Scientific Linux Security Update : dhcp on SL4.x, SL5.x, SL6.x i386/x86_64

The Dynamic Host Configuration Protocol DHCP is a protocol that allows individual devices on an IP network to get their own network configuration information, including an IP address, a subnet mask, and a broadcast address. Two denial of service flaws were found in the way the dhcpd daemon handle...

Lefigaro.fr Cross Site Scripting

Exploit Title: Lefigaro.Fr Cross Site Scripting Author: Th4 MasK Software Link: http://www.lefigaro.fr Date : 27.06.2012 Platform : Php Tested On : Windows Demo Site : http://www.lefigaro.fr/palmares-lycees/recherche.php?etab="alert'Th4MasK' Special Thanks : Mugair Greetz:...

Anonymous takes down MTNL website

Anonymous India takes down MTNL website The hacker-group Anonymous has struck again in India. This time the victim is the MTNL website. The group posted on their website, saying, "We are against Internet Cencorship. Instead of blocking few URLs the ISP blocked the whole domain of various file...

Ubuntu 8.04 LTS / 10.04 LTS / 11.04 / 11.10 / 12.04 LTS : sudo vulnerability (USN-1442-1)

It was discovered that sudo incorrectly handled network masks when using Host and HostList. A local user who is listed in sudoers may be allowed to run commands on unintended hosts when IPv4 network masks are used to grant access. A local attacker could exploit this to bypass intended access...

Veiss Web SQL Injection

Exploit Title: Veiss Web SQL Ýnjecktion Author: Th4 MasK Sofware Website : http://www.veiss.com/ Date : 30.04.2012 Platform : Php Test On : BackTrack 5 // Demo Site : http://www.alumafel.es/solucion.php?id=11 SQL Exploit ;...

DigitalDesign SQL Injection

Exploit Title: DigitalDesign SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://digitaldesign.ge/ Date : 17.03.2012 Platform : Php Demo Site : http://tlg.gov.ge/content.php?id=592SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Ne Kadar Efendi OLursa Ol, HAya...

Ac3-Distribution SQL Injection

Exploit Title: Ac3-Distribution SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://kws.koogar.org/ Date : 16.03.2012 Platform : Php Demo Site : http://www.paysan-breton.fr/article.php?id=3741SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Ne Kadar Efendi...

Tunisian Islamist Website Hacked by Anonymous

Tunisian Islamist Website Hacked by Anonymous The Facebook page of Hizb Ettahrir, an Islamist political party that is legally unrecognized in Tunisia, was hacked last night by a Tunisian group claiming affiliation with the international cyber activist collective Anonymous. "We are fighting you...

Iberianestates.com Cross Site Scripting

Exploit Title: iberianestates.com Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.iberianestates.com Date : 03.03.2012 Platform : Php Demos Site : http://www.iberianestates.com/details.php?id="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce...

09so Cross Site Scripting

Exploit Title: 09so Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.09so.com Date : 02.03.2012 Platform : Php Demos Site : http://www.09so.com/s.php?key="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

Zerecords SQL Injection

Exploit Title: ZERECORDS SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website:http://www.zerecords.com/new/ Date : 24.02.2012 Platform : Php Demos Site : http://www.zerecords.com/onlineshop/items.php?id=1SQL Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

dns-client-subnet-scan NSE Script

Performs a domain lookup using the edns-client-subnet option which allows clients to specify the subnet that queries supposedly originate from. The script uses this option to supply a number of geographically distributed locations in an attempt to enumerate as many different address records as...

SICT SQL Injection

Exploit Title: SICT SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.sict.gov.bd/ Date : 19.02.2012 Platform : Php Demos Site : http://www.mocat.gov.bd/personnel.php?id=1'27a Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Bazi seyler...

WebTriad SQL Injection

Exploit Title: WebTriad SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.webtriad.com.br/ Date : 19.02.2012 Platform : Php Demo Site : http://revistafocus.com/municipios.php?id=44SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Bazi...

TOIPKRO SQL Injection

Exploit Title: TOIPKRO SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website: http://edu.tomsk.ru/ Date : 14.02.2012 Platform : Php Demos Site : http://edu.tomsk.ru/works/works.php?id=11138SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Baz...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

MaDVideO SQL Injection

Exploit Title: MaDVideO SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: vismadvideo.php?id= Demo Site : http://www.maduniverset.dk/vismadvideo.php?id=59 SQL Bilinmezlik Diyari Olmassa Olmazýmdýr. Bazi seyler. Email:[email protected]...

Logement Laval SQL Injection

Exploit Title: Logement Laval SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 04.01.2012 Platform : Php Google Dork: logementlavallocation.php?id= Demo Site : hhttp://www.meduane-habitat.fr/logementlavallocation.php?id=131SQL Panel = http://localhost/admin ÞÝfre Ve Ad =...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...