SICT SQL Injection

Exploit Title: SICT SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.sict.gov.bd/ Date : 19.02.2012 Platform : Php Demos Site : http://www.mocat.gov.bd/personnel.php?id=1'27a Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Bazi seyler...

WebTriad SQL Injection

Exploit Title: WebTriad SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.webtriad.com.br/ Date : 19.02.2012 Platform : Php Demo Site : http://revistafocus.com/municipios.php?id=44SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Bazi...

TOIPKRO SQL Injection

Exploit Title: TOIPKRO SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website: http://edu.tomsk.ru/ Date : 14.02.2012 Platform : Php Demos Site : http://edu.tomsk.ru/works/works.php?id=11138SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Baz...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

MaDVideO SQL Injection

Exploit Title: MaDVideO SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: vismadvideo.php?id= Demo Site : http://www.maduniverset.dk/vismadvideo.php?id=59 SQL Bilinmezlik Diyari Olmassa Olmazýmdýr. Bazi seyler. Email:[email protected]...

Logement Laval SQL Injection

Exploit Title: Logement Laval SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 04.01.2012 Platform : Php Google Dork: logementlavallocation.php?id= Demo Site : hhttp://www.meduane-habitat.fr/logementlavallocation.php?id=131SQL Panel = http://localhost/admin ÞÝfre Ve Ad =...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Faculte SQL Injection

Exploit Title: Faculte SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 13.12.2011 Platform : Php Google Dork: facultymem.php?id= Demos Site : http://tarc.med.unc.edu/facultymem.php?id=9SQL http://www.uncioa.org/uncaging/person.asp?personID=25' Bilinmezlik Diyarý Olmassa...

Immobili SQL Injection

Exploit Title: Ýmmobili SQL Injection Google Dork: inurl:"immobilidettaglio.php?id=" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://www.simimmobiliare.it/ita/immobilidettaglio.php?contratto=0%27a...

View Article Blind SQL Injection

Exploit Title: View Article Blind SQL Injection Google Dork: inurl:"viewarticle.php?id" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://alcazarmountain.com/viewarticle.php?id=1'a http://www.plwa.org/viewarticle.php?id=65'a http://www.uset.org/viewarticle.php?id=325'a Land of...

Ficha Blind SQL Injection

Exploit Title: Ficha Blind SQL Injection Google Dork: inurl:"ficha.php?id=" Author: Th4 MasK Tested on: Apache/2.3.3 Date :09.12.2011 Platform : Php Demos Site : http://www.nibbledpencil.com/ficha.php?id=336'a http://www.eurozinco.com/en/ficha.php?id=11'a...

#OccupyLondon : The Night of Thousand Masks on 5th November

OccupyLondon : The Night of Thousand Masks on 5th November Anonymous Mask = "A symbol that unites them behind one universal message " . Activists plan to protest on 5th November ,2011 at Saint Pauls Cathedral London 9:00pm - 11:00pm. This going to be "The Night of Thousand Masks ". Message By...

NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption

======= Summary ======= Name: Lumension Device Control formerly Sanctuary remote memory corruption Release Date: 24 August 2011 Reference: NGS00054 Discoverer: Andy Davis [email protected] Vendor: Lumension Vendor Reference: Systems Affected: Lumension Device Control v4.4 SR6 Risk: High...

Tinyproxy 'conf.c'整数溢出安全绕过漏洞

Bugtraq ID: 47715 CVE ID：CVE-2011-1499 Tinyproxy是一个小型的基于GPL的HTTP/SSL代理程序。 Tinyproxy在子网掩码生成实现上存在一个错误，当配置允许网络段时如"Allow 192.168.0.0/24"相对与默认的"Allow 127.0.0.1"，会允许任意IP地址连接，使其成为一个开放代理。如果配置使用一个或多个使用IP段的Allow语句，就会发生这种情况。 Banu Systems Private Limited Tinyproxy 1.8.2 厂商解决方案 Tinyproxy 1.8.3已经修复此漏洞，建议用户下载使用...

FreeBSD mountd protection bypass

Network mask in ACLs is computed incorrectly...

Operation Tequila - Anonymous Hackers New target for Saturday, EXAfm.com !

Operation Tequila - Anonymous Hackers New target for Saturday, EXAfm.com ! Citizens of the world: Tequila is not finished... Following the OpTequila, Anonymous has decided to support the protests that are going on February 12th in Mexico DF against the censoring measures taken by MVS and Mexican...

Microsoft ASP.NET - Auto-Decryptor File Download (MS10-070)

Microsoft ASP.NET - Auto-Decryptor File Download MS10-070 !/usr/bin/ruby -w aspxadchotextattack.rb Copyright c 2010 AmpliaSECURITY. All rights reserved http://www.ampliasecurity.com Agustin Azubel - [email protected] MS10-070 ASPX proof of concept Decrypt data using an auto decryptor...

/kernel/security/CVE-2006-0742 test cause kernel-xen panic on ia64

arch/ia64/xen/faults.c in Xen 3.4 and 4.0 in Linux kernel 2.6.18, and possibly other kernel versions, when running on IA-64 architectures, allows local users to cause a denial of service and "turn on BE by modifying the user mask of the PSR," as demonstrated via exploitation of CVE-2006-0742...

kernel security and bug fix update

2.6.9-89.0.23.0.1 - XEN fix cpu hotplug crash Joe Jin orabug 7521308 - XEN Bring up vcpus before khelper init Joe Jin orabug 7521308 - XEN flush the tlb cache immediately Dave McCracken, Scott Shi orabug 9138767 - fix skb alignment that was causing sendto to fail with EFAULT Olaf Kirch orabug...