8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability

Document Title: =============== 8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 1 Product & Service Introduction: =============================== 8pixel.net developes...

8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability

Document Title: =============== 8Pixel Blog CMS v4.2 - Cross Site Scripting Vulnerability Release Date: ============= 2011-08-14 Vulnerability Laboratory ID VL-ID: ==================================== 1 Product & Service Introduction: =============================== 8pixel.net developes...

Hackers stole classified information from two Canadian ministries

Hackers stole classified information from two Canadian ministries The hackers sent e-mails to staff that seemed to come from senior managers, the Canadian Broadcasting Corp. reported. When recipients opened the attachments, the hackers got a path into the federal network. Stockwell Day, then the...

Anonymous Leaks 10,000 E-mails of Iranian Government

Anonymous Leaks 10,000 E-mails of Iranian Government A collection of 10,365 e-mails of the Iranian government were leaked by Anonymous OpIran on June 2, 2011. According to members of Anonymous the files were taken after the hacker accessed the Iranian Passport and Visa Office email center. These...

CVE-2011-1405

Mahara is affected by CVE-2011-1405 (and related CVEs) up to version

India's Railway Email System hacked by Pakistan Cyber Army !

India's Railway Email System hacked by Pakistan Cyber Army ! The Indian Railway Email System is Hacked by Pakistan Cyber Army pca, They have taken complete backup of all important mails and user-pass of all email id's . Have a look to the images below as HACK PROOF and thier statement on this Hac...

694 Israel Mails Hacked By Dinelson Us !

694 Israel Mails Hacked By Dinelson Us ! Target : Pic : https://capitoltransmissionservices.com/capture2.jpg ListMail : https://capitoltransmissionservices.com/mails.html Login page : https://asif-bag.co.il/index.php?suserslogin Decrypter Password : Zip :...

MC Content Manager 10.1.1 Cross Site Scripting

Hello list! I want to warn you about Cross-Site Scripting, Abuse of Functionality and Insufficient Anti-automation vulnerabilities in MC Content Manager. It's Ukrainian commercial CMS. ------------------------- Affected products: ------------------------- Vulnerable are potentially all versions o...

HOLD — HBGary Federal News…

HBGary Federal, the beleagured security startup that has been the target of the online mischief making group Anonymous for the last week said on Monday that it was ceasing operations | its CEO Aaron Barr was stepping down. The consulting firm, a wholly owned subsidiary of HBGary Inc., had been...

(0Day) IBM Lotus Domino Calendar Request Attachment Name Parsing Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on systems with vulnerable installations of IBM Lotus Domino. Authentication is not required to exploit this vulnerability. The specific flaw exists within the NRouter service while transporting malformed e-mails. The vulnerable...

oscommerce authentication bypass

Exploit for php platform in category web applications This is a bug on old oscommerce / creloaded i just didn't find it in the exploit-db database on the search. Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id:...

osCommerce Authentication Bypass

Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id: tellafriend.php,v 1.1.1.1 2008/06/29 23:38:03 Tested on: linux When /tellafriend.php is called directly the user is redirected at /productinfo.php?productsid=0 where an...

osCommerce - Authentication Bypass

This is a bug on old oscommerce / creloaded i just didn't find it in the exploit-db database on the search. Exploit Title: OsCommerce/Creloaded tell a friend authentication bypass Date: 04/02/2010 Author: Nicolas Krassas Version: $Id: tellafriend.php,v 1.1.1.1 2008/06/29 23:38:03 Tested on: linux...

Alt-N MDaemon IMAP Server FETCH Command Buffer Overflow (CVE-2008-1358)

The Internet Message Access Protocol IMAP allows for the access and manipulation of electronic mails. The protocol permits the manipulation of mailboxes on a remote server and allows a remote client, among other operations, to create, delete, or rename mailboxes on the server side. The MDaemon IM...

Google Voice Mails Found In Public Search Engine

Google Voice Mails have been discovered in Google’s search engine, providing audio files, names, and phone number as if you were logged in and checking your own voice mail. Some appear to be test messages, while others are clearly not. The Boy Genius Report explains: After entering...

Adobe Warns: Unpatched PDF Vulnerability Under Attack

Adobe has confirmed a critical, unpatched vulnerability in its PDF Reader/Acrobat software is being exploited by malicious attackers. The vulnerability affects Adobe Reader and Acrobat 9.1.3 and earlier versions on Windows, Macintosh and UNIX. Adobe described the in-the wild attacks as limited an...

MDVA-2008:186-1 : evolution

Outgoing mails sent through the Evolution Exchange plugin were not always sent properly. Spell checking was not working properly when two different languages were enabled, causing all words to be detected as mistyped. Those bugs are fixed by this package updates, as well as massive performance...

Mandriva Update for evolution MDVA-2008:186-1 (evolution)

Check for the Version of evolution OpenVAS Vulnerability Test Mandriva Update for evolution MDVA-2008:186-1 evolution Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

[SECURITY] Fedora 7 Update: otrs-2.1.5-4.fc7

OTRS is an Open source Ticket Request System also well known as trouble ti cket system with many features to manage customer telephone calls and e-mails. The system is built to allow your support, sales, pre-sales, billing, internal IT, helpdesk, etc. department to react quickly to inbound...

CVE-2007-5922

The modules/mdop.m in the Cypress 1.0k script for BitchX, as downloaded from a distribution site in November 2007, contains an externally introduced backdoor that e-mails sensitive information hostnames, usernames, and shell history to a fixed address...