D-Link DIR-605 - Cross-Site Request Forgery

Exploit Title: D-Link DIR-605 CSRF Vulnerability Date: 20-03-2012 Author: iqzer0++ Version: Firmware Version : 2.00 Tested on: DIR-605 This allows unauthroized access to the device and post injections document.bypass.submit;...

YVS Image Gallery Sql injection

-=--------------------ADVISORY-------------------=- YVS Image Gallery Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: YVS Image Gallery -=+ Version: 0.0.0.1 -=+ Vendor's URL: http://yvs.vacau.com/gallery.html -=+ Platform:...

Multiple SQL injections in rivettracker <=1.03

Exploit Title: Multiple SQL injections in rivettracker =1.03 Date: 2/3/2012 Author: Ali Raheem Software Link: http://www.rivetcode.com/software/rivettracker/ Version: =1.03 Tested on: Linux guruplug-debian 3.1.7 2 PREEMPT Tue Jan 3 20:19:54 MST 2012 armv5tel GNU/Linux Greets: spyware, dividead...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Fake Antivirus Lives On, Now Infecting 200K WordPress Pages

A new series of mass-injections have been targeting WordPress sites as of late and appear to have already infected more than 200,000 web pages according to a report on Websense’s Security Labs blog earlier this week. The injections lead unsuspecting users to a bogus AV site that appears to perfor...

Rogue Antivirus advertised on 200000 hacked Web pages

Rogue Antivirus advertised on 200000 hacked Web pages The Websense has detected a new wave of mass-injections of a well-known rogue antivirus campaign, a new mass injection attack has infected over 200,000 Web pages, amounting to close to 30,000 unique Web hosts. The attack uses SQL injection...

Rivettracker 1.03 - Multiple SQL Injections

Rivettracker 1.03 - Multiple SQL Injections Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames fo...

Rivettracker 1.03 - Multiple SQL Injections

Exploit Title: Multiple SQL injections in rivettracker =5.3.4 and backports we still have arbitary SQL queries but no config.php. config.php contains passwords and usernames for admin, user and mysql database. Other fil...

Fake Chat Screen Malware Hijacks Banking Customers

A new attack against online banking customers uses a malware platform to trick its victims into verifying bogus transactions. The attack, first described by Trusteer CTO Amit Klein, waits for an unsuspecting business banking customer to log online before telling them that “security checks” need t...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Joomla! Component com_bbs - Multiple SQL Injections

source: https://www.securityfocus.com/bid/51730/info The 'combbs' component for Joomla! is prone to multiple remote SQL-injection vulnerabilities. A successful exploit may allow an attacker to compromise the application, access or modify data, or exploit latent vulnerabilities in the underlying...

Joomla! Component com_products - Multiple SQL Injections

Joomla! Component comproducts - Multiple SQL Injections source: https://www.securityfocus.com/bid/51674/info The 'comproducts' component for Joomla! is prone to multiple SQL-injection vulnerabilities because it fails to sufficiently sanitize user-supplied data before using it in an SQL query...

Peel Shopping 2.8 2.9 - Cross-Site Scripting SQL Injections

Peel Shopping 2.8 2.9 - Cross-Site Scripting SQL Injections +-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link :...

Peel Shopping 2.8/ 2.9 - Cross-Site Scripting / SQL Injections

+-------------------------------------------------------------------------+ Exploit Title : Peel SHOPPING - version 2.8 and version 2.9 xss/sql inject Vulnerability version : v2.9 Author : Cyber-Crystal Date : n/a Software Link : http://www.peel.fr/ || or...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...