4172 matches found
PHP-Fusion 6.01.15.4 - 'downloads.php' SQL Injection
=================================================================== PHP-Fusion = 6.01.15.4 downloads.php SQL Injection Vulnerability =================================================================== + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com Product...
Win Update Scareware Pushes Drive-By Downloads
Cybercriminals are using a fake Windows Update installation dialogue box to sell a bogus security product called Anti-malware Defender, security researchers have warned. Read the full article. Computer Weekly...
Free Blocking Tool to Thwart Drive-By Downloads
Researchers are preparing to release a free tool to stop “drive-by” downloads: Internet attacks in which the mere act of visiting a Web site results in the surreptitious installation of malicious software. The new tool, called BLADE Block All Drive-By Download Exploits, stops downloads that are...
Mozilla Admits Malware Sneaked into Firefox Add-ons
Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...
[slackware-security] pidgin
New pidgin packages are available for Slackware 12.0, 12.1, 12.2, 13.0, and -current to fix a security issue. More details about this issue may be found in the Common Vulnerabilities and Exposures CVE database: https://vulners.com/cve/CVE-2010-0013 Here are the details from the Slackware 13.0...
MP4 Player 4.0 - Local Crash (PoC)
MP4 Player 4.0 - Local Crash PoC !usr/bin/perl Exploits title :MP4 Player 4.0 Local Crash Poc Date : 2010/01/02 Aouther : SarBoT511 downloads :http://mp4-player.ivefound.com tested on :win xp sp2 MP4 Player 4.0 Greatz 2 : aB0 M0haM3d and lezr crew $file="SarBoT511.m4v"; $boom="A" x 2000;...
HTML Help Workshop 4.74 (hhp) Buffer Overflow Exploit (Universal)
No description provided by source. Exploit Title: HTML Help Workshop 4.74 hhp Buffer Overflow Exploit Universal Date: 2009-12-05 Author: Dzattacker Software Link: http://www.microsoft.com/downloads/details.aspx?FamilyID=00535334-c8a6-452f-9aa0-d597d16580cc&displaylang=en Version: 4.74 Tested on: ...
UseBB BBcode Parsing Remote Denial Of Service Vulnerability
This host has UseBB installed and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodusebbbbcodedosvuln.nasl 5148 2017-01-31 13:16:55Z teissa $ UseBB BBcode Parsing Remote Denial Of Service Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod,...
PHP-Nuke <= 8.0 Downloads Module XSS
Exploit for unknown platform in category web applications ==================================== PHP-Nuke = 8.0 Downloads Module XSS ==================================== Exploit Title: XSS Downloads Module PHP-Nuke = 8.0 Date: 19 Nov 2009 Author: Rohit Bansal Version: PHP-Nuke = 8.0 Tested on:...
PHP-Nuke <= 8.0 Downloads Module XSS
No description provided by source. Exploit Title: XSS Downloads Module PHP-Nuke = 8.0 Date: 19 Nov 2009 Author: Rohit Bansal Version: PHP-Nuke = 8.0 Tested on: independent platform Code : -------------------------------------------------------------- |XSS Downloads Module PHP-Nuke = 8.0 |Grab...
Foxy
Foxy is a Traditional Chinese peer to peer file sharing application. It is widely used in Hong Kong, Mainland China and Taiwan. Unlike other peer to peer software, Foxy is very easy to use and has unlimited download capabilities. The use of Foxy may circumvent the organizational security policy...
Firefox: Predictable /tmp pathname use
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
Firefox: Predictable /tmp pathname use
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
'Avalanche' Crimeware Kit Fuels Phishing Attacks
A single cybercrime group called “Avalanche” was responsible for nearly one-quarter of all identity theft-related phishing attacks in the first half of 2009, according to a new report by the Anti-Phishing Work Group APWG. According to the report, phishing sites on Avalanche domains target the...
CVE-2009-3274
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
CVE-2009-3274
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp locati...
PHP-IPNMonitor (maincat_id) Remote SQL Injection Vulnerability
No description provided by source. + + SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit =...
PHP-IPNMonitor - 'maincat_id' SQL Injection
SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit = -null+union+select+concatusername,0x3a,userpassword+from+ipntblpasswords-- + Example + :...
PHP-IPNMonitor - maincat_id SQL Injection
PHP-IPNMonitor - maincatid SQL Injection + + SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit =...
PHP-IPNMonitor SQL Injection
SQL injection vulnerability + PHP-IPNMonitor - sell digital downloads online + Download : http://www.withinweb.com/phpipnmonitor/ + nonameatantisecurity.org + Bugs = index.php?maincatid= + exploit = -null+union+select+concatusername,0x3a,userpassword+from+ipntblpasswords-- + Example + :...