PHP-Pastebin Cross Site Scripting

Author : L3b-r1'z Date : 2012-April-30 Title : Php-Pastebin Stored XSS Vulnerability Email : [email protected] Site : Sec4Ever.com Google Dork : allintext: "Php-Pastebin V.2" + P0c : Add New Paste put in the Paste Name alert"L3br1z"; You Will See The Alert : Proud To Be Lebanese Thx To All My...

Utopia News Pro 1.4.0 - Cross-Site Request Forgery (Add Admin)

Exploit Title: Utopia News Pro 1.4.0 Greetz Dr.WEP , JIKO , ahwak2000 , RENO , ABU NWAF , Dr.HAiL , snc0pe , 020 JaBrOt HaCkEr , alkaseer20 , SadHaCkEr , Cyber Code , aircrack -ng All FriendS...

Facebook Game - Zynga's Words With Friends Detected (deprecated)

Binary data 6374.prm...

Cross site scripting

Cross-site scripting XSS vulnerability in the Add friends module in Yoono Desktop Application before 1.8.21 allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

CVE-2012-1215

The CVE-2012-1215 entry describes a Cross-site scripting (XSS) vulnerability in the Add friends module of the Yoono Firefox extension, exploited via the create field in a "Create a group" action. The affected product is the Yoono extension for Firefox, with versions prior to 7.7.8. The underlying...

CVE-2012-1215

Cross-site scripting XSS vulnerability in the Add friends module in the Yoono extension before 7.7.8 for Firefox allows remote attackers to inject arbitrary web script or HTML via the create field in a "Create a group" action...

Design/Logic Flaw

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4864

Technical details about CVE-2011-4864 (affected product, root cause, impact, or exploit info) are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2011-4864

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

Facebook Scam : Selena Gomez Caught On Leaked Tape

Facebook Scam : Selena Gomez Caught On Leaked Tape Another Facebook Scam is circulating with the headline "Selena Gomez Caught On Leaked Tape" and Message "you will lost your all respect for Selena Gomez after watching this". By Clicking the wall post link takes you to the following page designed...

Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends " Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends ". Facebook will be adding two new security featur...

Facebook "Trusted friends" Security Feature Easily Exploitable

Facebook "Trusted friends" Security Feature Easily Exploitable Last week Facebook announced that in one day 600,000 accounts possibly get hacked. Another possible solution for Facebook to combat security issues is to find 3 to 5 "Trusted friends". Facebook will be adding two new security features...

AlstraSoft E-Friends Social Networking Script Cross Site Scripting

Exploit Title: AlstraSoft E-Friends Social Networking Script Stored XSS Date: 2011 Author: Eyup CELIK Version: All Version Tested on: All versions are Vulnerability ISSUE Cross Site Scripting can be done using the command input Vulnerable Page: Article Modules Exploit: "/ POC:...

Activart SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Lulzsec Releases Final Message to the friends around the globe

Lulzsec Releases Final Message to the friends around the globe Anonymous Tweet Video message as "Lulzsec Last Message ". In 10minutes the Video get 200 Likes and 7000 Views. Every message of Anonymous/ Lulzsec is spreading like Fire. The Video Message is here : Lulzsec Message is : Friends around...

BSDi/x86 - BindShell on 31337 port - Shellcode 117 Bytes

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

CVE-2011-1404

Mahara before 1.3.6 does not properly restrict the data in responses to AJAX calls, which allows remote authenticated users to obtain sensitive information via a request associated with 1 blocktype/myfriends/myfriends.json.php, 2 json/usersearch.php, 3 group/membersearchresults.json.php, or 4...

Saudisoftech SQL Injection

Exploit Title: Saudisoftech detail.php SQLInjection Vulnerability + Data : 2011-04-25 + Author : Net.Edit0r + DisCovered By: 3H34N + E-mail : [email protected] and [email protected] + dork : "Designed By: SAUDI SOFTECH" id= + Versian : All Ver + Category : Web Apps SQl + My Home :...

Manchu Manoj Email ID Hacked !

Collection king Mohanbabu's son Manchu Manoj's email id was hacked last week. The star who came back from USA recently after treatment for his arm injury was in for a shock when his email id was hacked. Sources say the hacker even chat with Manoj's friends online. Manoj rectified the problem but...

MultiCMS - Local File Inclusion

Source: http://packetstormsecurity.org/files/view/97987/multicms-lfi.txt =============================wwwdotWhiteponnydotcom============================= Date: 29/01/2011 Author: R3VANBASTARD Exploit Title: MultiCMS File Inclusion Vulnerbility Vendor: http://www.multicms.net Status: FIXED Test...