Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : sudo vulnerability (USN-1442-1)

It was discovered that sudo incorrectly handled network masks when using Host and HostList. A local user who is listed in sudoers may be allowed to run commands on unintended hosts when IPv4 network masks are used to grant access. A local attacker could exploit this to bypass intended access...

Veiss Web SQL Injection

Exploit Title: Veiss Web SQL Ýnjecktion Author: Th4 MasK Sofware Website : http://www.veiss.com/ Date : 30.04.2012 Platform : Php Test On : BackTrack 5 // Demo Site : http://www.alumafel.es/solucion.php?id=11 SQL Exploit ;...

DigitalDesign SQL Injection

Exploit Title: DigitalDesign SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://digitaldesign.ge/ Date : 17.03.2012 Platform : Php Demo Site : http://tlg.gov.ge/content.php?id=592SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Ne Kadar Efendi OLursa Ol, HAya...

Ac3-Distribution SQL Injection

Exploit Title: Ac3-Distribution SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://kws.koogar.org/ Date : 16.03.2012 Platform : Php Demo Site : http://www.paysan-breton.fr/article.php?id=3741SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Ne Kadar Efendi...

Tunisian Islamist Website Hacked by Anonymous

Tunisian Islamist Website Hacked by Anonymous The Facebook page of Hizb Ettahrir, an Islamist political party that is legally unrecognized in Tunisia, was hacked last night by a Tunisian group claiming affiliation with the international cyber activist collective Anonymous. "We are fighting you...

Iberianestates.com Cross Site Scripting

Exploit Title: iberianestates.com Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.iberianestates.com Date : 03.03.2012 Platform : Php Demos Site : http://www.iberianestates.com/details.php?id="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce...

09so Cross Site Scripting

Exploit Title: 09so Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.09so.com Date : 02.03.2012 Platform : Php Demos Site : http://www.09so.com/s.php?key="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

Zerecords SQL Injection

Exploit Title: ZERECORDS SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website:http://www.zerecords.com/new/ Date : 24.02.2012 Platform : Php Demos Site : http://www.zerecords.com/onlineshop/items.php?id=1SQL Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

dns-client-subnet-scan NSE Script

Performs a domain lookup using the edns-client-subnet option which allows clients to specify the subnet that queries supposedly originate from. The script uses this option to supply a number of geographically distributed locations in an attempt to enumerate as many different address records as...

SICT SQL Injection

Exploit Title: SICT SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.sict.gov.bd/ Date : 19.02.2012 Platform : Php Demos Site : http://www.mocat.gov.bd/personnel.php?id=1'27a Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Bazi seyler...

WebTriad SQL Injection

Exploit Title: WebTriad SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.webtriad.com.br/ Date : 19.02.2012 Platform : Php Demo Site : http://revistafocus.com/municipios.php?id=44SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Bazi...

TOIPKRO SQL Injection

Exploit Title: TOIPKRO SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website: http://edu.tomsk.ru/ Date : 14.02.2012 Platform : Php Demos Site : http://edu.tomsk.ru/works/works.php?id=11138SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Baz...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

MaDVideO SQL Injection

Exploit Title: MaDVideO SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: vismadvideo.php?id= Demo Site : http://www.maduniverset.dk/vismadvideo.php?id=59 SQL Bilinmezlik Diyari Olmassa Olmazýmdýr. Bazi seyler. Email:[email protected]...

Logement Laval SQL Injection

Exploit Title: Logement Laval SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 04.01.2012 Platform : Php Google Dork: logementlavallocation.php?id= Demo Site : hhttp://www.meduane-habitat.fr/logementlavallocation.php?id=131SQL Panel = http://localhost/admin ÞÝfre Ve Ad =...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Faculte SQL Injection

Exploit Title: Faculte SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 13.12.2011 Platform : Php Google Dork: facultymem.php?id= Demos Site : http://tarc.med.unc.edu/facultymem.php?id=9SQL http://www.uncioa.org/uncaging/person.asp?personID=25' Bilinmezlik Diyarý Olmassa...

Immobili SQL Injection

Exploit Title: Ýmmobili SQL Injection Google Dork: inurl:"immobilidettaglio.php?id=" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://www.simimmobiliare.it/ita/immobilidettaglio.php?contratto=0%27a...

View Article Blind SQL Injection

Exploit Title: View Article Blind SQL Injection Google Dork: inurl:"viewarticle.php?id" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://alcazarmountain.com/viewarticle.php?id=1'a http://www.plwa.org/viewarticle.php?id=65'a http://www.uset.org/viewarticle.php?id=325'a Land of...