9219 matches found
PT-2014-4252 · Drupal · Drupal
Name of the Vulnerable Software and Affected Versions: Drupal versions 7.14 Description: A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the year parameter to the "eventcalander/" endpoint. This issue has been disputed by the Drupal Security Tea...
BlackPOS Malware used in TARGET Data Breach developed by 17-Year Old Russian Hacker
The Holiday data breach at TARGET appeared to be part of a broad and highly sophisticated international hacking campaign against multiple retailers, involving the heist of possibly 110 million Credit-Debit cards, and personal information. Target confirmed last weekend that a malicious software wa...
Happy Holidays and Merry Christmas from 'The Hacker News'
The Christmas spirit has finally arrived. It's Christmas Day, a time for family and friends.We have had another wonderful year here at 'The Hacker News', so we not only want to wish you a Happy Holidays and Merry Christmas, but also thank you for reading our articles, commenting, sending tips and...
CVE-2013-7316
creationtimestamp| type| source ---|---|--- 2013-12-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/30329...
Microsoft Patch Tuesday - 8 Security Updates, 4 critical vulnerabilities, including Internet Explorer zero-day
October is turning out to be a busy month for patches. This month also marks the 10-year anniversary of the Patch Tuesday program, which Microsoft started in October of 2003. Scheduled for tomorrow, Microsoft has announced that they will release eight security updates including four critical,...
PCI DSS 3.0 puts emphasis on year-round awareness
Its easy to think of PCI compliance as just another annual hoop to jump through. Of course, after the annual audit, the business is safe for another 12 months, right? Well, not exactly, and with the upcoming release of PCI DSS 3.0, there will be an even bigger reason to think about compliance...
CVE-2013-3147
creationtimestamp| type| source ---|---|--- 2013-09-10 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/28187...
CVE-2013-4977
creationtimestamp| type| source ---|---|--- 2013-08-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/27402...
CVE-2013-1298
creationtimestamp| type| source ---|---|--- 2013-06-13 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26175...
CVE-2013-1606
creationtimestamp| type| source ---|---|--- 2013-06-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26138...
CVE-2013-3739
creationtimestamp| type| source ---|---|--- 2013-06-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/26125...
Twitter Vine app hacked by 16 year old Web developer
Recently Twitter has rolled out Vine app for Android, A new way to share video on twitter. The free app, which enables people to record and share clips of up to six seconds with other Vine users as well as on Twitter and Facebook. But on the very next day, Twitter's video-sharing application Vine...
Twitter Vine app hacked by 16 year old Web developer
Recently Twitter has rolled out Vine app for Android, A new way to share video on twitter. The free app, which enables people to record and share clips of up to six seconds with other Vine users as well as on Twitter and Facebook. But on the very next day, Twitter’s video-sharing application Vine...
CVE-2013-2945
creationtimestamp| type| source ---|---|--- 2013-05-07 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25298...
CVE-2013-1598
creationtimestamp| type| source ---|---|--- 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25139...
CVE-2013-1594
creationtimestamp| type| source ---|---|--- 2013-05-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/25139...
Yahoo! Blind SQL Injection could lead to data leakage
It seems that 2013 is the "Data Leakage Year"! Many customers' information and confidential data have been published on the internet coming from government institutions, famous vendors, and companies too. Ebrahim Hegazy@Zigoo0 an Egyptian information security advisor who found a high severity...
BELL-CVE-2013-3235 CVE-2013-3235 does not affect BellSoft software
Bulletin has no description...