Google Chrome Eavesdropping Exploit Published

The developer of the annyang speech recognition JavaScript library has published exploit code for a bug in Google’s Chrome browser that could allow a malicious website to eavesdrop using a computer’s microphone long after a visitor has left a website. The code disclosure is in response, said...

Joomla Zap Weather FPD & Zap Calendar跨站脚本漏洞

No description provided by source. Title - Joomla Zap Weather FPD & Zap Calendar XSS Date: 01.21.2014 Vendor: zcontent.net extensions.joomla.org/extensions/owner/cogliano Versions - Z Weather v9 & Zap Calendar v4.0 Latests ATM Contant: smashatdevilteam.pl Zap Weather PoC -...

WordPress Global Flash Galleries File Upload

Exploit Title: WordPress global-flash-galleries Plugin Remote File Upload Vulnerability Author: Ashiyane Digital Security Team Date: 01/18/2014 Vendor Homepage: http://wordpress.org Software Link : http://downloads.wordpress.org/plugin/global-flash-galleries.zip Google dork:...

Web eXperts文件上传和SQL注入漏洞

No description provided by source. + Author: TUNISIAN CYBER + Exploit Title: Web eXperts FileUpload/SQLi vulnerabilities + Date: 14-01-2014 + Category: WebApp + Google Dork: :intext:"Website Design & Developed By Web eXperts" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Web...

PHPJabbers Vacation Rental Script V3.0 - Multiple Vulnerabilties

Exploit for php platform in category web applications Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : email protected .:. Home : http://www.iphobos.com/blog/ .:. Script :...

Vacation Rental Script 3.0 CSRF / XSS / File Disclosure

Vacation Rental Script V3.0 - Multiple Vulnerabilties ==================================================================== .:. Author : HackXBack .:. Contact : [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : http://www.phpjabbers.com/vacation-rental-script/ .:. Tested On Demo :...

Web eXperts Shell Upload / SQL Injection

Author: TUNISIAN CYBER + Exploit Title: Web eXperts FileUpload/SQLi vulnerabilities + Date: 14-01-2014 + Category: WebApp + Google Dork: :intext:"Website Design & Developed By Web eXperts" + Tested on: KaliLinux + Friend's blog: www.na3il.com +Exploit: Web eXperts suffers from a File Upload/SQLi...

V5shop官方演示站点一处有意思的逻辑缺陷可泄漏管理员密码

简要描述： 我了个插，一个厂商发3个之后就不挖了，不然有刷rank的嫌疑。 wb都是xsser的，不然他会很伤心的，请别的白帽子也高台贵手。 详细说明： 为啥我会说有意思，难道没意思我会说有意思吗？我不知道你们看完觉得有没有意思。 打开http://site2.v5shop.com.cn/vprostandred/。铺面而来的是 本屌当时就填了个验证码就进去了。看到admin，很高心，于是想要提交，你以为管理是sb吗？这是演示站点啊。虽然你可以进行各种操作，但是你以为官网是sb啊。于是搞的本吊上级下跳，慢慢的审查这个演示后台。突然24k纯金狗眼一亮发现一个地方可以修改密码...

[Avivore] The Twitter-searching Data Miner

Avivore is a Python-based tool that searches Twitter for keywords and then parses any tweets that are found. When parsing, it looks for the following sort of data: Phone numbers in NPA-NXX format ex: 604-555-1212 IPv4 addresses 127.0.0.1 Blackberry PINs ABCDEF12 It presently uses a SQLite backend...

Small ants local portal system sql injection vulnerability-vulnerability warning-the black bar safety net

public/ajax. aspx? action=addcomparebuild&cname=sqlinject Official recruitment demoxiaomayico and select top 1 name from demoxiaomayico. dbo. sysobjects where xtype=CHAR8 50– and select top 1 username from Antadmin0– The account and select top 1 password from Antadmin0– The password hash They say...

CVE-2013-7216

Multiple SQL injection vulnerabilities in Classifieds Creator 2.0 allow remote attackers to execute arbitrary SQL commands via the 1 ID parameter to demo/classifieds/product.asp, or 2 UserID or 3 Password field to demo/classifieds/admin.asp...

Lowest Unique Bid Auction - SQL Injection

Lowest Unique Bid Auction - SQL Injection | \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page:...

Lowest Unique Bid Auction - SQL Injection

| \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page: http://www.auctionwebsitescript.com/lowestuniqbidauction.html Script Demo:...

ProQuiz v2.X.X CSRF (change admin passwd) Vulenrability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: ProQuiz v2.X.X CSRF change admin passwd Vulenrability + Date: 14-12-2013 + Category: WebApp + Vendor:http://proquiz.softon.org/ + Google Dork: intext:"Powered by - Softon Technologies" + Tested on: Win...

X7 CHAT 2.0.2 CSRF (add admin) vulenrability

Exploit for php platform in category web applications X-------------------------------------------------------------X | | | | | \ | | / | |/ \ | \ | | / \ \ / / \ | \ | | | | | | | | | | \ --. | | / /\ | | | | / /\ V /| |/ / | | |/ / | | | | | | . | | | --. \ | | | || . | | | \ / | \ || / | | |...

EggBlog v4.X.X Arbitrary File Upload vulnerability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: EggBlog v4.X.X Arbitrary File Upload vulnerability + Date: 13-12-2013 + Category: WebApp + Vendor:http://sourceforge.net/projects/eggblog/ + Google Dork: Do Some Work and you'll find it : + Tested on:...

Simple File Manager vX.X File Upload Vulenrability

Exploit for php platform in category web applications + Author: TUNISIAN CYBER + Exploit Title: Simple File Manager vX.X File Upload Vulenrability + Date: 11-12-2013 + Category: WebApp + Vendor:onedotoh.sourceforge.net/‎ + Google Dork: Do Some Work and you'll find it : + Tested on: Win7 , ubuntu...

[ISecAuditors Security Advisories] PL/SQL Injection in Oracle Portal Demo Organization Chart

============================================= INTERNET SECURITY AUDITORS ALERT 2012-001 - Original release date: November 8th, 2012 - Last revised: March 20th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 7,1/10 CVSS Base Score - CVE-ID: CVE-2013-3831...

Lowest Unique Bid Auction SQL Injection

| \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || Lowest unique bid auction, SQLi Vulnerabilities Product Page: http://www.auctionwebsitescript.com/lowestuniqbidauction.html Script Demo:...

AuctionWebScript eBay Clone SQL Injection

| \ | | | | / | | | | | | | | | | // \ \ / / | | | | | | |/ | ' \ \ \ / / | | | \ \ /\ V / | | || | || | | | | | | / || \| / /||,|||/|| || |/ || auctionwebsitescript eBay Clone, SQLi Vulnerabilities Product Page: http://www.auctionwebsitescript.com/ebayclone.html Script Demo:...