8641 matches found
CVE-2011-1911
CVE-2011-1911 affects JasperReports Server Community Project (JasperServer) versions 3.7.0 and 3.7.1. The root cause is a predictable _flowExecutionKey parameter, enabling CSRF via brute-forcing across requests. Impact described includes the ability for an attacker, tricking an authenticated user...
#DEFCON Chennai September 2011 meet - Another Success !
DEFCON Chennai September 2011 meet - Another Success ! DEF-CON Chennai DC602028 Meet held on On 11th September 2011 From 2:30 PM to 7PM was a Great Success. List of Speakers 1 Abhinab 2 Viknesh 3 Ravi Kumar 4 Aditya Gupta 5 Rahul Tyagi 6 Sophan 7 Suman Some Awesome moments of Meet DefCon message ...
Intelligence and National Security Alliance (INSA) hacked
Intelligence and National Security Alliance INSA hacked On Wednesday, 48 hours after releasing a policy paper on cybersecurity, the top trade association for intelligence contractors got a first-hand lesson on the subject: they discovered that their website was hacked. Cryptome, a site affiliated...
Community Events <= 1.2.1 - SQL Injection
The Community Events WordPress plugin was affected by a SQL Injection security vulnerability. curl --data "id=-1 AND EXTRACTVALUE1, CONCATCHAR58,@@version,CHAR58-- " http://www.site.com/wp-content/plugins/community-events/tracker.php...
WordPress Community Events Plugin <= 1.2.1 - SQL Injection
Sermon Browser plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin Community Events 1.2.1 - SQL Injection
Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
WordPress Community Events 1.2.1 SQL Injection
Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
WordPress Plugin Community Events 1.2.1 - SQL Injection
WordPress Plugin Community Events 1.2.1 - SQL Injection Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
Behind the Scenes of The Crypto Project
When a small group of activists announced the debut of The Crypto Project earlier this year, for many, ahem, mature, security and privacy advocates it brought to mind memories of the original cypherpunk movement that began in the 1990s and that group’s seminal efforts to encourage the use of stro...
WordPress MM Forms Community plugin <= 1.2.3 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Forms Community plugin = 1.2.3 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-forms-community.zip Version: 1.2.3 test...
WordPress MM Forms Community 1.2.3 SQL Injection
Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET value=".quoteString$value." WHERE fkformjoinerid='".$REQUEST'ID'."'...
WordPress MM Forms Community Plugin <= 1.2.3 - SQL Injection
MM Forms Community plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...
WordPress Plugin MM Forms Community 1.2.3 - SQL Injection
Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET value=".quoteString$value." WHERE fkformjoinerid='".$REQUEST'ID'."'...
Rankmyhack got hacked by HaxOr
Rankmyhack got hacked by HaxOr Rankmyhack.com got hacked by "HaxOr ". Rankmyhack.com is a website, lets hackers submit and rate each others hacks in order to determine the world's best hacker. According to the New York Times, the site has picked up at least 700 members since it launched at the en...
WordPress MM Forms Community plugin <= 1.2.3 SQL Injection
Exploit for php platform in category web applications Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET...
[SECURITY] Fedora 16 Update: drupal7-7.6-1.fc16
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
WordPress MM Forms Community File Upload
. . . . | | | / || \ \ | / | | / \ / | / \ / \ / \ / /| |\ \ / \ / \ / / \ / | / \ \ \ | || | / // | | | \ / \ \ | | / | | \ \ / // | \ / | | / |||| /\ | / || / \ / || /|| / \ / / \ | \ || / / / / / / / / / /...
Rethinking Black Hat: Building, Rather Than Breaking, Security
No doubt breaking things is fun. I remember back when I was 10 years old when I took apart a squirrel cage fan, flipped some wires and so forth, and then attempted to plug it back in. Good thing my mom stopped me seconds before I was about to get a literal jolt of reality. These days, I still kee...
Community Server <= 2008 XSS Vulnerability - Active Check
Community Server is prone to a cross-site scripting XSS vulnerability because it fails to sufficiently sanitize user-supplied data. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Community Server 'TagSelector.aspx' Cross Site Scripting Vulnerability
Community Server is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site. This may allow the...