PunBB 1.3 Cross Site Scripting

oo PunBB 1.3 oo Download: http://punbb.informer.com/downloads.php oo Vendor: www.punbb.com oo Author: s4r4d0 oo mail: [email protected] oo Bug: Cross site scripting has benn found on viewtopic.php file oo Exploit: http://host/forum/viewtopic.php?pid=Xss oo Demo:...

Joomla 1.5.x Local File Inclusion

Joomla 1.5.x + Download: http://www.joomla.org/download.html + Bug: Local File inclusion in index.php file + Author: s4r4d0 + Mail: [email protected] + Team: Fatal Error + Poc: http://www.site.com/index.php?option=/../../../../../../../../../../../../etc/passwd%00 + Demo:...

XOOPS 2.0.x Content 0.5 SQL Injection

+Xoops 2.0.x Module Content +Donwload of Module:http://prdownloads.sourceforge.net/xoops/XOOPS2modcontent-0.5.zip?download +Author: s4r4d0 +mail:[email protected] +TEAM: Fatal Error +Bug: Sql injection has been found in index.php...

eNdonesia CMS 8.4 - Local File Inclusion

eNdonesia CMS 8.4 - Local File Inclusion Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

Endonessia CMS 8.4 Loccal File Inclusion

No description provided by source. Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error...

eNdonesia CMS 8.4 - Local File Inclusion

Endonesia 8.4 CMS Site: http://www.endonesia.org/ Download: http://sourceforge.net/projects/endonesia Bug: Local File Inclusion in mod.php file ! Author: s4r4d0 Mail: [email protected] Team: Fatal Error Poc:http://www.site.com/mod.php?mod=/../../../../../../proc/self/environ%00...

Oscailt 3.3 Local File Inclusion

0 Oscailt 3.3 CMS 0 Download: http://sourceforge.net/projects/oscailt/ 0 Bug: Local File Inclusion in index.php file ! 0 Author: [email protected] 0 Team: Fatal Error 0 Poc: http://www.site.com/index.php?objid=/../../../../../../../../../../proc/self/environ%00 0...

Engeman 6.x.x SQL Injection

Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql codes in username textbox: SQL dump affter injection: select nome,senha,diasexp,dataltsen,permitetroca from cfgusr where nome='NULL' OR NOME'...

Engeman 6.x.x SQL Injection

No description provided by source. Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql codes in username textbox: SQL dump affter injection: select nome,senha,diasexp,dataltsen,permitetroca fro...

Engeman 6.x.x SQL Injection

Exploit for unknown platform in category web applications =========================== Engeman 6.x.x SQL Injection =========================== Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql...

Engeman - SQL Injection Vulnerability (vendor url erratum)

Engeman is a Brasilian software for maintenance control. Version tested: 6.x.x and prior. Next versions appears vulnerable too. The attacker can inject sql codes in username textbox: SQL dump affter injection: select nome,senha,diasexp,dataltsen,permitetroca from cfgusr where nome='NULL' OR NOME'...

Video: Man Caught Installing 'Skimmer' on ATM

LiveLeak has posted surveillance video footage from earlier this month of a guy in Brazil installing a skimming device onto a bank ATM. The second half of the tape shows him being arrested and officials revealing the device. Via Consumerist...

Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...

Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...

XOOPS Celepar Module Qas - codigo SQL Injection

XOOPS Celepar Module Qas - codigo SQL Injection Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code:...

Mundi Mail 0.8.2 Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...

phpWebThings <= 1.5.2 (help.php module) Local File Inclusion Vuln

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : phpwebthings = 1.5.2 Site : http://sourceforge.net/projects/phpwebthings/ Down :...

yogurt 0.3 - Cross-Site Scripting SQL Injection

yogurt 0.3 - Cross-Site Scripting SQL Injection -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogur...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

School Data Navigator (page) Local/Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...