Malware And Hacking Forum Seized, Dozens Arrested

The FBI and other law enforcement agencies have arrested more than 70 people suspected of carrying out cyber criminal activities associated with one of the most active underground web forums known as Darkode. Darkode, also used by notorious Lizard Squad, was an online bazaar for cyber criminals...

Feds Detail Shutdown of Cybercrime Forum Darkode

Officials worldwide this week culminated an 18-month effort to take down Darkode, a cybercrime forum where hackers fraternized, shared malware, credit card information and more. The campaign, dubbed Operation Shrouded Horizon, resulted in the arrest of 28 hackers and 27 house searches across 18...

Just A Forum 2.1.1 Cross Site Scripting

| Title : Just aForum v2.1.1 XSS Vulnerability | Author : indoushka | email : [email protected] | Tested on: windows 8.1 Français V.Pro | Download : http://www.dl.persianscript.ir/script/JustaForumv2.1.1PersianScript.ir.rar ======================================= Poc : Put in the search bo...

DMX FORUM 2.1a Configuration Disclosure

| Title : DMX FORUM v2.1a Config Disclosure Vulnerability | Author : indoushka | email : [email protected] | Dork : © DMX FORUM v2.1a | Tested on: windows 8.1 Français V.Pro | Bug : by pass | Download : scripts.toucharger.com/fiches/scripts/dmx-forum/3392.htm...

WordPress Plugin WP Symposium 15.1 - '&show=' SQL Injection

======================================================================= title: SQL Injection product: WordPress WP Symposium Plugin vulnerable version: 15.1 and probably below fixed version: 15.4 CVE number: CVE-2015-3325 impact: CVSS Base Score 7.5 AV:N/AC:L/Au:N/C:P/I:P/A:P homepage:...

WordPress Plugin WP Symposium 15.1 - show SQL Injection

WordPress Plugin WP Symposium 15.1 - show SQL Injection ======================================================================= title: SQL Injection product: WordPress WP Symposium Plugin vulnerable version: 15.1 and probably below fixed version: 15.4 CVE number: CVE-2015-3325 impact: CVSS Base...

WordPress Plugin WP Symposium 'forum.php' SQL Injection Vulnerability

WordPress is a blogging platform developed using the PHP language, users can set up their own weblogs on servers that support PHP and MySQL databases.WP Symposium plugin for WordPress is an application plugin for wordpress. A SQL injection vulnerability exists in the WP Symposium plugin for...

WP Symposium Plugin for WordPress forum.php 'show' Parameter SQL Injection (Version Check)

The WordPress WP Symposium Plugin installed on the remote host is affected by a SQL injection vulnerability due to a failure to properly sanitize user-supplied input to the 'show' parameter of the forum.php script. An unauthenticated, remote attacker can exploit this issue to launch a SQL injecti...

WordPress Mingle Forum Plugin <= 1.0.28 - Multiple Vulnerabilities

This plugin is prone to cross site scripting and full path disclosure vulnerabilities. Solution Update plugin...

WordPress Mingle Forum Plugin <= 1.0.33 - Cross Site Scripting

Because of this vulnerability, the attackers can inject arbitrary JavaScript or HTML code. Solution Update the plugin...

WordPress Forum Plugin <= 2.4 - SQL Injection

Because of this vulnerability, remote authenticated users can execute arbitrary SQL commands. Solution Update the plugin...

Shopify: Stored XSS in the Shopify Discussion Forums

Hi Shopify Security Team, There is Stored XSS in the Shopify Discussion Forums.Under ecommerce.shopify.com, in shopify-discussion The STORED XSS is present. The Stored XSS can easily be produced Every time. To Produce the XSS Vulnerability, I created a New Topic Under the shopify-discussions in t...

Dokeos 'forum' and 'origin' cross-site scripting vulnerabilities

Dokeos is an open source online education and course management system . The system supports file uploading , courseware production , notification and other teaching support functions. Dokeos 1.8.4 and previous versions of cross-site scripting vulnerabilities , the vulnerability stems from...

IP. Board <= 3.4.7 SQL Injection analysis-vulnerability warning-the black bar safety net

IPB stands for Invision Power Board is a PHP Development Forum program, foreign used more widely. In its 3. 4. 7 version and the previous presence of a SQL injection vulnerability, this article to its analysis. poc link http://seclists.org/fulldisclosure/2014/Nov/20 !/ usr/bin/env python Sunday,...

Moodle 2.0.x < 2.0.5 / 2.1.x < 2.1.2 Multiple Vulnerabilities

Binary data 8713.prm...

Moodle < 2.5 / 2.5.x < 2.5.8 / 2.6.x < 2.6.5 / 2.7.x < 2.7.2 Multiple Vulnerabilities

Binary data 8719.prm...

phpok（safe_html)绕过导致储存型xss

简要描述： phpok（论坛BBS功能） 存储型xss 详细说明： public function safehtml$content,$clearurl='' $content = pregreplacecallback'//isU',array$this,'cleanxsson',$content; //清除带src和href里的信息 $content = pregreplacecallback"//isU",array$this,'cleanxssscript',$content; //清除src传递没有引号的数据 $content =...

AZBB 1.0.07d - Multiple Vulnerabilities

AZBB 1.0.07d - Multiple Vulnerabilities AZBB Multiple Vulnerabilities Vendor: AZBB Product: AZBB Version: = 1.0.07d Website: http://azbb.cyaccess.com/ BID: 13272 13278 CVE: CVE-2005-1200 CVE-2005-1201 OSVDB: 15700 15701 15702 15703 SECUNIA: 15013 PACKETSTORM: 37792 Description: azbb is a forum th...

AwSnap! New Hack Can Crash Chrome Browsers of Mass Audience

Few weeks back, we reported how a string of just 13 characters could cause your tab in Chrome to crash instantly. However, there was an exception that this special 13 characters string was only working on Mac OS X computers with no impact on Windows, Android, or iOS operating systems. Now, a rece...

6kbbs 8.0 Cross Site Request Forgery

6kbbs v8.0 Multiple CSRF Cross-Site Request Forgery Security Vulnerabilities Exploit Title: 6kbbs Multiple CSRF Cross-Site Request Forgery Security Vulnerabilities Vendor: 6kbbs Product: 6kbbs Vulnerable Versions: v7.1 v8.0 Tested Version: v7.1 v8.0 Advisory Publication: April 02, 2015 Latest...