1234 matches found
IL и XSS уязвимости во многих темах для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Information Leakage и Cross-Site Scripting уязвимостях во многих темах для WordPress. В разных шаблонах имеется test.php - скрипт с phpinfo - что приводит к Information Leakage утечка FPD и другой важной информации о сервере и XSS в PHP 4.4.1,...
WordPress WooThemes Live Wire theme - Cross-Site Scripting
WordPress WooThemes Live Wire theme is prone to a cross-site scripting vulnerability. An attacker may execute arbitrary script code in the browser of an user in the context of the affected site. In this way the attacker can steal cookie-based authentication credentials. Other attacks are also...
Nmap NSE net: jdwp-version
Detects the Java Debug Wire Protocol. This protocol is used by Java programs to be debugged via the network. It should not be open to the public Internet, as it does not provide any security against malicious attackers who can inject their own bytecode into the debugged process. Documentation for...
Student Charged With Posting Counterfeit Coupons to 4Chan
A student at New York’s Rochester Institute of Technology RIT has been arrested for producing hundreds of thousands of dollars worth of fake coupons and posting them to 4chan and other websites. Lucas Henderson, a 22-year old computer security student from Lubbock, Texas was charged with wire fra...
FBI Warns of Massive Wire Fraud Scams
The FBI is warning businesses about an ongoing spate of attacks that are stealing millions of dollars from companies through unauthorized bank transfers to Chinese companies. The fraudulent wire transfers are not a new tactic, but the FBI says the current round of attacks is notable in that...
Уязвимости в TimThumb и во многих темах для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в TimThumb и во многих темах для WordPress. Уязвимыми являются TimThumb и все веб приложения в частности темы для WordPress, которые его используют...
Уязвимости в темах Live Wire 2.0 и Live Wire Style для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в темах Live Wire 2.0 и Live Wire Style для WordPress. Это ещё две темы, которые вместе с Live Wire Edition входят в серию Live Wire. Это коммерческ...
Live Wire 2.0 For WordPress Cross Site Scripting / Denial Of Service
Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in Live Wire 2.0 and Live Wire Style themes for WordPress. These are another two themes which are a part of Live Wire series together with Live Wire Editio...
WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities
WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/47299/info Live Wire for Wordpress is prone to multiple security vulnerabilities. These vulnerabilities include multiple denial-of-service vulnerabilities, a cross-site scripting vulnerability, an...
WordPress Theme Live Wire 2.3.1 - Multiple Vulnerabilities
source: https://www.securityfocus.com/bid/47299/info Live Wire for Wordpress is prone to multiple security vulnerabilities. These vulnerabilities include multiple denial-of-service vulnerabilities, a cross-site scripting vulnerability, and an information-disclosure vulnerability. Exploiting these...
Уязвимости в теме Live Wire Edition для WordPress
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Full path disclosure, Abuse of Functionality и Denial of Service уязвимостях в теме Live Wire Edition для WordPress. Это коммерческий шаблон для WP. XSS WASC-08:...
Live Wire 2.3.1 XSS / Disclosure / Denial Of Service
Hello list! I want to warn you about Cross-Site Scripting, Full path disclosure, Abuse of Functionality and Denial of Service vulnerabilities in Live Wire Edition theme for WordPress. It's commercial theme for WP by WooThemes. ------------------------- Affected products: -------------------------...
FBI busts $465,000 credit card scam !
Federal investigators arrested and indicted a former Bridgeport resident who they say orchestrated a scam in which foreign nationals applied for and received credit cards on which they charged up to $465,000 worth of goods before leaving the country with the banks holding the tab. A federal grand...
Texas Man admits hacking into e-commerce servers of NASA !
A Texas man has admitted hacking into servers owned by an e-commerce company and making off with about $275,000. Jeremey Parker of Houston also copped to charges of breaking into servers maintained by NASA's Goddard Space Flight Center in Maryland and causing some $43,000 of damage. The hacking...
Zeus Targeting Online Payment Services
The Zeus Botnet continues to evolve and shift in focus from its traditional targets, banks and their customers, to other money-handling institutions like electronic money and online payment systems, according to a new report. The shift has been going on for months and likely follows policy moves ...
Multi-Million Dollar Cyber Fraud Investigation Surrounds Exchange Students
Two international students from Vietnam are under investigation by the Department of Homeland Security on charges of identity theft and wire fraud. The two Winona State University students, Tram Vo and Khoi Van, are alleged to have taken part in a criminal ring that defrauded ecommerce merchants...
Survey Finds Banks Struggling As Fraud Grows
A survey conducted by Information Security Media found that new fraud methods, including phishing and Internet enabled account takeovers are an increasing problem for banks, but that many organizations are ill equipped to combat the new threats. Online bank fraud is a growing problem in the U.S...
Jose Ignacio Lopez (GM)
Lopez was the head of General Motors’ Global Purchasing division when he defected for GM competitor VW to head that company’s purchasing operation in 1993. According to a lawsuit filed by GM, Lopez and other company executives brought with them more than two million pages of top-secret GM...
Texas Man Indicted for Hacking Eden Prairie Business, Stealing $274,000
A federal indictment unsealed earlier today alleges that a 35-year-old Texas man hacked into the computer network of an Eden Prairie business, stealing approximately $274,000. The indictment, filed in Minneapolis on October 13, 2010, charges Jeremy Parker of Houston, Texas, with one count of...
WordPress Live Wire Theme 2.3.1 - Multiple Security Vulnerabilities
There are several vulnerabilities in this theme. These vulnerabilities include multiple denial-of-service vulnerabilities, information-disclosure and cross-site scripting vulnerabilities. The issues allow attackers to deny service to legitimate users, execute arbitrary script code, steal...