eSitesBuilder Cross Site Scripting

Hello Full-Disclosure! I want to warn you about security vulnerabilities in eSitesBuilder. It's Ukrainian CMS which used particularly for e-commerce sites. These vulnerabilities I found in 2007-2008 years at one online shop site and later I found some of these vulnerabilities at another site on...

CVE-2010-2274

Multiple open redirect vulnerabilities in Dojo 1.0.x before 1.0.3, 1.1.x before 1.1.2, 1.2.x before 1.2.4, 1.3.x before 1.3.3, and 1.4.x before 1.4.2 allow remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via unspecified vectors, possibly related to...

Best Practices in Passwords Not Encouraged

A pair of academic researchers have analyzed the use of passwords by many prominent online sites, and found that many sites require passwords as a sort of security theater, requiring them in contexts that are superfluous and failing to do their part to secure the information on their end. The end...

Spyware Found on 3 Major Mac Download Sites

A spyware application that surreptitiously scans chat logs and hard drives of unsuspecting Mac users has found its way onto three of the more popular download sites, said security researchers. Read the full article. The Register...

BIND: Multiple vulnerabilities

Background ISC BIND is the Internet Systems Consortium implementation of the Domain Name System DNS protocol. Description Multiple cache poisoning vulnerabilities were discovered in BIND. For further information please consult the CVE entries and the ISC Security Bulletin referenced below. Note:...

PTC Sites - Remote Code Execution Cross-Site Scripting

PTC Sites - Remote Code Execution Cross-Site Scripting $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ @Title: PTC Site's RCE/XSS Vulnerability @Vendor: http://www.ptcsites4sale.info & and etc...:D @Author: CrazyMember @SPC Thanks: XroGuE 4 r3p0r7 :P @Dork:"intext:Warning: passthru"...

It's Time For a New Privacy Model

The current raft of stories about privacy problems on Facebook and other high-profile sites is leading to a renewed consideration in some circles of whether there’s a need for tighter government regulation of sites’ privacy policies and user notifications. Regulation, experts say, may be the only...

Trusted Sites Zone (Whitelisting)

Keep in mind that when the Internet Zone is set to High, you may encounter web sites that do not function properly due to one or more of the associated security settings. This is where the Trusted sites zone can help. If you trust that the site will not contain malicious content, you can add it t...

Trusted Sites Zone

The Trusted sites zone is a security zone for sites that you think are safe to visit. You believe that the site is designed with security in mind and that it can be trusted not to contain malicious content. To add or remove sites from this zone, you can click the Sites button. This will open a...

Compromised Sites Redirect to Anti-Phishing Info

For the past 20 months, Carnegie Mellon University’s Human Computer Interaction Institute has been measuring referrals from phishing sites to an education page set up by the Anti-Phishing Working Group APWG. Hong said the site now receives close to 25,000 referrals per month from phishing sites...

WordPress Users Affected by Large Attack

In the past few days a number of websites created using WordPress have been hacked. While the attack initially appeared to be limited to web sites hosted by American ISP DreamHost, it has since become apparent that blogs hosted at GoDaddy, Bluehost and Media Temple have also been affected. Read t...

Hundreds of Top Sites Open to Domain Hijacking

Less than 10% of the top 300 most highly trafficked sites are protected using a registry lock service. Why is that? MarkMonitor attempts to answer that in a Q&A. Read the full article. ZDNet...

Microsoft to Fix IE 8 XSS Filter Security Problems

On the heels of a Black Hat EU presentation that exposed security problems with the cross-site scripting XSS filter in Internet Explorer 8, Microsoft plans to ship an update to the filter to fix what is hopefully the last remaining attack scenario. During the conference presentation, a pair of...

Network Solutions' Customers Hacked Again

A week after Web hosting company Network Solutions dealt with a large-scale infection of WordPress-driven blogs, the company acknowledged that other sites it hosts have been compromised. Read the full article. Computerworld...

Firefox Plugin Shows Malware-Infested Sites

A computer security researcher has released a plugin for Firefox that provides a wealth of data on Web sites that may have been compromised with malicious code. The plugin, called Fireshark, was released at the Black Hat Europe conference. Read the full article. IDG News Service...

Inside a Banker Trojan

The attackers behind the raft of banker Trojans emanating from Brazil these days are continuing to refine their craft and learn new tricks. Their latest efforts have seen them going to greater lengths than ever to obfuscate their creations and hide their true functionality in order to evade...

Advanced Management For Services Sites - Bypass Create And Download SQL Backup

Advanced Management For Services Sites - Bypass Create And Download SQL Backup ======================================================================================== | Title : Advneced Management For Services Sites =by pass Creat And Download Buckup Sql Vulnerability | Author : indoushka | emai...

Advanced Management For Services Sites - Remote Add Admin

:::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::: Exploit Title : Advneced Management For Services Sites Remote add admin exploit Author: alnjm33 Software Link: http://am4ss.com/am4ss.zip Tested on: Version 1.0 My home : Sec-war.com...

Simply Sites RGV - Local File Inclusion

Simply Sites RGV - Local File Inclusion Title : Simply Sites RGV Local File Inclusion Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Simply Sites RGV Local File Inclusion Author : DevilZ TM By D3v1l Homepage : http://www.DEVILZTM.com Email : [email protected] Contact :...

Simply Sites RGV Local File Inclusion

Exploit for php platform in category web applications ===================================== Simply Sites RGV Local File Inclusion ===================================== Title : Simply Sites RGV Local File Inclusion Author: DevilZ TM Data : 2010-04-01 InformatioN Title : Simply Sites RGV Local File...