WordPress WP Symposium plugin version 15.1 suffers from a remote SQL injection vulnerability.
Monthly Archives: May 2015
gpEasy CMS 4.4 Cross Site Scripting
gpEasy CMS version 4.4 suffers from a persistent cross site scripting vulnerability.
WordPress Ad Inserter 1.5.2 CSRF / XSS
WordPress Ad Inserter plugin version 1.5.2 suffers from cross site request forgery and cross site scripting vulnerabilities.
WordPress Embed-Articles 7.0.3 CSRF / XSS
WordPress Embed-Articles plugin version 7.0.3 suffers from cross site request forgery and cross site scripting vulnerabilities.
TORNADO Computer Trading CMS SQL Injection
TORNADO Computer Trading CMS suffers from a remote SQL injection vulnerability.
Virus in the name of WhatsApp! Now via email!

Profits are not the only thing brought by the voice calls in WhatsApp. We are sure that some of you are also worried about this.
According to RedesZone, this new service has reactivated, and made more believable, an old scam. Do you want to know how does it work? We will tell you! If you wonder how it works, keep reading…
- You receive an email which informs you that you have a pending voice message, supposedly/technically from a friend/ one of your contacts.
- If we want to listen to it, we just have to click on the “autoplay” button in the email.

If there was any doubt, you are not downloading a voice message, instead you are downloading malware.
That’s why, so you don’t fall for this kind of scams, you should take this into account:
- WhatsApp doesn’t send notifications for pending messages.
- If we look closely to the sender’s address: [email protected], we will see it doesn’t have to do anything with WhatsApp.
- The application won’t never refer to itself as Whats App.
The best thing you can do is just ignore these emails and install in your computer the best antivirus, which will block the malware in your computer.
The post Virus in the name of WhatsApp! Now via email! appeared first on MediaCenter Panda Security.
Appeals Court Rules NSA Metadata Collection Not Authorized by Section 215
The United States Court of Appeals for the Second Circuit ruled Thursday that the Patriot Act does not authorize the bulk collection of phone records by the NSA. The ruling undermines the key foundation upon which the federal government’s phone metadata surveillance program is built, Section 215 of the Patriot Act. That program was the […]
World Password Day: Make Sure Your Password is Secure
If you are like me, you have a love-hate relationship with passwords. You know you need them. You love them, because you they keep your data and internet-self secure. You hate them, because you have to come up with good ones in order to do so and because if they are finally really good, you most likely will forget them at one point.
So what to do?
The easiest solution would be to get a password manager that automatically 1) Generates complex passwords, 2) Encrypts and store them for you.
A run-of-the-mill six-letter password has 310 million possible combinations – and can be cracked by a fast PC in 30 seconds. The kinds of passwords generated by a password manager would take 23 years …
A password manager is out of the question for you? Then make sure you at least consider the following security tips:
- Use a unique password for each of your accounts. When a website gets hacked one of the first things bad guys do is checking out if your username/email-address/password combination works on other (high-profile) pages.
- Your password should consist of at least eight characters. It should include upper- and lower-cases, numbers, and special characters.
- Try and create passwords that can’t be found in a dictionary. Hackers nowadays have programs that cycle through dictionaries to check if they can access your account.
- Don’t use character strings like 12345, abcde, qweertyui, etc.
- Use passwords that can’t be associated with you: Your dog’s name, birthday dates of family members or yourself or your favorite sport are a no go.
- Change your password regularly – especially when it comes to your email and online banking/online payment accounts.
- Don’t write down your password and do never ever share them.
If you have trouble coming up with a good, strong, and complex enough password, try one of the many password generators out there. Just make sure to remember it afterwards. 
What are your password tips?
The post World Password Day: Make Sure Your Password is Secure appeared first on Avira Blog.
Apple Fixes WebKit Vulnerabilities in Safari Browser
Apple has issued a series of bulletins for its Safari browser fixing various security vulnerabilities in its WebKit rendering engine.
Grindr v2.1.1 iOS & Account System – Breach Attack Vulnerability
Posted by Vulnerability Lab on May 07
Document Title:
===============
Grindr v2.1.1 iOS & Account System – Breach Attack Vulnerability
References (Source):
====================
http://www.vulnerability-lab.com/get_content.php?id=1420
Release Date:
=============
2015-05-03
Vulnerability Laboratory ID (VL-ID):
====================================
1420
Common Vulnerability Scoring System:
====================================
6.7
Product & Service Introduction:…