Joomla "com_msg" component SQL Injection

Exploit for php platform in category web applications Exploit Title: Joomla "commsg" component SQL Injection Date: 16.01.2012 Author: Ereee Version: all Category:: remote, webapps Google dork: inurl:"?option=commsg" Tested in: web...

Losing The Cops In A Foot Chase? There's An App For That

Law enforcement officials in Maryland have issued a warning about the increasing use of smart phones and Web based services to listen in on law enforcement radio transmissions. Gang members, officials warn, are using the smart phone apps to get a jump on enforcement efforts and, in at least one...

immediaC CMS SQL Injection

Exploit Title: immediaC CMS SQL Injection Vulnerabilitiy Google Dork: "Powered by immediaC" Date: 4/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Software Link: www.immediac.com Version: All Version Category:: webapps Security Risk:: High Tested on:...

WordPress LivePHP Cross Site Scripting

Exploit Title: Wordpress wp-livephp plugin Cross-Site Scripting Vulnerability Google Dork: "Powered by Wordpress" Date: 25/12/2011 Author: H4ckCity Security Team Discovered By: Am!r IrIsT Home: WwW.H4ckCity.Org Software Link: http://wordpress.org/extend/plugins/wp-livephp/ Version: All Version...

FlirtPortal SQL Injection

Exploit Title: FlirtPortal SQL Injection Vulnerability Date: 17/12/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.scripte24shop.de/demo/flirtportal Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r , CeWahir , Bug Researchers Members...

1.8 Million Accounts Hacked from Square Enix Japanese Game Company

1.8 Million Accounts Hacked from Square Enix Japanese Game Company Square Enix stated yesterday that somebody "may have gained unauthorized access to a particular Square Enix server" and took its members service offline in both Japan and the U.S. Today, the company clarified that 1.8 million...

Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress pretty-link plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. ISlamic Republic Of IRan Security Team http://irist.ir/forum/ Wordpress pretty-link.1.5.2 plugin Cross-Site Scripting Vulnerabilities...

Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress meenews 5.1 plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities Download......:...

Windows Gather Enumerate Domain Admin Tokens (Token Hunter)

This module enumerates Domain Admin account processes and delegation tokens. This module will first check if the session has sufficient privileges to replace process level tokens and adjust process quotas. The SeAssignPrimaryTokenPrivilege privilege will not be assigned if the session has been...

Let's Play a Game of Cyber Security at CSAW CTF 2011

Let's Play a Game of Cyber Security at CSAW CTF 2011 Ready for a little game of capture the flag? What if you weren't running around a field like a crazy person trying to grab a flag out of someone's belt, but instead were navigating around a network overcoming technical challenges to find marker...

CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

DEBIAN-CVE-2011-3207

crypto/x509/x509vfy.c in OpenSSL 1.0.x before 1.0.0e does not initialize certain structure members, which makes it easier for remote attackers to bypass CRL validation by using a nextUpdate value corresponding to a time in the past...

CVE-2010-4835

Directory traversal vulnerability in index.php in OneOrZero AIMS 2.6.0 Members Edition allows remote authenticated users to read arbitrary files via directory traversal sequences in the controller parameter in a showreport action...

CVE-2010-4835

CVE-2010-4835 is a directory traversal vulnerability in OneOrZero AIMS 2.6.0 Members Edition. The flaw resides in index.php, where the controller parameter in a show_report action can be manipulated to read arbitrary files. This is a vulnerability in the web application that could allow remote au...

Jcow Social Networking Script 4.2 <= 5.2 Arbitrary Code Execution

Exploit for php platform in category web applications Exploit Title: Jcow CMS 4.x:4.2 Software Link: http://sourceforge.net/projects/jcow/files/jcow4/jcow.4.2.1.zip/download Version: 4.x:4.2 5.6.7.8:34441 at Sat Jun 04 00:00:44 +0000 2011 require 'msf/core' class Metasploit3 'JCow CMS Remote...

Defence.pk Gets Hacked pr0tect0r A.K.A. mrNRG

Defence.pk Gets Hacked pr0tect0r A.K.A. mrNRG Defence.pk An independent defence organization committed to the research and analysis of Pakistan's security and strategic affairs Hacked by Indian Hacker pr0tect0r A.K.A. mrNRG. Defence.PK, one of the largest and most active Pakistani forum on...

SiteGenius - Blind SQL Injection

===================================================== SiteGenius Blind SQL injection vulnerability ===================================================== Exploit title : SiteGenius Blind SQL injection vulnerability Date : 02 \ 08 \ 2011 Author : AutoRUN & dR.sqL Home : HackForums.AL ,...

English Defence League Facebook Page Deleted & Members Mobile Numbers Leaked

English Defence League Facebook Page Deleted & Members Mobile Numbers Leaked TeaMp0isoN Hacking Crew Hack and Delete Official Facebook page of English Defence League was on . Also TeaMp0isoN Leaks the Phone numbers of Members of English Defence League via a pastie link. Screenshot of the Numbers...

Epiplopoios.gr SQL Injection

Exploit Title: Epiplopoios.gr SQL Injection Vulnerability Google Dork: intext:Powered by Epiplopoios.gr Date: 14/07/2011 Author: Lazmania61 | Bug Researchers Demo : http://www.mostra-kouzina.gr/ Tested on: Windows 7 Greetz : HeRoTuRk ,Err0r, Darkknight , Bug Researchers Members...

Badoo.com Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %+++++++++++++++++++++++++++++ +++++++++++ Exploit Title :Badoo persistent XSS vulnerability Vendor: www.badoo.com Author: $4d0//r007k17 a.k.a Raghavendra Karthik D Blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2006–2011...