Webkit (Apple Safari < 4.1.2/5.0.2 / Google Chrome < 5.0.375.125) - Memory Corruption

TITLE: WEBKIT APPLE SAFARI 4.1.2/5.0.2 & GOOGLE CHROME 5.0.375.125 MEMORY CORRUPTION VULNERABILITY TESTED OS: WINDOWS XP SP3 SEVERITY: HIGH CVE-NUMBER: CVE-2010-1813 DISCOVERED DATE: 2010-06-29 FIXED DATE: GOOGLE CHROME 2010-07-26 & APPLE SAFARI 2010-09-08 FIXED VERSIONS: GOOGLE CHROME 5.0.375.12...

Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion

Exploit for php platform in category web applications ================================================================== Multi-lingual E-Commerce System 0.2 Multiple Remote File Inclusion ================================================================== bug found by Jose Luis Gongora Fernandez...

AJ HYIP MERIDIAN SQL Injection

AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...

AJ HYIP MERIDIAN - 'news.php?id' Blind SQL Injection

AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...

AJ HYIP PRIME - 'welcome.php?id' Blind SQL Injection

AJ HYIP PRIME welcome.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - about AJ HYIP: AJ HYIP is a complete financial tool wit...

AJ HYIP PRIME - welcome.php?id Blind SQL Injection

AJ HYIP PRIME - welcome.php?id Blind SQL Injection AJ HYIP PRIME welcome.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - abou...

AJ HYIP MERIDIAN - news.php?id Blind SQL Injection

AJ HYIP MERIDIAN - news.php?id Blind SQL Injection AJ HYIP MERIDIAN news.php id Blind SQL Injection Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - site: http://www.ajsquare.com/products/ajhyip/index.php - abou...

Jose Nazario on Politically Motivated DDoS Attacks (Part 3)

In the third part of his talk on politically motivated DDoS attacks at the recent Kaspersky Lab Security Analyst Summit, Jose Nazario of Arbor Networks discusses the tactics and motivations for these attacks...

ActiveCollab 2.3.0 Directory Traversal / Local File Inclusion

============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity: 10/10 Base CVSS Score...

ActiveCollab 2.3.0 - Local File Inclusion Directory Traversal

ActiveCollab 2.3.0 - Local File Inclusion Directory Traversal ============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity:...

ActiveCollab 2.3.0 - Local File Inclusion / Directory Traversal

============================================================ PAINSEC SECURITY RESEARCH GROUP SECURITY ADVISORY 2010-001 - Original release date: June 24th, 2010 - Discovered by: Jose Carlos de Arriba dade at painsec dot com - Severity: 10/10 Base CVSS Score...

Jose Nazario on Politically Motivated DDoS Attacks (Part 2)

In the second part of his discussion on DDoS attacks at the Kaspersky Lab Security Analyst Summit in Cyprus, Jose Nazario of Arbor Networks delves into some of the statistics he has compiled on these attacks...

Jose Nazario on Politically Motivated DDoS Attacks (Part 1)

Jose Nazario of Arbor Networks gives a talk at the Kaspersky Lab Security Analyst Summit in Cyprus about the hype around cyberwar and the roots of politically motivated DDoS attacks and what they mean in today’s climate...

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting

SIESTTA 2.0 - Local File Inclusion Cross-Site Scripting SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn...

SIESTTA 2.0 - Local File Inclusion / Cross-Site Scripting

SIESTTA 2.0 LFI/XSS Multiple Vulnerabilities download: http://ramoncastro.es/siesttaold/ Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://www.hack0wn.com/ team: Spanish Hackers Team - SHT Hack0wn Security Project!! This was written for educational...

SA-CONTRIB-2010-034 - Internationalization - Cross Site Scripting

The Internationalization module enables translation of user defined strings using Drupal's locale interface. Some of these user defined strings have Input formats associated with them and some of the strings used for translating blocks were not properly filtered before display. Additionally all...

ALPHA CMS v3.2 &lt;= Local File Inclusion Vulnerability

fucking the Web Apps attack edition / / / / L /' / , / / /' , / /' /' / /' / / / / / / L / / / // // // ///////////L // ////// // // Hack0wn! Security Project / /&...

Simple Machines Forum (SMF) 1.1.8 - avatar Remote PHP File Execute

Simple Machines Forum SMF 1.1.8 - avatar Remote PHP File Execute Simple Machines Forum ------END----- cat hacks.txt Simple Machines Forum = 1.1.8 avatar rpfe PoC by Jose Luis Gongora Fernandez aka JosS ///vhosts/hack0wn.com/httpdocs/poc.php VICTIM: 88.25.92. info: Mozilla/5.0 X11; U; Linux i686;...

E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability

No description provided by source. E-topbiz Link ADS 1 PHP script linkid Blind SQL Injection Vulnerability url: http://e-topbiz.com/oprema/pages/linkads1.php Author: Jose Luis Gongora Fernandez 'aka' JosS mail: sys-projectathotmaildotcom site: http://hack0wn.com team: Spanish Hackers Team - SHT...

E-topbiz Link ADS 1 PHP script (linkid) Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ========================================================================= E-topbiz Link ADS 1 PHP script linkid Blind SQL Injection Vulnerability ========================================================================= E-topbiz Link ADS 1...