1899 matches found
Abroad a Blog program 0day-vulnerability warning-the black bar safety net
Author: YJPS reprint please indicate the Recently bored to go abroad on the site wandering around and see a nice Blog system, you can register the user and assign a secondary directory. The more boring it is to detect the next, the following is the analysis of the results. Site: Vulnerability...
ICANN Appointee: A Focus on Security
This week’s news that former National Cyber Security Center Director Rod Beckstrom was named as the newest president of ICANN – the Internet Corporation for Assigned Names and Numbers, the Net’s most influential governing body – is a very encouraging sign that we’re living in an era when issues o...
A cynic's take on cyber czars and 60-day reports
On July 17, 2008, then Senator Barack Obama held a town hall meeting on national security at Purdue University. He and his panel covered issues of nuclear, biological and cyber security. I blogged about the event here and here. As part of his remarks at the event, Senator Obama stated: Every...
Howard Schmidt on the Cyber Security Czar, Cybercrime and How to Fix Federal Cyber Security
Dennis Fisher talks with former White House cybersecurity adviser Howard Schmidt about the need for a cyber security czar, the rise of cybercrime and how to fix federal cyber security. Download: digitalunderground16.mp3 Podcast audio courtesy of Michael Stephens Image via thatmakesthree‘s Flickr...
Counterpoint: The need for a cybersecurity czar is real
As everyone prepares to examine the results of the Obama Administration’s cyber-security review, one of the largest issues in play remains to what extent the White House will embrace recommendations to create a Cabinet-level position to address the matter or some role superior to today’s “cyber...
Klinzmann A-A-S 2.0.48 XSRF Exploit
!-- AASHack 1.0 By Felipe M. Aragon Affected Versions: AAS 2.0.48 and possibly older versions This is an exploit demonstration code for the A-A-S Application Access Server index.aas job parameter XSRF vulnerability CVE-2009-1464 This script has been successfully tested on IE 7.0 and Firefox 3.08...
Hathaway, Obama administration swing and miss at RSA
Much of the talk at the RSA Conference last week centered on the lack of the unifying theme or big-time story that usually emerges to take over the show by mid-week. But there was, in fact, a major story, and it was the abject failure of the Obama administration, in the person of Melissa Hathaway...
How the economy is hurting security
From Purdue University’s CERIAS The economic crisis has affected virtually every facet of society, and information security is no exception. In a new report titled Unsecured Economies: Protecting Vital Information, researchers from Purdue University’s CERIAS security center lay out the fairly ble...
PHPizabi v0.848b C1 HFP1-3 Remote Command Execution Exploit
No description provided by source. !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL keyword, and actually...
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution
PHPizabi 0.848b C1 HFP1-3 - Remote Command Execution !/usr/bin/php ?php / Found this after getting my inet back and noticing this http://www.milw0rm.com/exploits/6085 . The only problem with the remote command execution there is that it actually requires registerglobals = on. I saw the GLOBAL...
US-CERT Technical Cyber Security Alert TA09-022A -- Apple QuickTime Updates for Multiple Vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-022A Apple QuickTime Updates for Multiple Vulnerabilities Original release date: January 22, 2009 Last revised: -- Source: US-CERT Systems Affected Apple QuickTime 7.5 for Windows and Mac...
US-CERT Technical Cyber Security Alert TA09-020A -- Microsoft Windows Does Not Disable AutoRun Properly
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA09-020A Microsoft Windows Does Not Disable AutoRun Properly Original release date: January 20, 2009 Last revised: -- Source: US-CERT Systems Affected Microsoft Windows Overview Disabling...
z1exchange 1.0 SQL Injection
------------------------------------------------------------------------- -- JIKO FroM No-exploit.Com --- ------------------------------------------------------------------------- Author : jiko email : [email protected] Home : www.no-exploit.Com Script :...
SimpleBlog 3.0 (simpleBlog.mdb) Database Disclosure Vulnerability
No description provided by source. » SimpleBlog 3.0 Mdb Vulnerability » » ---------------------------------------------------------- » Author : ELMuHaMMeD » » Date : 26.11.2008 » » Contact : [email protected] » » ----------------------------------------------------------- Script : SimpleBlog...
simpleblog-mdb.txt
» SimpleBlog 3.0 Mdb Vulnerability » » ---------------------------------------------------------- » Author : ELMuHaMMeD » » Date : 26.11.2008 » » Contact : [email protected] » » ----------------------------------------------------------- Script : SimpleBlog 3.0 Download :...
linux/x86 append rsa key to /root/.ssh/authorized_keys2 295 bytes
Exploit for linux/x86 platform in category shellcode ================================================================= linux/x86 append rsa key to /root/.ssh/authorizedkeys2 295 bytes ================================================================= / linux/x86 shellcode to append rsa key to...
GS Real Estate Portal - Multiple SQL Injections
|| || | || o,7 || . o7 || 4||| ow, : / / . |-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=| | | | /' \ /'\ /\ \ /'\ /\ \ | | /, \ /\/\L\ \ \ \ ,/\ /\ \ \ \ / | | //\ \ /' \ /\ //\ Kings of injection | | // | | |...
Pre Real Estate Listings File Upload Vulnerability
No description provided by source. Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or' password:'or' Live...
Pre Real Estate Listings - Arbitrary File Upload
Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or' password:'or' Live Demo:...
prerealestate-sqlupload.txt
Pre Real Estate Listings login.php ByPass /File Upload Script:Pre Real Estate Listings HomePage:http://preproject.com/ Demo:http://preproject.com/ulisting/ Author:BackDoor By Pass Exploit: http://victim.com/scriptpath/login.php username:'or' password:'or' Live Demo:...