Mozilla patches 11 Firefox security holes

Mozilla has joined this week’s patchapalooza with the release of a Firefox update to fix 11 documented security vulnerabilities. Six of the 11 issues are in advisories rated “critical” because of the risk of code execution attacks that could allow hackers to take complete control of a compromised...

T-Mobile data on Full Disclosure is real

T-Mobile is now saying that the information that was posted to the Full Disclosure security mailing list this weekend is in fact the company’s data. But the company stopped short of confirming that the anonymous hackers have access to customer data and other sensitive information, as they have...

Frontis 3.9.01.24 - source_class SQL Injection

Frontis 3.9.01.24 - sourceclass SQL Injection Viva l'Algérie 3-1 ---Karim Matmour--Abdel-Kader Ghazal--Rafik al-Zuhair Jabbur-- Félicitations à tous les Algériens L'Algérie bat l'Egypte 3-1 à aller El akouba pour le retour -------------------------AllaH AkbaR-------------------------------...

EgyPlus 7ml 1.0.1 - Authentication Bypass

|| || | || o,7 || . o7 || q||| o\, : / / . =By: Qabandi =Email: iqaahotmail.fr From Kuwait, PEACE... =Vuln: EgyPlus 7ml query"select name,pass from admin where name = '$username' and pass = '$password' "; $AdminInfo=$hazemali-numrows$sql; if$AdminInfo==1 ---- Checks if MySQL statement is true...

Joomla Boy Scout Advancement 0.3 SQL Injection

------------------------------------------------------------------------------------------------------------ MULTIPLE SQL INJECTION VULNERABILITIES --Joomla Component 'Boy Scout Advancement' ----------------------------------------------------------------------------------------------------------...

Winamp <= 5.55 (MAKI script) Universal Seh Overwrite Exploit

Exploit for unknown platform in category local exploits ============================================================ Winamp = 5.55 MAKI script Universal Seh Overwrite Exploit ============================================================ usage: python winampmakiscript.py Note : I got problem while...

Audioactive Player 1.93b (.m3u) Local Buffer Overflow Exploit (SEH)

No description provided by source. usage: exploit.py Open the program then double clic in the exploit file print "" print " Audioactive Player 1.93b .m3u Local Buffer Overflow Exploit SEH\n" print " Credits : hack4love\n" print " Seh Exploit: His0k4\n" print " Tested on: Windows XP Pro SP3 EN\n"...

Miffat 2.1 Insecure Cookie

|| || | || o,7 || . o7 || q||| ow, : / / . MLFFAT 2.1 - insecure Cookie Handling Qabandi | iqaahotmail.fr From Kuwait, Peace. Salamz: Killer Hack, Ghost-R00t, Mr.Mn7os, all Muslims Buy: http://mlffat.com/emm/index.php?action=order Dork: "Powered by mlffat"...

SQL injection tactics revealed

SQL injection attacks have become the most reliable way for hackers to gain access to valuable data on back-end systems, with many high-profile Web sites falling victim to the technique over the last couple of years. The attacks themselves are fairly straightforward, but the results can be...

MPLAB IDE 8.30 - '.mcp' Universal Overwrite (SEH)

usage: mplab.py then open the project file : Download : http://ww1.microchip.com/downloads/en/DeviceDoc/MPLAB8.30.zip nadli chouk fi rassi :p print "" print " MPLAB IDE 8.30 .mcp Universal Seh Overwrite Exploit\n" print " Refer : Secunia advisory 35054\n" print " Exploit code: His0k4\n" print "...

MPLAB IDE 8.30 - .mcp Universal Overwrite (SEH)

MPLAB IDE 8.30 - .mcp Universal Overwrite SEH usage: mplab.py then open the project file : Download : http://ww1.microchip.com/downloads/en/DeviceDoc/MPLAB8.30.zip nadli chouk fi rassi :p print "" print " MPLAB IDE 8.30 .mcp Universal Seh Overwrite Exploit\n" print " Refer : Secunia advisory...

More than 160,000 affected by data breach at UC Berkeley

Hackers had access to a database for about six months at the University of California at Berkeley and stole health-related data on more than 160,000 students and other people who used the school’s health services center. College officials said that the attack on the health center’s database was...

Hackers break into database, demand ransom

From WaPo Security Fix Brian Krebs Hackers last week broke into a Virginia state Web site used by pharmacists to track prescription drug abuse. They deleted records on more than 8 million patients and replaced the site’s homepage with a ransom note demanding $10 million for the return of the...

North Korea upgrading cyberattack capabilities

From AFP Via Yahoo News The North Korean regime is in the process of building up its capabilities to launch offensive computer attacks, according to news reports out of South Korea. The reports say that North Korea is specifically strengthening its information warfare program with the intention o...

Benjamin Jun talks anti-counterfeiting

Benjamin Jun of Cryptography Research talks about anti-counterfeiting measures in embedded technology at RSA 2009. In this segment Jun talks about the dangers of criminal hackers abusing diabetes monitors...

Puerto Rico sites redirected in DNS attack

From CNet News Elinor Mills An attack on the main domain name system registrar in Puerto Rico led to the local Web sites of Google, Microsoft, Yahoo, Coca-Cola, and other big companies being redirected for a few hours on Sunday to sites that were defaced, according to security firm Imperva. Those...

SDP Downloader 2.3.0 (.ASX) Local Buffer Overflow Exploit (SEH)

Exploit for unknown platform in category local exploits =============================================================== SDP Downloader 2.3.0 .ASX Local Buffer Overflow Exploit SEH =============================================================== usage: exploit.py xNote: In this case we have the...

NetHoteles 2.03.0 - Authentication Bypass

NetHoteles 2.03.0 - Authentication Bypass NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX ---+-- Star --+--- Expl0!T -1- For...

NetHoteles 2.0/3.0 (Auth Bypass) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ NetHoteles 2.0/3.0 Auth Bypass SQL Injection Vulnerability ============================================================ NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team...

NetHoteles 2.0/3.0 - Authentication Bypass

NetHoteles v3.0 Auth Bypass Remote Sql Injecion -=Dns-Team Marocain Hackers=- Author: Dns-Team Contact: Q2atHoTmaildotFr Site: www.Scam4u.com + www.Dns-Team.com Greetz: M4n1x + Sa4d + HSMX + Stack + PR0H4CK3RZ + N@bilX ---+-- Star --+--- Expl0!T -1- For SuperAdmin : http://site.ir/superadmin...