PT-2012-1299

Name of the Vulnerable Software and Affected Versions Drupal Global Redirect module versions 6.x-1.x before 6.x-1.4 Drupal Global Redirect module versions 7.x-1.x before 7.x-1.4 Description The issue allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks. Th...

CVE-2010-2021: Improper Input Validation

Open redirect vulnerability in the Global Redirect module 6.x-1.x before 6.x-1.4 and 7.x-1.x before 7.x-1.4 for Drupal, when non-clean to clean is enabled, allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the q parameter...

PT-2012-4368

Name of the Vulnerable Software and Affected Versions Drupal versions prior to 7.15 Description The issue allows remote attackers to obtain sensitive information via the q parameter to "index.php", which reveals the installation path in an error message. This occurs due to a problem in the reques...

Facebook Open to Comments on Proposed Privacy Policy Changes

Facebook today announced proposed changes to its privacy policy that may better explain how it uses cookies and how long it retains your data, which is: “as long as necessary.” In addition, it wants the option to use your data for advertising on third-party Web sites. In a message called “Enhanci...

CVE-2012-1029: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in mobile/search/index.php in Tube Ace Adult PHP Tube Script 1.6 allows remote attackers to execute arbitrary SQL commands via the q parameter. NOTE: some of these details are obtained from third party information...

PT-2012-3028

Name of the Vulnerable Software and Affected Versions Tube Ace Adult PHP Tube Script version 1.6 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in the "mobile/search/index.php" endpoint. Recommendations For Tube Ace Adult PHP...

Update: Verisign Admits To Security Breaches in 2010

Verisign, the Internet security company responsible for management of the .COM domain, told federal regulators that it was the victim of several successful attacks in 2010, but that those incidents were not reported to the company’s management until September, 2011. The news was first reported by...

CVE-2011-3835

Multiple cross-site scripting XSS vulnerabilities in Wuzly 2.0 allow remote attackers to inject arbitrary web script or HTML via the Referer header to 1 admin/login.php and 2 admin/404.php; the 3 q parameter to search.php; the 4 themename parameter to themesettings.php, 5 extensionname parameter ...

Cross site scripting

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

PT-2011-5000

Name of the Vulnerable Software and Affected Versions CF Image Hosting Script versions 1.3.82 through 1.4.1 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the q parameter in the inc/tesmodrewite.php file. Recommendations For CF Imag...

CVE-2011-4572: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in inc/tesmodrewite.php in CF Image Hosting Script 1.3.82, 1.4.1, and probably other versions before 1.4.2 allows remote attackers to inject arbitrary web script or HTML via the q parameter. NOTE: this was originally reported as a file disclosure...

PT-2011-1844

Name of the Vulnerable Software and Affected Versions PaysiteReviewCMS version 1.1 Description The issue concerns multiple cross-site scripting XSS vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML. Specifically, the "q" parameter to the...

CVE-2010-4909: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in PaysiteReviewCMS 1.1 allow remote attackers to inject arbitrary web script or HTML via the 1 q parameter to search.php or the 2 image parameter to image.php...

"SecurityTube Wi-Fi Security Expert" (SWSE) online certification Launched

"SecurityTube Wi-Fi Security Expert" SWSE online certification Launched SecurityTube released their first fully online certification today - "SecurityTube Wi-Fi Security Expert" SWSE . The most interesting thing and key difference from other certifications, is that they are giving out the entire...

Chrome Stable Release

The Google Chrome team is happy to announce the release of Chrome 12 to the Stable Channel for all platforms. Chrome 12.0.742.91 includes a number of new features and updates, including: Hardware accelerated 3D CSS New Safe Browsing protection against downloading malicious files Ability to delete...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

CVE-2011-1667

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...

PT-2011-3278

Name of the Vulnerable Software and Affected Versions Anzeigenmarkt 2011 affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the q parameter in a "list" action, specifically targeting the index.php file...

CVE-2011-1667: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in Anzeigenmarkt 2011 allows remote attackers to execute arbitrary SQL commands via the q parameter in a list action...