CVE-2011-1030

Cross-site scripting XSS vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."...

A1 Dezine New Zealand SQL Injection

Exploit Title : A1 Dezine New Zealand web development Firm Sql Injection Vunerability Author : eXeSoul Contact : [email protected] Date : 14-02-2011 HomePage : www.indishell.in Version : all Tested on : stloop source Vulnerability Style : PHP Sql Injection Vunerability Vendor: http://a1dezine.com...

CVE-2011-1030: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the Wikis component in IBM Lotus Connections 3.0 allows remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene."...

PT-2011-2821

Name of the Vulnerable Software and Affected Versions IBM Lotus Connections version 3.0 Description A cross-site scripting XSS issue exists in the Wikis component, allowing remote attackers to inject arbitrary web script or HTML via vectors related to the "Confirm New Page scene." Recommendations...

Identity Theft Down, Losses Up

The number of identity theft victims in 2010 dropped 28 percent, yet individuals lost more on average than ever before, suggesting that attackers’ techniques are getting more sophisticated. According to a survey on consumer fraud released by Javelin Strategy & Research on Tuesday, annual fraud wa...

dotProject 2.1.5 - Cross-Site Request Forgery

dotProject 2.1.5 - Cross-Site Request Forgery Source: http://packetstormsecurity.org/files/view/98245/dotProject2.1.5-xsrf.txt input type="hidden" name="use...

New Jersey Student Record Database Hacked

A New Jersey school district was vandalized by members of the online mischief making group 4chan after an administrative password to a student record management system used at 160 school systems across New Jersey. The hack occurred after the administrative account used by the Plainfield, New...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information...

CVE-2011-0642

Cross-site request forgery CSRF vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information...

CVE-2011-0642: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in news/admin.php in N-13 News 3.4, 3.7, and 4.0 allows remote attackers to hijack the authentication of administrators for requests that create new users via the options action. NOTE: some of these details are obtained from third party information...

DEBIAN-CVE-2011-0002

libuser before 0.57 uses a cleartext password value of 1 !! or 2 x for new LDAP user accounts, which makes it easier for remote attackers to obtain access by specifying one of these values...

DEBIAN-CVE-2011-0492

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha allows remote attackers to cause a denial of service assertion failure and daemon exit via blobs that trigger a certain file size, as demonstrated by the cached-descriptors.new file...

December Top 10 Malware List !

GFI Software, a leading IT solutions provider for small and medium-sized enterprises, today revealed continuing high levels of Trojan and rogue malware circulating during December, with data revealing a surge in activity, boosted by themed activity around the Christmas and New Year holiday period...

New Zealand websites hacked for child porn links !

Dozens of New Zealand based websites are infected with malicious software which directs users to child abuse material. They are mostly legitimate small business sites which have been hacked to produce links to paedophile pornography. The problem first appeared in Italy but has spread to sites in ...

One-third of malware was created in 2010 !

One-third of existing malware was created in 2010, a report has revealed. Anti-malware laboratory PandaLabs discovered the findings in its 2010 Annual Security Report which detailed a year of huge cyber-crime activity. It revealed that around 34 per cent of the 60 million existing viruses that ha...

Storm Botnet Returns as Part of New Year's Attacks

A new spam campaign that appeared shortly before the New Year is part of a new effort by the crew behind the Storm/Waledac botnet and is using some rather elementary tactics–in combination with fast-flux–to attempt to compromise unsuspecting users. The new attack emerged late last week and is...

AspCms v1. 1 Xss New Year Edition-bug warning-the black bar safety net

Version:AspCms v1. 1 New Year's Day Edition Keywords:Powered by AspCms v1. 1 Front Desk use,the search functions search. asp Will containingXSSthe connection to the site management, Management open after the execution of arbitrary code The author filter only the'symbol of the anti-injection. If y...

Researchers Expose Security Flaw in Internet-Ready HDTVs

Researchers at Mocana, a security technology firm in San Francisco, recently demonstrated the ease with which they could hack into a popular Internet-ready HDTV model. They exploited a vulnerability in the software that displays websites on the TV, allowing them to control the information sent to...

Pixie 1.04 Cross Site Request Forgery

Pixie 1.04 suffers from CSRF where form data can be submitted by the admin unwittingly in this example to add a blog post or Add a new user. It was not tempted but it is possible to include a cookie stealer in the blog post which a naive admin my view if it has a curious/innocent sounding name...

Thousands of Social Security Numbers Stolen in New York Data Breach

Thousands of Social Security numbers have been stolen from the computers of a New York state agency. The Social Security Administration in New York City reports that a subcontractor, who was working for the Office of Temporary Disability Assistance on computer infrastructure upgrades, illegally...