CVE-2011-3264

CVE-2011-3264 affects Zabbix prior to 1.8.6, where an invalid srcfld2 parameter to popup.php can disclose the installation path via an error message. This vulnerability is documented across multiple sources (NVD, OSV, OpenVAS/Nessus entries) with the same description. The issue is an information ...

#OpBart : BART Police database hacked by Anonymous

OpBart : BART Police database hacked by Anonymous A database belonging to the BART Police Officers Association appears to have been hacked by Anonymous Hackers and the names, postal and email addresses of officers posted online HERE. Some say it was Anonymous, some say it was a n00b mademoiselle...

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection

Contrexx ShopSystem 2.2 SP3 - catId Blind SQL Injection !/usr/bin/php ?php / Exploit title: Contrexx Shopsystem Blind SQL Injection Exploit Exploit written by: Penguin Exploit: index.php?section=shop&catId=VALID categoryid and YOUR BLIND SQL CODE Exploit tested on: Debian 6, Ubuntu Linux 11.04...

[SECURITY] Fedora 14 Update: glpi-pdf-0.7.2-1.fc14

This GLPI plugin enables you to print, in pdf format, the information sheet of an equipment or a software of the inventory...

Welt.de hacked - Credit Card info of 30264 users Compromised

Welt.de hacked - Credit Card info of 30264 users Compromised Welt.de hacked using an SQL Injection https://boot24.welt.de/indexwelt..php?ac =. The Hacker was deeply penetrate into the infrastructure of the Website and copy number information from the database of MySQL. He has published the links ...

CVE-2011-3124

IBM InfoSphere Information Server 8.5 and 8.5.0.1 on Unix/Linux (as used in IBM InfoSphere DataStage 8.5/8.5.0.1) is affected by CVE-2011-3124, which assigns incorrect ownership to unspecified files, enabling local privilege escalation. The Red Hat/NVD entries confirm the affected product, but do...

Taoyuan Network Hard Drive&IIS6. 0 parsing vulnerability and the Fix-vulnerability warning-the black bar safety net

IIS6. 0 filename parsing vulnerability, as long as the use IIS6. 0 of Taoyuan Network Hard Drive to upload a php Trojan:1 2 3;asp;123.jpg that Then through the show. aspx? type=1&filepath=http://www. badguest. cn/the method takes a file path, The last to perform, you can. Repair: frequently asked...

CVE-2011-2784

CVE-2011-2784 concerns Google Chrome prior to 13.0.782.107, where a request for the GL program log could disclose a local file path in an unspecified log entry. The connected OpenVAS/Nessus entries group this with multiple Chrome vulnerabilities around the same era, but no explicit remediation ve...

Rebound SQL Injection / Local File Inclusion

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : 1337day.com 0 1 + Support e-mail :...

Houben figure enterprise website system cookies injection-vulnerability warning-the black bar safety net

Based on asp+access corporate website source code, database has been provided with an anti-download the site more secure. To modify a site, custom your own to the page, and landscaping page is your own complete, website source code program is complete, the background powerful. Source code downloa...

Period-rich ultra-personal website system guestbook write horse vulnerability-vulnerability warning-the black bar safety net

Source code download: http://www.mycodes.net/24/2149.htm addgbook. asp to submit a word. Connection: google:as anti-batch, Tello is!...

Change.Gov Donor List 2010 leaked by #Antisec

Change.Gov Donor List 2010 leaked by Antisec Anonymous Hackers today leak the list of 60804 Donors to Change.Gov via Twitter tweets. The list is uploaded on Mediafire Link. The data contains the Name, Employee,City, State, Zip and Donated Amount in a CSV file. Yesterday 300 Military and Governmen...

CVE-2011-1356

IBM WebSphere Application Server 6.1 is vulnerable before 6.1.0.39 and WebSphere 7.0 is vulnerable before 7.0.0.19. A local attacker can craft an Administration Console request to obtain sensitive stack-trace information. Affected versions: WAS 6.1 (<6.1.0.39) and WAS 7.0 (

Deep throat cms file include vulnerability resulting database disclosure-vulnerability warning-the black bar safety net

Due to the presence of a file containing a vulnerability, the result can bypass the backstage access restrictions and the access to some page Detail Code Description: $controller=ABSPATH.'/ content/'.$ params'model'.'/ index.php'; //die$controller; //Load call tag iffileexistsABSPATH.'/...

osCommerce Remote Edit Site Info Vulnerability

Exploit for php platform in category web applications Exploit Title:osCommerce Remote Edit Site Info Vulnerability Date: 10/7/2011 Author: Angel Injection home Page: http://www.club-h.co.cc Email: Angel-InjectionathotmailDotcom Vendor or Software Link: www.oscommerce.com Version: N/A Category::...

Hellenic Parliament ( Greek ) Websites hacked, Database Leaked !

Hellenic Parliament Greek Websites hacked, Database Leaked ! A hacker today hacked into the website of Hellenic Parliament Greek at & Leak some User/Login info at Pastie . He Name it the "REAL DEMOCRACY REVERSE ENGINEERING". The file contains Web.config file info also : Reason of Hack as mentione...

phpMyAdmin3 (pma3) - Remote Code Execution

phpMyAdmin3 pma3 - Remote Code Execution !/usr/bin/env python coding=utf-8 pma3 - phpMyAdmin3 remote code execute exploit Author: wofeiwo Thx Superhei Tested on: 3.1.1, 3.2.1, 3.4.3 CVE: CVE-2011-2505, CVE-2011-2506 Date: 2011-07-08 Have fun, DO NOT USE IT TO DO BAD THING. Requirements: 1. "confi...

Milk tea franchise website source code 1.0 injection vulnerabilities+Backdoor-vulnerability warning-the black bar safety net

by Mr. DzY Default background:admin/adminlogin. asp 下载 :http://www.mycodes.net/25/4540.htm exp: union select 1,txqpass,3,4,5,txqname,7,8,9 from admin test: http://localhost/brand.asp?aflid=1 union select 1,txqpass,3,4,5,txqname,7,8,9 from admin The back door:...

Portech MV-372 Denial Of Service / Bypass

Portech MV-372 Mobile VoIP Multiple Vulnerabilities 1. Description Multiple vulnerabilities have been found in Portech MV-372 Mobile VoIP Gateway which allows an attacker to compromise the device and/or initiate a denial of service attack against it’s telnet service. The ’Device details’ section...

Disqus Script SQL Injection

Exploit Title: Disqus Script SQL Injection Vulnerability Google Dork: Powered by Disqus Date: 01/07/2011 Author: Lazmania61 Demo : http://www.preveza-info.gr Tested on: Windows 7 Greetz; HeRoTuRK - DarkKnigT - Code Hunters Members...