CVE-2010-4825

CVE-2010-4825 is a reflected XSS in the WordPress Twitter Feed plugin (wp-twitter-feed) version 0.3.1, arising from magpie_debug.php. The vulnerability allows remote attackers to inject arbitrary web script or HTML by supplying a crafted value in the url parameter, which is reflected in the gener...

WordPress Twitter Feed Plugin <= 0.3.1 - XSS

Because of this vulnerability in magpiedebug.php, the attackers can inject arbitrary web script or HTML via the "url" parameter. Solution Update the plugin...

MySpace goes down because of Internal Errors, Not Hacked !

MySpace goes down because of Internal Errors, Not Hacked ! MySpace website was presented with a curious message that left many users believing that the service had been hacked. That apparently was not the case. Visitors to the social network were greeted by a largely blank page topped with the...

#OpFacebook : Facebook will be down on November 5 by Anonymous Hackers Attack

OpFacebook : Facebook will be down on November 5 by Anonymous Hackers Attack Anonymous has vowed to "destroy" Facebook on Nov. 5. Or more accurately, somebody has set up a Twitter account and YouTube channel to announce a plan dubbed "Operation Facebook." In a YouTube video, the hacking group...

Is Anonymous Linked to the Norway Shooter E-mail Hack?

A Norwegian hacker collective that allegedly gained access to the email accounts of Anders Behring Breivik, the confessed perpetrator of killing spree that took the lives of seventy-seven individuals, may have connections to Anonymous, according to a local journalist who has had contact with the...

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google

Indian Govt wants monitoring access for Twitter, Facebook,Skype and Google India's authorities are already forcing Research In Motion to grant access to the encrypted email and instant messages of its BlackBerry users, and now the government is pressuring Google and Skype too. Doesn't the...

British police issue warning to Anonymous, Lulzsec and other internet hacktivists

British police issue warning to Anonymous, Lulzsec and other internet hacktivists The Metropolitan Police have taken the unusual step of using Twitter to send a message to anyone considering supporting internet attacks against companies and governments.A message posted on the Met Police's officia...

Anonymous and Lulzsec stand for Jake Davis with #FreeTopiary Operation

Anonymous and Lulzsec stand for Jake Davis with FreeTopiary Operation Two Days before Accused LulzSec hacker "Topiary" was got arrested and today he released on bail. Jake Davis, an 18-year-old from the Shetland Islands, was released on bail after being charged with five offences relating to...

Anonymous and Lulzsec stand for Jake Davis with #FreeTopiary Operation

Anonymous and Lulzsec stand for Jake Davis with FreeTopiary Operation Two Days before Accused LulzSec hacker "Topiary" was got arrested and today he released on bail. Jake Davis, an 18-year-old from the Shetland Islands, was released on bail after being charged with five offences relating to...

Anonymous hacks Defense contractor ManTech for #Antisec

Anonymous hacks Defense contractor ManTech for Antisec In a tweet posted by Anonymous claimed to have hack the defense contractor, ManTech International. Hackers promise to Release the Data within 24 Hours. This is the latest hack in the group's AntiSec Operation, and in particular its series of...

Alleged Anonymous Member Faces Internet Ban, Monitoring Software

The U.S. Government is demanding that an alleged member of the online hacking group Anonymous be banned from using the Internet as a condition of his release, but won’t require him to run FBI monitoring software on his computers, saying the monitoring wasn’t enforceable. In a motion filed on July...

Anonymous Claims Hack of NATO, Sends Warning to FBI

The Internet hacker collective Anonymous claims to have breached the security of NATO’s computer network and made off with roughly a gigabyte of “restricted material,” according to a message posted from a Twitter account belonging to the group. Anonymous released two NATO documents in PDF form,...

LulzSec will release Murdoch email archive

LulzSec will release Murdoch email archive LulzSec behind a hack on The Sun's website claim to have extracted an email archive which they plan to release later on Tuesday. The Sun's website were redirected towards a fake story on the supposed death of Rupert Murdoch by infamous hacktivist...

WordPress bSuite 4.0.7 Cross Site Scripting

Original advisory: http://www.ihteam.net/advisory/bsuite-wordpress-permanent-xss/ WordPress bSuite Add Admin Download link: http://wordpress.org/extend/plugins/bsuite/ Author contact: 29/06/2011 POC published: 11/07/2011 Plugin is out-of-date, last update on 2009, so this is just a POC that show...

Stevens Institute of Technology database leaked by p0keu for #Antisec

Stevens Institute of Technology database leaked by p0keu for Antisec Stevens Institute of Technology database leaked by Anonymous - p0keu for Antisec on pastebin, the leaks are a MySQL database and a cms database, usernames/passwords, this leak comes from the same source as the 4 random leaks and...

XerXes - Most powerful dos tool

XerXes - Most powerful dos tool XerXes is one of the most powerful private dos tool. This tools was used by The Jester to Hits WikiLeaks Site DoS Attack. Get Source Code here : / XerXes - Most powerful dos tool - THN https://www.thehackernews.com / include stdio.h include stdlib.h include string....

Italian Universities dump database Leaked by LulzStorm

Italian Universities dump database Leaked by LulzStorm LulzStorm , Another Antisec supporter leaked Italian Universities dump database via a tweet on twitter. He release a torrent link and a Mediafire mirror link with a archive of 2.74 Mb. This Archive Include hacked database if 18 Italian...

PayPal UK Twitter account hijacked by angry customer

PayPal UK Twitter account hijacked by angry customer Second high-profile hack of the week against Twitter accounts, Yesterday FOX News Twitter Account was Hacked by 5CR1PT K1DD3S & then sent false tweets saying that U.S. President Barack Obama had been shot dead. Today an angry customer of Paypal...

PayPal UK Twitter account hijacked by angry customer

PayPal UK Twitter account hijacked by angry customer Second high-profile hack of the week against Twitter accounts, Yesterday FOX News Twitter Account was Hacked by 5CR1PT K1DD3S & then sent false tweets saying that U.S. President Barack Obama had been shot dead. Today an angry customer of Paypal...

ZDI-11-230: Apple Quicktime Apple Lossless Audio Codec Parsing Remote Code Execution Vulnerability

ZDI-11-230: Apple Quicktime Apple Lossless Audio Codec Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-11-230 June 29, 2011 -- CVE ID: CVE-2011-0211 -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P -- Affected Vendors: Apple -- Affected Products: Apple Quicktim...