Android Application Allows Remote Access – No Permissions Required

Mobile security researchers at the firm Viaforensics say they have created a malicious mobile application that requires the phone user to grant no permissions during installation, but could give remote attackers the ability to install and execute malicious code on mobile devices running the Andro...

Sqlninja 0.2.6 is now available

Sqlninja 0.2.6 is now available Sqlninja's goal is to exploit SQL injection vulnerabilities on web applications that use Microsoft SQL Server as back end. It is released under the GPLv3.There are a lot of other SQL injection tools out there but sqlninja, instead of extracting the data, focuses on...

Researchers To Demonstrate Tor Network Hijack Method

Researchers at the Hackers To Hackers Conference in Brazil will detail a method of hijacking the TOR anonymity network, potentially putting its users at risk, while The Tor Project accuses one of the researchers of irresponsible disclosure. The presentation combines work done by Eric Filiol of th...

Windows Gather Screen Spy

This module will incrementally take desktop screenshots from the host. This allows for screen spying which can be useful to determine if there is an active user on a machine, or to record the screen for later data extraction. Note: As of March, 2014, the VIEWCMD option has been removed in favor o...

Clipbucket 2.4 RC2 645 - SQL Injection

------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery Date..........5/23/2011 Tested...

Clipbucket 2.4 RC2 645 - SQL Injection

Clipbucket 2.4 RC2 645 - SQL Injection ------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery...

Clipbucket 2.4 RC2 645 SQL Injection

------------------------------------------------------------------------ Software................Clipbucket 2.4 RC2 645 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.clip-bucket.com/ Discovery Date..........5/23/2011 Tested...

Tickets 2.13 - SQL Injection

Tickets 2.13 - SQL Injection ------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

Tickets 2.13 SQL Injection

------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

NoticeBoardPro 1.0 SQL Injection

------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery Date..........5/11/2011 Tested...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

NoticeBoardPro 1.0 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/...

NoticeBoardPro 1.0 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.co...

NoticeBoardPro 1.0 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................NoticeBoardPro 1.0 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.NoticeBoardPro.com/ Discovery Date..........5/11/2011 Tested...

mySeatXT 0.1781 SQL Injection Vulnerability

Exploit for php platform in category web applications view source print? ------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5...

mySeatXT 0.1781 SQL Injection

------------------------------------------------------------------------ Software................mySeatXT 0.1781 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://sourceforge.net/projects/myseat/ Discovery Date..........4/25/2011 Tested...

Web2Project 2.3 - SQL Injection

------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery Date..........4/21/2011 Tested...

Web2Project 2.3 SQL Injection

------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery Date..........4/21/2011 Tested...

Web2Project 2.3 - SQL Injection

Web2Project 2.3 - SQL Injection ------------------------------------------------------------------------ Software................Web2Project 2.3 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://forums.web2project.net/ Discovery...

Graugon Forum 1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ --Description-- A SQL injection vulnerability in Graugon Forum 1.3 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP...

eGroupware 1.8.001 SQL Injection

------------------------------------------------------------------------ Software................eGroupware 1.8.001 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.egroupware.org/ Discovery Date..........4/7/2011 Tested...