Apple database hacked with SQL injection by Anonymous

Apple database hacked with SQL injection byAnonymous Anonymous hackers announce on twitter that Apple can be there next target. They expose one SQL vulnerability on Apple domain with One table "Users" data. Vulnerable Link : https://abs.apple.com:8080/ssurvey/survey?id= Exposure Link :...

PT-2011-07: Cross-Site Scripting in Cisco Small Business Devices

The specialists of the Positive Research center have detected "Cross-Site Scripting" vulnerability in Cisco Small Business Devices. User input passed to "Display name" and "User ID" parameters of SIP INVITE request "FROM" field is not properly sanitized. This can be exploited to inject malicious...

Mt.Gox взломан

Mt. Gox — одна из крупнейших Bitcoin бирж, позволяющих обменивать «цифровое золото» на вполне реальные деньги. В результате взлома в руки злоумышленников попали данные о пароле в зашифрованном виде, логине и почте пользователей. После взлома, пока по непонятной причине, курс биткоинов на бирже...

WebspotBlogging v3.02.x - SQL Injection Vulnerability

Document Title: =============== WebspotBlogging v3.02.x - SQL Injection Vulnerability Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 90 Product & Service Introduction: =============================== Here are just some of the feature...

WebspotBlogging v3.02.x - SQL Injection Vulnerability

Document Title: =============== WebspotBlogging v3.02.x - SQL Injection Vulnerability Release Date: ============= 2011-06-14 Vulnerability Laboratory ID VL-ID: ==================================== 90 Product & Service Introduction: =============================== Here are just some of the feature...

WebFileExplorer 3.6 - 'user' / 'pass' SQL Injection

source: https://www.securityfocus.com/bid/48233/info WebFileExplorer is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an attacker to compromise the application, acce...

WordPress Plugin GD Star Rating - 'votes' SQL Injection

source: https://www.securityfocus.com/bid/48166/info The GD Star Rating plugin for WordPress is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

Joomla! Component CCBoard - SQL Injection / Arbitrary File Upload

source: https://www.securityfocus.com/bid/48108/info http://www.noticeboardpro.com/notice-board-pro-copyright.htmlJoomla CCBoard is prone to an SQL-injection vulnerability and an arbitrary-file-upload vulnerability because it fails to sanitize user-supplied data. Exploiting these issues could all...

THN Report : ACER hacked because of their own stupidity !

THN Report : ACER hacked because of their own stupidity ! Yes ! you read right , ACER hacked because of their own stupidity. Yesterday we report that Pakistan Cyber Army hacked Acer Europe Server and 40,000 Users Data, Source Codes & Server Compromised . Today we investigate on this and try to fi...

Sony 12th time Hacked : Database of Application Store at Sony Europe Leaked !

Sony 12th time Hacked : Database of Application Store at Sony Europe Leaked ! Okay ! The Idahc - Lebanese hacker is back to hit Sony. This time he claim to hack the Database of Application Store at Sony Europe https://apps.pro.sony.eu/. A new day, A new surprise for Sony ! Yesterday, Sony Picture...

ACER Hacked : 40,000 Users Data, Source Codes & Server Compromised

ACER Hacked : 40,000 Users Data, Source Codes & Server Compromised Update : THN Report : ACER hacked because of their own stupidity This Week is Really with great UP-DOWNS in Cyber World. Mega hacks like Sony Pictures hacked, Chinese Hacker Cracks 100's of Gmail accounts , Public Broadcasting...

Sony Pictures hacked and Database Leaked by LulzSec

Sony Pictures hacked and Database Leaked by LulzSec YES ! Sony Hacked Again once more by Lulzsec. The Target is SonyPictures.com and It compromised over 1,000,000 users'personal information, including passwords, email addresses, home addresses,dates of birth, and all Sony opt-in data associated...

DroidDream Returns, Dozens of Apps Pulled From Android Market

Researchers have identified a second large batch of apps in the Android Market that have been infected with the DroidDream malware, estimating that upwards of 30,000 users have downloaded at least one of the more than 30 infected apps. Google has removed the apps from the market. There are at lea...

Avoiding the Privacy Apocalypse

Google has been criticized widely for its privacy practices, and some of the harshest critiques have come from outside privacy advocates. In this video, Simon Davies and Gus Hosein of Privacy International discuss the ways in which companies such as Google that have large amounts of user data can...

Dating Funda Hacked over 1 lakh 45,000 user data hacked !

Dating Funda Hacked over 1 lakh 45,000 user data hacked ! Dating Funda Hacked over 1 lakh 45,000 user data compromised by lionaneesh. Hack proof send by the hacker :...

PSB.org was hacked with 0day exploit for MoveableType !

PSB.org was hacked with0day exploit for MoveableType ! Yesterday Public Broadcasting Service PBS was Hacked by Lulzsec, Users data & Database Leaked. Lulzsec hackers today expose that, how exactly they hack all these database, site and Server. They Use 0day exploit for MoveableType, Using the...

Room Juice 0.3.3 - display.php Cross-Site Scripting

Room Juice 0.3.3 - display.php Cross-Site Scripting source: https://www.securityfocus.com/bid/47914/info Room Juice is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code i...

ZAPms 1.22 - nick SQL Injection

ZAPms 1.22 - nick SQL Injection source: https://www.securityfocus.com/bid/47782/info ZAPms is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

EmbryoCore 1.03 - index.php SQL Injection

EmbryoCore 1.03 - index.php SQL Injection source: https://www.securityfocus.com/bid/47763/info EmbryoCore is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

Various sites hacked by Fr0664/FCA and users data compromised !

Various sites hacked by Fr0664/FCA and users data compromised ! 1. igw.edu - Institut fur Gemeindebau unt Weltmission Pwnd by FR0664/FCA May 7th 2011 7425 emails/passwords : preview : & full : 2. fn-languedocroussillon.com - FRONT NATIONAL - LANGUEDOC-ROUSSILLON Pwnd by FR0664/FCA May 6th 2011 59...