RockYou Agrees to $250K FTC Fine Over Loss Of 32m Passwords

The Federal Trade Commission announced on Tuesday that it had reached a settlement with RockYou over violations of the Children’s Online Privacy Protection Act COPPA after the Web site allowed hackers to gain access to the personal information of its 32 million members. In a statement published o...

MSNBC: Hackers Crack Credit Report Sites, Sell Profiles

Hackers are actively exploiting weak Web site security at leading credit rating agencies and stealing customer credit reports for resale on the black market, according to a report by MSNBC. Well trafficked websites like AnnualCreditReport.com, Equifax.com, or CreditReport.com are being hacked and...

Drupal Wishlist Module 6.x / 7.x XSS / CSRF

No description provided by source. Advisory ID: DRUPAL-SA-CONTRIB-2012-042 Project: Wishlist Module 1 third-party module Version: 6.x, 7.x Date: 2012-March-21 Security risk: Moderately critical 2 Exploitable from: Remote Vulnerability: Cross Site Scripting, Cross Site Request Forgery --------...

Casa Presidencial website defaced by Latinhack

Casa Presidencial website defaced by Latinhack The Casa Presidencial website was in temporary control of hackers on Sunday. The minister explained that the hack was noticed while doing a backup of the site. The cyber-attack was attributed to a group called Latinhack, whose members have perpetrate...

The Pirate Bay plans Low Orbit Server Drones to beat #Censorship

The Pirate Bay plans Low Orbit Server Drones to beat Censorship One of the world's largest BitTorrent sites "The Pirate Bay" is going to put servers on GPS-controlled aircraft drones in order to evade authorities who are looking to shut the site down. In a Sunday blog post, The Pirate Bay announc...

nine10 Blind Sql Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Rare RAM-Based Malware Attacks Visitors of Russian Information Sites

An advertising banner on a number of widely used Russian-content sites has been serving a rare, RAM-based form of malware, according to a Securelist report. Researchers at Kaspersky Lab recently received information from an independent researcher detailing mass infections that appeared to be...

Dev by glucone - SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Dev by glucone - SQL Injection Vulnerability Google Dork: ; Date: 14-03-2012 Author: MD Jordaninz Category:: webapps Tested on: backrtack Greetz: We r Jordaninz TM - M0D TM $pecial thanks to inj3ct0r TM http://www.1337day.com...

CVE-2011-4818

Open redirect vulnerability in IBM Maximo Asset Management and Asset Management Essentials 6.2, 7.1, and 7.5 allows remote authenticated users to redirect users to arbitrary web sites and conduct phishing attacks via the uisessionid parameter to an unspecified component...

XSS with Drag and Drop and Javascript: URL — Mozilla

Firefox prevents the dropping of javascript: links onto a frame to prevent malicious sites from tricking users into performing a cross-site scripting XSS attacks on themselves. Security researcher Soroush Dalili reported a way to bypass this protection...

Dcommunication SQL Injection

Exploit Title : dcommunication Sql Injection Vulnerabilitiy Author : Zarbat.Org & IrIsT.Ir Discovered By : Am!r Home : http://Zarbat.Org/forums/ Software Link : http://www.dcommunication.net Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu - Windows Server - win7 Dork : "d...

#THN Monthly ( February ) News Archive, If you miss Something !

THN Monthly February News Archive,If you miss Something ! Censorship - Global Concern, THN Magazine March Edition : Forget terrorists attacks here are 2012's Most Vulnerable Cities At Risk for Cyber Crime Idiots : Slum Dog India demands Real time monitoring on Indian Gmail & Yahoo Emails. Do they...

WonderDesk Cross Site Scripting

Exploit Title: WonderDesk Cross Site Scripting Date: 26.02.2012 Author: Sony Software Link: http://www.wonderdesk.com/ Google Dorks: inurl:wonderdesk.cgi?do Web Browser : Mozilla Firefox Blog : http://st2tea.blogspot.com PoC: http://st2tea.blogspot.com/2012/02/wonderdesk-cross-site-scripting.html...

Researchers Warn Of 'Ghost Domain' Flaw in DNS

Researchers are warning about a flaw in the Domain Name System DNS that could allow attackers to keep a malicious domain alive and accessible, despite efforts to remove it. A paper jointly authored by researchers in China, the United States and Spain found that a flaw in DNS allows deleted domain...

Telerom CMS SQL Injection

Telerom CMS SQLi Vulnerability Software : Telerom Date : 2/17/2012 Vendor : http://www.telerom.co.il Language : ASP Dork : "Powered By Telerom" Author : ITTIHACK Home : http://ittihack.com Vulnerable File: index.asp Exploit: http://target/index.asp?id=SQLi Demo :...

Indian and Bangladeshi Hackers destroying Cyber Space of Each Other

Indian and Bangladeshi Hackers destroying Cyber Space of Each Other They Call it "Cyber war" - but In actual they are destroying Cyber Space of their own Country by Defacing Sites for a matter that can't be solved by Ministry like this. The cyber attacks was started two days back from both sides...

BackZtage CMS Shell Upload / SQL Injection

BackZtage CMS SQLi/ File Upload Vulnerabilities Software : BackZtage Date : 2/9/2012 Vendor : http://www.backztagemedia.com Software : http://www.backztagemedia.com/services.php Dork : "Powered by BackZtage" Author : ITTIHACK Home : http://ittihack.com SQL Injection: Exploit :...

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords

Apple Supplier Foxconn's Servers Hacked, Exposing Vendor Usernames and Passwords Apple supplier Foxconn has reportedly been hacked, exposing the usernames and passwords of the company's clients and employees. Hacker group SwaggSec just released a dump of Foxconn internal information, including a...

Citigroup sites hit by Brazilian Anonymous hacker #OpWeeksPayment

Citigroup sites hit by Brazilian Anonymous hacker Citigroup has confirmed its consumer banking sites were temporarily offline Friday because of what a bank spokesman referred to as temporary outages. Hackers with Anonymous have claimed to be behind the attacks. The operation behind the attacks...

ObjectLabs Forum Systems SQL Injection

Exploit Title: ObjectLabs Forum Systems SQL Injection Vulnerability Date: 04/02/2012 - 19.15 Author: 3spi0n Software Website: http://www.objectlabs.no/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: forums.php $ Demo Sites: www.carsplusplus.com/discussions/forums.php?id=1...