CVE-2010-5205

CVE-2010-5205 concerns untrusted search path vulnerabilities in e-press ONE Office Author, enabling local privilege escalation via Trojan horse DLLs (java_msci.dll or msci_java.dll) placed in the current working directory, demonstrated with a directory containing a .psw file. Connected records co...

CVE-2010-5206

CVE-2010-5206 concerns multiple untrusted search path vulnerabilities in the product family named e-press ONE Office E-NoteTaker and E-Zip. The issue allows local users to gain privileges by placing Trojan horse DLLs (1) mfc71enu.dll or (2) mfc71loc.dll) in the current working directory, demonstr...

CVE-2010-5205

Multiple untrusted search path vulnerabilities in e-press ONE Office Author allow local users to gain privileges via a Trojan horse 1 javamsci.dll or 2 mscijava.dll file in the current working directory, as demonstrated by a directory that contains a .psw file. NOTE: some of these details are...

Verizon Settles with FCC for $1.25 Million Over Tethering Block

In an unprecedented move, the Federal Communications Commission ended a 10-month investigation of Verizon Wireless with a $1.25 million settlement for restricting Android customer access to “tethering” software used to relay Internet signals to other devices. The federal probe was launched after...

Newsroom.cisco.com Cross Site Scripting

Exploit Title: Newsroom.cisco.com "3 OR "alertdocument.cookie Dem0 : http://newsroom.cisco.com/press-release-content?type=webcontent&articleId="alertdocument.cookie FB : www.fb.me/justryuz +---------------------------------------------------+ Greetz to : CyberSEC,Newbie3vilc063s,Rileks Crew,h3x4...

Fortune Favors the Bold? Man Steals Microsoft Founder's Identity, Credit Card

When one Pennsylvanian man couldn’t foot his bills, he opted to steal the identity of someone that could – one of the world’s richest men, Microsoft co-founder and billionaire Paul Allen. An AWOL solider from Pittsburgh swiped Allen’s Citibank credit card account information earlier this year to...

Pre Printing Press SQL Injection

======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bug : SQL Injection | Date : 18.03.20...

Pre Printing Press - product_desc.php?pid SQL Injection

Pre Printing Press - productdesc.php?pid SQL Injection ======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 |...

Pre Printing Press - 'product_desc.php?pid' SQL Injection

======================================================================================== | Title : Pre Printing Press productdesc.php pid SQL Injection Vulnerability | Author : Easy Laster | Script : Pre Printing Press | Price : $999 | Exploitation : remote | Bug : SQL Injection | Date : 18.03.20...

PRE PRINTING STUDIO - SQL Injection

Exploit Title: PRE PRINTING STUDIO Sql Injection Date: 16/03/2012 Author: r45c4l Email: [email protected] Script url: http://www.preprojects.com/preprojects/printing.asp Version: N/A CVE : ::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

Browser Find toolbar phishing attack

Added: 02/25/2012 Background This tool serves a page claiming to be a list of stolen passwords. When a user sees this list, the most common response is to validate the claim by opening a Find box Ctrl-F and searching for his or her own password. The tool intercepts the Ctrl-F keypress and opens a...

Australian Nokia Sub Domain Defaced by Hackers

Australian Nokia Sub Domain Defaced by Hackers Latest News coming from Zone-H that Australian Nokia Sub Domain Defaced by Hacker going with codename - "aldyfrz" an Indonesian hacker. Reason of Hacking is Unclear and Security Breach possibly just Damage the Site. The Hacker Sub domain of Nokia is ...

Data Breach Affects Two Million NY Customers, State Commission to Investigate

The New York State Public Service Commission announced yesterday they’ll be looking into a data breach that may have exposed the personal information of almost two million customers to unknown attackers. An employee from a software consulting firm contracted by New York State Electric & Gas NYSEG...

Wrapping up the SCADA conference

S4 is a conference hosted by Digital Bond, a security consulting firm based in Sunrise, Florida. Now in its fifth year, the S4 draws some of the world’s top experts in securing industrial control systems to sunny Miami Beach to discuss the state of the art. Press was allowed this year for the fir...

Report: Computer Hacking, Theft Of Government Secrets Alleged In News International Probe

A report from The Guardian claims that detectives working for Rupert Murdoch’s News International may have siphoned off classified intelligence documents from MI5, Britain’s domestic intelligence agency. The report comes some six months after the first reports indicating that computer hacking,...

CVE-2010-5047

SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Sql injection

SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

CVE-2010-5047

The CVE-2010-5047 entry concerns a SQL injection in the V-EVA Press Release Script’s page.php, exploitable via the id parameter. The root cause, affected component, and impact are described as remote SQL command execution opportunities. The available documents identify the vulnerable file (page.p...

CVE-2010-5047

SQL injection vulnerability in page.php in V-EVA Press Release Script allows remote attackers to execute arbitrary SQL commands via the id parameter...

Supreme Court of Pakistan website defaced by Zombie_Ksa

Supreme Court of Pakistan website defaced by ZombieKsa The official website of Pakistan's Supreme Court has been hacked.Visitors to the website found derogatory and abusive remarks about the court and Chief Justice Iftikhar Muhammad Chaudhry. Earlier the Supreme Court website was hacked by two bo...