4 SQL injection Google Dork: inurl:"user.php?op=register" Date: 14/FEB/2011 Author: [email protected] Software Link: http://sourceforge.net/projects/phpmybittorrent/ Version: 2.0.4 Tested on: nix...