BlackBerry Z10 Privilege Escalation Vulnerability

BlackBerry Z10 users should be aware that there is a privilege escalation vulnerability. The vulnerability potentially allows a hacker to modify or edit data on a stolen BlackBerry Z10 smartphone with BlackBerry Protect enabled, identified as BSRT-2013-006 CVE-2013-3692 According to the...

PHP Ticket System Beta 1 - Cross-Site Request Forgery

Exploit Title : php ticket system csrf 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = BETA 1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explorer 9. + Details: Reset admin password via CSRF 10. + Vendor:...

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery

AfterLogic WebMail Lite PHP 7.0.1 - Cross-Site Request Forgery 1. 2. 3. + Exploit Title : AfterLogic WebMail Lite PHP CSRF 4. + Author : Pablo '7days' Riberio 5. + Team: So Good Security 6. + Other 0days : http://pastebin.com/u/7days 7. + Version : = 7.0.1 8. + Tested on : windows/internet explor...

Drupal resets 1 Million Passwords after Data Breach

A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...

Drupal resets 1 Million Passwords after Data Breach

A Drupal data breach was announced by the official Drupal Association, that Passwords for almost one million accounts on the Drupal.org website are being reset after hackers gained unauthorized access to sensitive user data. The security of the open source content management system has been...

Drupal.org Resets Passwords After Data Breach

The Drupal Association is urging all users of Drupal.org and groups.drupal.org to reset their passwords after discovering an intrusion that breached files holding usernames, e-mail addresses, countries and hashed passwords. Sites that run on Drupal do not appear to be impacted, though the...

ecshop一处设计缺陷可以被二次利用

简要描述： ecshop一处设计缺陷导致可以被二次利用。关于管理员密码那些事。 详细说明： 本文前提 已经获得管理员密码的MD5！ 不知道从那个版本开始ec管理员密码加密方式发生了一些变化 $ecsalt=rand1,9999; md5md5$pwd.$ecsalt; 对于通过注入得到md5的兄弟们标识压力山大啊！爆破无望。 不过。。ec后台的找回密码给了大家希望。 这个Bug 很明显 可能已经被长期利用 下面看代码 admin/getpassword.php 138行 / 验证新密码，更新管理员密码 / elseif !empty$POST'action' && $POST'actio...

HP LaserJet Pro P1606dn Password Reset

!/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware Date: 20100223 import urllib2 ip =...

International Airlines any user is bound to any phone,any reset a user's password-vulnerability warning-the black bar safety net

In my information point to modify the phone to send the verification code to set up burpsuite cut package Phone=1 5 0&userName=admin Modify your mobile phone number and want to reset the password of the username there is a very magical thing to modify is successful will directly jump to you to...

HP LaserJet Pro P1606dn - Webadmin Password Reset

!/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage: http://www8.hp.com/de/de/products/printers/product-detail.html?oid=4110411 Firmware Date: 20100223 import urllib2 ip =...

HP LaserJet Pro P1606dn - Webadmin Password Reset

HP LaserJet Pro P1606dn - Webadmin Password Reset !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

HP LaserJet Pro P1606dn - Webadmin Password Reset

Exploit for hardware platform in category web applications !/usr/bin/python Exploit Title: HP LaserJet Pro P1606dn Webadmin password reset Date: 20.05.2013 Exploit Author: m3tamantra http://m3tamantra.wordpress.com/blog Vendor Homepage:...

The wretched stream again to reset the hold which network any user password even commandeer a user account-bug warning-the black bar safety net

The problem lies in the hold which its happy to rent the site, the official people please read on: 1. Registered a user and logged in, found you can change the user mailbox; ! 2. Click on change mailbox, here is not carry out any check, even without operation of the verification code, to...

Name.com Data Breach Forces Password Breach

Domain registrar Name.com has informed its customers via email of a data breach and asked them to reset their passwords. The company, based in Denver, said it discovered a breach and customer account information such as encrypted credentials and credit card numbers may have been accessed along wi...

Reputation.com Notifies Customers of Network Attack

A company known for burying bad information to improve its customers’ online images let everyone know this week its network was hacked. Reputation.com sent e-mails to thousands of customers in more than 100 countries to let them know of the attack. In a message sent earlier this week, the company...

DEBIAN-CVE-2013-0233

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass...

UBUNTU-CVE-2013-0233

Devise gem 2.2.x before 2.2.3, 2.1.x before 2.1.3, 2.0.x before 2.0.5, and 1.5.x before 1.5.4 for Ruby, when using certain databases, does not properly perform type conversion when performing database queries, which might allow remote attackers to cause incorrect results to be returned and bypass...

Free Monthly Websites 2.0 - Admin Password Change

Free Monthly Websites 2.0 - Admin Password Change ========================================================================================== Title : Free Monthly Websites 2.0 Administrator Remote Password Change Date : 10/04/2013 Name : Free Monthly Websites Affected Version : 2.0 Vendor :...

Streaming Video's Vudu Issues Systemwide Password Reset After Theft

The streaming video service Vudu on Tuesday began resetting its customers’ passwords after thieves broke into the company’s Santa Clara, Calif. headquarters and stole a number of items, including hard drives holding customer data. “Our investigation thus far indicates that these hard drives...