Pak Cyber Army Site Hacked by TriCk ( TeaMp0isoN )

Pak Cyber Army Site Hacked by TriCk TeaMp0isoN TeaMp0isoN Hack Pakistan cyber army website ie. https://pakcyberarmy.net Its a 'Name Server Hijack' Hack, After that PCA site is down ! Zone-H mirror : News Source : TeamPoison...

CVE-2011-0643

Cross-site request forgery CSRF vulnerability in admin/confusersedit.php in PHP Link Directory phpLD 4.1.0 allows remote attackers to hijack the authentication of administrators for requests that add an administrator via the N action...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that 1 change user status via admin/customers.php or 2 change user permissions via admin/accounting.php. NOTE: so...

CVE-2011-0503

Cross-site request forgery CSRF vulnerability in VaM Shop 1.6, 1.6.1, and probably earlier versions allows remote attackers to hijack the authentication of administrators for requests that 1 change user status via admin/customers.php or 2 change user permissions via admin/accounting.php. NOTE: so...

CVE-2011-0503

CVE-2011-0503 is a CSRF in VaM Shop (versions 1.6, 1.6.1 and likely earlier) where requests from an authenticated admin could change user status (admin/customers.php) or modify user permissions (admin/accounting.php). The root cause is insufficient validation of the request origin in several admi...

Exclusive Interview with TiGER-M@TE (Bangladesh Google website Hacker)

Update : Latest Hack by TiGER-M@TE : 700,000 sites on Inmotion Hosting Server hacked in one shot On the morning of Saturday, Jan 8, 2011 the biggest news of cyber world was - Google Bangladesh website Google.com.bd Hacked by TiGER-M@TE . TiGER-M@TE is a Bangladeshi Hacker, He was already connecte...

Concave Yaya 4. 7 and following versions through the kill EXP-vulnerability warning-the black bar safety net

Description: 0. google : inurl:/otype. asp? classid= 1. Type the destination Station, no accident words will you wait a while,because you want to and other script timeout error,is recommended to drink tea. 2. Then the address bar type the following code, The JavaScript hijack it. 3. Refresh once,...

CVE-2010-4499

Session fixation vulnerability in Collaborative Information Manager server, as used in TIBCO Collaborative Information Manager before 8.1.0 and ActiveCatalog before 1.0.1, allows remote attackers to hijack web sessions via unspecified vectors...

Ace Video Workshop 1.2.0.0 DLL Hijack

Ace video workshop 1.2.0.0 - dll hijacking vulnerability software : acevw - www.radsoftwareteam.com Version: 1.2.0.0 author : d3c0der - [email protected] website : www.attackerz.ir Operating System : Windows XP Version 5.1 Service Pack 3 date : 3\1\2011 file : Acevw.exe Vulnerable dll :...

Outlook 6.0.2900.5508 DLL Hijack

outlook 6.0.2900.5508 dll hijacking vulnerability software : outlook - http://www.microsoft.com version : 6.0.2900.5508 author : d3c0der - [email protected] website : www.attackerz.ir Operating System : Windows XP Version 5.1 Service Pack 3 date : 2\1\2011 in Application Path: C:\Program...

ImgBurn 2.4.0.0 DLL Hijack

ImgBurn 2.4.0.0 dll hijack vulnerability date : 2\1\2011 software : http://www.imgburn.com author : d3c0der - [email protected] website : www.attackerz.ir Operating System: Windows XP Version 5.1 Service Pack 3 Application: ImgBurn.exe Vulnerable dll : dwmapi.dll include define DllExport declsp...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in usercp2.php in MyBB aka MyBulletinBoard before 1.4.12 allows remote attackers to hijack the authentication of unspecified victims via unknown vectors...

Babil CMS Insecure Cookie Handling

=================================================== Babilcms Exploit database separated by exploit 3 3 type local, remote, DoS, etc. 3 7 7 1 + Site : 1337db.com 1 3 + Support e-mail : submitat1337db.com 3 3 3 7 7 1 I'm KnocKout 1337 Member from 1337 DataBase 1 3 3 3 3...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...

CVE-2010-4519

Multiple cross-site request forgery CSRF vulnerabilities in the Views UI implementation in the Views module 5.x before 5.x-1.8 and 6.x before 6.x-2.11 for Drupal allow remote attackers to hijack the authentication of administrators for requests that 1 enable all Views or 2 disable all Views...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

CVE-2010-3449

Cross-site request forgery CSRF vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 through 1.2.2, and 1.3 through 1.3.1; and Apache Continuum 1.3.6, 1.4.0, and 1.1 through 1.2.3.1; allows remote attackers to hijack the authentication of...

JBoss EAP jmx console FileDeployment CSRF

Cross-site request forgery CSRF vulnerability in the JMX Console in Red Hat JBoss Enterprise Application Platform aka JBoss EAP or JBEAP 4.3 before 4.3.0.CP09 allows remote attackers to hijack the authentication of administrators for requests that deploy WAR files...

SQL Injection in Enano CMS

Vulnerability ID: HTB22709 Reference: http://www.htbridge.ch/advisory/sqlinjectioninenanocms.html Product: Enano CMS Vendor: enanocms.org http://enanocms.org/ Vulnerable Version: 1.1.7pl1 Vendor Notification: 16 November 2010 Vulnerability Type: SQL Injection Status: Fixed by Vendor Risk level:...

Image Of the Day: The Internet Hijack That Wasn't?

Reports surfaced last week about an incident dating back to April, 2010 that involved the suspicious rerouting of Internet traffic through infrastructure belonging to a telecommunications carrier in China. Originally reported within technical circles in April, the incident simmered within the sma...