5838 matches found
Home Depot Hacked!
Looks like The Home Depot needs to turn their own ‘Doing Dials’ up a notch: the website of the home improvement retailer was compromised by a piece of hidden code that redirected browsers to a site infected with malware. By running the Google search for “home depot stair spindles,” Mark Baldwin o...
WikiLeaks Prompts Federal Agencies to Assess Infosec Programs for Sensitive Data
In response to the embarrassment and perceived threat resulting from the WikiLeaks disclosures in recent months, the Office of Management and Budget has issued a hefty memo with pages of questions that federal agencies must use to conduct an initial assessment of their programs to handle and...
Dissecting the ZeroAccess Rootkit
The ZeroAccess rootkit isn’t the most well-known or closely watched piece of malware in recent history, but, as an extremely detailed new analysis of the program shows, it is a perfect example of the kind of sophisticated malware that attack crews are using to maintain persistent, silent access t...
E-Smart Cart - SQL Injection
E-Smart Cart - SQL Injection ? ?????????????????????????In The Name Of Allah The Mercifull?????????????????????? ? Tybe:Auth Bypass Remote SQL Injection Vulnerability ? Vendor: www.preproject.com ? Software: E-SMARTCART ? ? author: R3d-D3v!L ? group: 4.!.5 ? Date: 18.dec.2009 ? T!ME: 05:00 pm ?...
Q&A: Bob Maley on Designing and Implementing a State-wide Security Program
Dennis Fisher: Welcome to the Digital Underground podcast. This is the first episode in what’s going to be a series of podcasts with CSOs from states around the country. We’re going to be discussing the unique challenges of running an InfoSec program in the public sector and what lessons enterpri...
Grestul SQL Injection
Grestul Sql Injection By Cookie bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.org Let's Go! \admin\login.php : $username = SafeAddSlashes$POST'username'; $passcode = SafeAddSlashesmd5$POST'passcode'; $time = time; $check = SafeAddSlashes$POST'setcookie'; $query = "SELECT...
Grestul 1.x - Cookie Authentication Bypass
Grestul 1.x - Cookie Authentication Bypass Grestul Sql Injection By Cookie bypass Autore: x0r Email: [email protected] Site: http://w00tz0ne.org Let's Go! \admin\login.php : $username = SafeAddSlashes$POST'username'; $passcode = SafeAddSlashesmd5$POST'passcode'; $time = time; $check =...
Evenzia CMS XSS
Application: Evenzia CMS Vendors Url: http://www.evenzia.com Bug Type: Cross-Site Script Exploitation: Remote Introduction: Evenzia CMS is a web-based CMS system Google Dork: "Powered By eVenzia CMS" || "Developed By eVenzia" PoC:...
CVE-2006-1496
CVE-2006-1496 describes multiple cross-site scripting (XSS) vulnerabilities in ViHor Design’s index.php. The vulnerability arises from the vulnerable page parameter being used in two ways: (1) as a remote URL supplied to fopen, and (2) as HTML or script content that is echoed back to the client i...
CVE-2001-1215
PFinger 0.7.5–0.7.7 is affected by a format-string vulnerability in .plan files that allows remote code execution. The issue arises from format specifiers used in a .plan, enabling an attacker to execute arbitrary code on affected systems. Affected component: PFinger (versions 0.7.5–0.7.7). Root ...
CVE-2001-1050
CVE-2001-1050 affects CCCSoftware CCC PHP script. The vulnerability arises from an HTTP request that sets the includedir variable, enabling remote attackers to include arbitrary files from remote web sites (remote file inclusion). The available documents do not specify affected versions, exact ro...
CVE-2001-0255
FaSTream FTP++ Server 2.0 is affected by a vulnerability where remote attackers can list arbitrary directories by issuing the ls command with a path containing a drive letter (e.g., C:). The entry indicates a remote access vector with low complexity and partial confidentiality impact (CVSS 2.0 ba...
CVE-2025-3460
creationtimestamp| type| source ---|---|--- 2000-12-31 23:00:00+00:00| seen| http://takeonme.org/cve/ 2025-06-08 18:58:51+00:00| seen| http://takeonme.org/cves/cve-2025-3460/ 2025-06-08 22:04:34+00:00| published-proof-of-concept| Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4 2025-06-08...
CVE-2000-1104
CVE-2000-1104 is a variant of the IIS Cross-Site Scripting vulnerability described in MS00-060 (CVE-2000-0746). The vulnerability affects Microsoft IIS 4.0 and 5.0, where a malicious site can embed scripts in a link to a trusted site, which are returned unquoted in an error message and executed i...
CVE-2000-0999
Technical details about CVE-2000-0999 are not provided in the connected documents. The initial description mentions format-string vulnerabilities in OpenBSD ssh but no affected versions, impact specifics, or remediation are given here. Monitor for updates.
CVE-2000-0176
The CVE-2000-0176 entry applies to Serv-U 2.5d and earlier, where the default configuration allows remote attackers to reveal the server’s real directory path by requesting a URL for a non-existent file/directory (path disclosure). Related connected sources also note potential additional issues i...
CVE-1999-0618
CVE-1999-0618 relates to the rexec/rexecd service being active. The provided sources identify rexecd as vulnerable due to weak authentication, enabling remote command execution with high impact (C/C/I/A = complete) and a CVSS v2 base score of 10.0 (network vector, low attack complexity, no auth)....