Israeli Think Tank Compromised to Serve Sweet Orange Exploit Kit

The official website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA, has been compromised and abused by attackers to distribute malware. The Israeli think tank website JCPA – an independent research institute focusing on...

Israeli Think-Tank Site Serves Sweet Orange Exploit

Attackers have compromised the website of a prominent Israel-based, Middle East foreign policy-focused think tank, the Jerusalem Center for Public Affairs JCPA. On Friday, researchers from Cyphort reported that the site was serving the Sweet Orange exploit kit via drive-by download. At the time o...

Orange Software Orange Web Server 2.1 DoS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/2432/info A remote user can cause a denial-of-service condition in Orange Software Orange Web Server. The attacker could submit a specially crafted GET request via a telnet connection to cause the server to crash. A resta...

Wordpress Orange Themes CSRF File Upload Vulnerability

No description provided by source. Title : Wordpress Orange Themes CSRF File Upload Vulnerability Author : Jje Incovers Date : 01/12/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://www.orange-themes.com/ Download : http://www.orange-themes.com/portfolio/ Tested :...

MS13-055 Microsoft Internet Explorer CAnchorElement Use-After-Free

No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...

GeekHelps ADMP 1.01 - Multiple Vulnerabilities

No description provided by source. local file include / sql injection Author: ItSecTeam download from:http://geekhelps.net/download.php script:ADMP remote:yes dork::D lfi vul1:/path/themes/colorvoid/footer.php include./themes/$style/info.php; ? line 3 vuls:themes/default-green/footer.php...

GoAhead WebServer 2.1.x URL Encoded Slash Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/5197/info A vulnerability has been reported for GoAhead WebServer 2.1. Reportedly, it is possible to launch directory traversal attacks against GoAhead WebServer. It is possible for remote attackers to access arbitrary...

French intelligence agency gets complete access to Orange Telecom Data

Another leak from Edward Snowden files, but this time not about the NSA, rather the documents revealed that France's central intelligence agency, the DGSE has complete and unconditional access to all of telecom giant Orange’s data, not just metadata. Yes! It is the same Orange company who...

800,000 Customers' detail stolen in Data Breach at French Telecom 'Orange'

One of the world’s largest mobile operator 'Orange' has been hit by data breach. The French multinational telecommunication company announced recently, it was targeted by unknown hackers on 16th January 2014, who allegedly gained access to the accounts of up to 800,000 customers of Orange website...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

CVE-2014-0808

Authorization bypass through user-controlled key issue exists in EC-CUBE 2.11.0 through 2.12.2 and EC-Orange systems deployed before June 29th, 2015. If this vulnerability is exploited, a user of the affected shopping website may obtain other users' information by sending a crafted HTTP request...

PT-2014-3854 · Ec Cube · Ec-Orange +1

Name of the Vulnerable Software and Affected Versions: EC-CUBE versions 2.11.0 through 2.12.2 EC-Orange systems deployed before June 29th, 2015 Description: An issue exists where a user-controlled key can be used to bypass authorization. This can be exploited by sending a crafted HTTP request,...

WordPress Plugin page-flip-image-gallery - Arbitrary File Upload

Exploit Title: Wordpress page-flip-image-gallery plugins Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 12/06/2013 Vendor Homepage: http://pageflipgallery.com Software Link : http://downloads.wordpress.org/plugin/page-flip-image-gallery.zip Google dork:...

Multiple WordPress Orange Themes - Cross-Site Request Forgery (Arbitrary File Upload)

Multiple WordPress Orange Themes - Cross-Site Request Forgery Arbitrary File Upload Title : Wordpress Orange Themes CSRF File Upload Vulnerability Author : Jje Incovers Date : 01/12/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://www.orange-themes.com/ Download :...

WordPress Orange Cross Site Request Forgery

Title : Wordpress Orange Themes CSRF File Upload Vulnerability Author : Jje Incovers Date : 01/12/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://www.orange-themes.com/ Download : http://www.orange-themes.com/portfolio/ Tested : Mozila, Chrome, Opera - Windows & Lin...

WordPress Orange Themes - CSRF

WordPress Orange themes are prone to a cross-site request forgery vulnerability. It allows an attacker to gain unauthorized access to the affected application by performing certain actions in the context of an authorized user's session. Solution Upgrade the theme...

Wordpress Orange Themes CSRF File Upload Vulnerability

Exploit for php platform in category web applications Title : Wordpress Orange Themes CSRF File Upload Vulnerability Author : Jje Incovers Date : 01/12/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://www.orange-themes.com/ Download :...

Multiple WordPress Orange Themes - Cross-Site Request Forgery (Arbitrary File Upload)

Title : Wordpress Orange Themes CSRF File Upload Vulnerability Author : Jje Incovers Date : 01/12/2013 - 17 November 2013 Category : Web Applications Type : PHP Vendor : http://www.orange-themes.com/ Download : http://www.orange-themes.com/portfolio/ Tested : Mozila, Chrome, Opera - Windows & Lin...

WordPress bordeaux-theme Themes Remote File Upload Vulnerability

Exploit for php platform in category web applications Exploit Title: WordPress bordeaux-theme Themes Remote File Upload Vulnerability Author: iskorpitx Date: 12/11/2013 Vendor Homepage: http://www.orange-themes.com/ Themes Link: http://www.orange-themes.com/portfolio/bordeaux/ Infected File:...