Recent WikiLeaks-Related Cyberattacks Prompt Call for Policy Changes

In New York on Sunday, lawmakers urged President Obama to expand the U.S. State Department’s foreign policy mechanisms to address crime and security on the Internet. They cited recent attacks on companies severing ties with WikiLeaks as a main reason for these changes. At Symantec's New York City...

Interpol Conference Highlights Cyber-Crime Challenges and Solutions

The emergence of cyber-crime, which transcends man-made boundaries, has underscored the urgent need for global cooperation among law enforcement agencies to prevent and solve these crimes, according to a senior Dubai Police official. At the Third International Conference on Interpol for the Middl...

CMScout 2.09 - Cross-Site Request Forgery

CMScout 2.09 - Cross-Site Request Forgery Vulnerability ID: HTB22719 Reference: http://www.htbridge.ch/advisory/xsrfcsrfincmscout.html Product: CMScout Vendor: CMScout Team http://www.cmscout.co.za/ Vulnerable Version: 2.09 and probably prior versions Vendor Notification: 25 November 2010...

Multiple Vulnerabilities in Injader CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Injader CMS which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerabilities in Injader CMS 1.1 The vulnerability exists due to input sanitation error...

Zimplit CMS Cross Site Scripting

=============================== Vulnerability ID: HTB22716 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzimplitcms1.html Product: Zimplit CMS Vendor: Zimplit http://www.zimplit.com/ Vulnerable Version: Current at 22.11.2010 and Probably Prior Versions Vendor Notification: 22...

XSS vulnerability in Contenido CMS

Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...

Contenido CMS 4.8.12 Cross Site Scripting

Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor Notification: 29 September 2010 Vulnerability Type:...

Contenido CMS 4.8.12 - Cross-Site Scripting

Contenido CMS 4.8.12 - Cross-Site Scripting Vulnerability ID: HTB22635 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityincontenidocms.html Product: Contenido CMS Vendor: four for business AG http://www.contenido.org/ Vulnerable Version: 4.8.12 and Probably Prior Versions Vendor...

DynPG 4.2.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ==================================== DynPG 4.2.0 Multiple Vulnerabilities ==================================== Product: DynPG Vendor: dynpg.org http://www.dynpg.org/ Vulnerable Version: 4.2.0 Vendor Notification: 16 November 2010 Vulnerability...

Diferior 8.03 XSS Vulnerability

Exploit for php platform in category web applications =============================== Diferior 8.03 XSS Vulnerability =============================== Product: Diferior Vendor: Povilas Musteikis http://www.diferior.com/ Vulnerable Version: 8.03 and probably prior versions Vendor Notification:...

XSS vulnerability in Wolf CMS

Vulnerability ID: HTB22679 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwolfcms1.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: Stored XSS Cross...

XSS vulnerability in Wolf CMS

Vulnerability ID: HTB22678 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwolfcms.html Product: Wolf CMS Vendor: Wolf CMS team http://www.wolfcms.org/ Vulnerable Version: 0.6.0b and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: Stored XSS Cross Si...

XSS vulnerability in Frog CMS

Vulnerability ID: HTB22683 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinfrogcms1.html Product: Frog CMS Vendor: Philippe Archambault http://www.madebyfrog.com/ Vulnerable Version: 0.9.5 and probably prior versions Vendor Notification: 09 November 2010 Vulnerability Type: Stored XS...

Multiple Vulnerabilities in Diferior

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Diferior which could be exploited to perform script insertion and cross-site request forgery attacks. 1 Script insertion vulnerability in Diferior: CVE-2010-4850 Input passed to the "postcontent" parameter in...

Compact CMS 1.4.1 Cross Site Scripting

======================================= Vulnerability ID: HTB22695 Reference: http://www.htbridge.ch/advisory/xssincompactcms.html Product: CompactCMS Vendor: compactcms.nl http://www.compactcms.nl/ Vulnerable Version: 1.4.1 Vendor Notification: 04 November 2010 Vulnerability Type: XSS Cross Site...

Clansphere 2010.0 Final Cross Site Scripting / Path Disclosure / SQL Injection

=============================== Vulnerability ID: HTB22691 Reference: http://www.htbridge.ch/advisory/bbcodexssinclansphere.html Product: CLANSPHERE Vendor: csphere.eu http://www.csphere.eu/ Vulnerable Version: 2010.0 Final Vendor Notification: 02 November 2010 Vulnerability Type: BBcode XSS...

IceBB 1.0-rc10 Disclosure / SQL Injection

=================================== Vulnerability ID: HTB22686 Reference: http://www.htbridge.ch/advisory/informationdisclosureinicebb.html Product: IceBB Vendor: XAOS Interactive http://icebb.net/ Vulnerable Version: 1.0-rc10 Vendor Notification: 02 November 2010 Vulnerability Type: Information...

IceBB 1.0-rc10 - Multiple Vulnerabilities

IceBB 1.0-rc10 - Multiple Vulnerabilities Vulnerability ID: HTB22688 Reference: http://www.htbridge.ch/advisory/sqlinjectioninicebb.html Product: IceBB Vendor: XAOS Interactive http://icebb.net/ Vulnerable Version: 1.0-rc10 Vendor Notification: 02 November 2010 Vulnerability Type: SQL Injection...

Multiple Vulnerabilities in Eclime

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Eclime which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eclime: CVE-2010-4852 The vulnerability exists due to input sanitation error ...

Earn Rewards for Finding Security Flaws in Gmail, YouTube, and More

Google is on the hunt for hackers to find security vulnerabilities in popular web applications like Gmail, Blogger, and YouTube. The tech giant is offering rewards starting at $500 per bug. For vulnerabilities that are "severe or unusually clever," the payout can reach up to $3,133.70...