4 Vulnerabilities Fixed in MyBB 1.6.12

4 Vulnerabilities Fixed in MyBB 1.6.12

XSS and SQL Injection security holes have been addressed

“Advanced Power” Botnet Uses Zombies to Check Websites for SQL Injection

“Advanced Power” Botnet Uses Zombies to Check Websites for SQL Injection

Over 12,500 computers have already been infected

Search Hints on HealthCare.gov Show a Lot of People Are Trying to Hack the Site

Search Hints on HealthCare.gov Show a Lot of People Are Trying to Hack the Site

SQL and HTML commands are shown as suggestions in the search box

Website of Former “Apprentice” Contestant Katie Hopkins Hacked

Website of Former “Apprentice” Contestant Katie Hopkins Hacked

The hackers leveraged an SQL Injection vulnerability to breach the website

Expert: Cybercriminals Likely Exploited SQL Injection to Pull Off $45M / €34M Heist

Expert: Cybercriminals Likely Exploited SQL Injection to Pull Off $45M / €34M Heist

ThreatTrack Security's Dodi Glenn shares some interesting insight

Taiwan Police Arrest Man Suspected of Hacking Popular Music Website

Taiwan Police Arrest Man Suspected of Hacking Popular Music Website

He used SQL Injection to breach the site's customer database

CakePHP 1.2.12, 1.3.16, 2.2.8 and 2.3.4 Released to Prevent SQL Injections

CakePHP 1.2.12, 1.3.16, 2.2.8 and 2.3.4 Released to Prevent SQL Injections

The latest variants can be downloaded from Softpedia

CSRF and SQL Injection Attacks Increase in Frequency, FireHost Finds

CSRF and SQL Injection Attacks Increase in Frequency, FireHost Finds

The cloud hosting firm has released its quarterly "superfecta" report

OpBlackSummer: Tunisian Cyber Army Targets Major US Telecoms Companies

OpBlackSummer: Tunisian Cyber Army Targets Major US Telecoms Companies

AT&T, Verizon, US Small Business Administration and a couple of banks have been targeted

Hackers Find Flaw in American Express Site, Gain Access to over 2 GB of Data

Hackers Find Flaw in American Express Site, Gain Access to over 2 GB of Data

The Tunisian Cyber Army claims that it has identified an SQL Injection vulnerability

French Chamber of Commerce and Industry Portal Hacked by Tunisian Cyber Army

French Chamber of Commerce and Industry Portal Hacked by Tunisian Cyber Army

The hackers have defaced one of the website's subdomains

SQL Injection, XSS Vulnerabilities Found on the Site of Islami Bank Bangladesh

SQL Injection, XSS Vulnerabilities Found on the Site of Islami Bank Bangladesh

The security holes have been identified by a hacker called Human Mind Cracker

Zynga Fixes XSS and SQL Injection Vulnerabilities on “With Friends” Website

Zynga Fixes XSS and SQL Injection Vulnerabilities on “With Friends” Website

The issues have been discovered by researcher Rafay Baloch

Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability

Ruby on Rails 3.2.10 Released to Address SQL Injection Vulnerability

Users are advised to update immediately to the latest version

Flaws in NASA’s GSFC Site Allowed Hackers to Bypass Firewalls, Steal Information

Flaws in NASA’s GSFC Site Allowed Hackers to Bypass Firewalls, Steal Information

The agency addressed the vulnerabilities after being notified by D35m0nd142

88% of Companies Don’t Protect Their Databases Against Threats – Infographic

88% of Companies Don’t Protect Their Databases Against Threats – Infographic

Here are the results of a study performed by GreenSQL

MyBB 1.6.9 Security Release Available for Download

MyBB 1.6.9 Security Release Available for Download

A high-risk SQL Injection has been addressed with this update

 
Want more? Browse: