Researcher Finds Twitter Botnet Command Channel

Arbor Networks security researcher Jose Nazario has stumbled upon a crimeware botnet using Twitter as its command-and-control operation. The botnet, which is linked to identity thieves in Brazil, uses Twitter status messages to communicate with bots — sending new links for the infected computers ...

XOOPS Celepar Module Qas - codigo SQL Injection

XOOPS Celepar Module Qas - codigo SQL Injection Xoops Celepar Module Qas Donwload of Xoops Celepar : http://www.xoops.pr.gov.br/uploads/core/xoopscelepar.tar.gz Author: s4r4d0 mail:[email protected] A Sql Injection has been found on modules Quas of Xoops Celepar in file Aviso.php . Source code:...

Mundi Mail 0.8.2 Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------------- Name : Mundi Mail Site : http://sourceforge.net/projects/mundimail/ Down : http://sourceforge.net/project/showfiles.php?groupid=100875&packageid=108474&releaseid=221732...

yogurt 0.3 - Cross-Site Scripting SQL Injection

yogurt 0.3 - Cross-Site Scripting SQL Injection -------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogur...

School Data Navigator (page) Local/Remote File Inclusion Vulnerability

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...

Yogurt 0.3 SQL Injection / XSS

-------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Name : Yogurt Site : http://sourceforge.net/projects/yogurt/...

phpWebThings <= 1.5.2 (help.php module) Local File Inclusion Vuln

No description provided by source. ---------------------------------------------------------------------------------------------------- Name : phpwebthings = 1.5.2 Site : http://sourceforge.net/projects/phpwebthings/ Down :...

PHPWebThings 1.5.2 - 'help.php?module' Local File Inclusion

---------------------------------------------------------------------------------------------------- Name : phpwebthings LFI; ---------------------------------------------------------------------------------------------------- P0c:...

School Data Navigator Local/Remote File Inclusion

---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.zip...

School Data Navigator - page LocalRemote File Inclusion

School Data Navigator - page LocalRemote File Inclusion ---------------------------------------------------------------------------------------------------- Name : School Data Navigator Site : http://sourceforge.net/projects/school-data-nav/ Down : http://216.92.6.173/datanavigator/appandreadme.z...

Supernews 2.6 SQL Injection

Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Supernews 2.6 - index.php?noticia SQL Injection

Supernews 2.6 - index.php?noticia SQL Injection Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

Supernews 2.6 - 'index.php?noticia' SQL Injection

Supernews 2.6 SQL Injection Vulnability Download: http://phpbrasil.com/script-download/vT0FaOCySSH/5817 Discovered by Observing and DD3str0y3r Collaps3 CREW - Made In Brazil Dork: Supernews 2.6 Example:...

ZeusCart <= 2.3 (maincatid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ======================================================= ZeusCart D | | -p0c: | -SQL INJECTION: | | -9999+union+all+select+0-- | | - Demo ONline: | | - http://ajdemos.com/demo/zeuscart/v23/?do=featured&action=showmaincatlanding&maincatid=SQ...

ZeusCart &lt;= 2.3 (maincatid) SQL Injection Vulnerability

No description provided by source. !usr/bin/perl |------------------------------------------------------------------------------------------------------------------ | -Info: | -Name: Zeus Cart V 2.3 | -Site: http://www.zeuscart.com/ | -Site Demo: http://www.zeuscart.com/onlinedemo.php?action=skip...

PHPenpals <= 1.1 (mail.php ID) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications =========================================================== PHPenpals D | | -p0c: | -SQL INJECTION: | | -http://localhost/Scripts/phpenpals/mail.php?ID=-1+union+select+1,@@version-- | -Vuls: @array = 'profile.php?personalID=' ,...

Cache-poisoning attack snares top Brazilian bank

From The Register Dan Goodin One of Brazil’s biggest banks has suffered an attack that redirected its customers to fraudulent websites that attempted to steal passwords and install malware, according to an unconfirmed report. According to this Google translation of an article penned in Portuguese...

Unfixed XSS vulnerability at tour.brazilbang.com

Security researcher nicholson, has submitted on 03/07/2009 a cross-site-scripting XSS vulnerability affecting tour.brazilbang.com, which at the time of submission ranked 167581 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/06/2010. It is...

[Full-disclosure] 0day Orkut XSS [ NEW! ]

Greetings! Doing hard searches and working hard seeking for xss holes we finally found! The new hole is in the description of the pic, you can put html encode chars like this. & l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ; means minus or open tag. means more or close...

orkutfun-xss.txt

Greetings! Doing hard searches and working hard seeking for xss holes we finally found! The new hole is in the description of the pic, you can put html encode chars like this. & l t ; meta http-equiv="refresh" content="0;url=http://suafakeaqui" & g t ; means more or close tag. So you can build...