AM4Design SQL Injection

---------------------------------------------------------------- AM4Design SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : AM4Design SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Stable Channel Update

The Stable channel has been updated to 21.0.1180.75 for Mac, Linux, Windows and Chrome Frame This build fixes: Flash videos not longer remaining in fullscreen when clicking a secondary monitor while the video is playing Issue: 140366. Flash video full screen displays on wrong monitor Issue: 13752...

Ajax Data Uploader Shell Upload

0101010101----010101010101010 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101010101 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 0101010101----0101...

phpBB uploadpic.php Shell Upload

0101010101----010101010101010 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101 0101 01 01------0101010101 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 01 01------0101 010 0101010101----0101...

B2CPrint Remote Shell Upload

0101010101 010101010101010 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101 0101 01 01 0101010101 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 01 01 0101 010 0101010101 0101 010 + Exploit Title : B2CPrint Remote File Uploader Vulnerability ...

Dotcombinat SQL Injection

-------------------- IN The NAme OF God -------------------- -====Dotcombinat Remote Sql Injection Vulnerability====- Exploit Title: Dotcombinat Remote Sql Injection Vulnerability Exploit Author: Mr.XpR SCript Download : http://www.dotcombinat.net Tested on: BackTrack , 7 , Redhat MAil :...

Photo Collection 1.5 SQL Injection

-------------------- IN The NAme OF God -------------------- -====Photo collection Remote Sql Injection Vulnerability====- Exploit Title: Photo collection Remote Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack , 7 , Redhat Version : 1.5 MAil : [email protected] -====Dork====...

Et-Chat Shell Upload

-------------------- IN The NAme OF God -------------------- -====Et-chat remote file uploader RFU====- Exploit Title:Et-chat remote file uploader RFU Exploit Author: FarbodEZRaeL Tested on: xp MAil : [email protected] -====Dork====- inurl:/styles/admintpl/ -====Exploit====-...

MyBB 1.6.8 With AdvancedProfile 3.1 SQL Injection

-------------------- IN The NAme OF God -------------------- -====MyBB 1.6.8 Sql Injection Vulnerability====- Exploit Title: MyBB 1.6.8 Sql Injection Vulnerability Exploit Author: Mr.XpR Tested on: BackTrack Script Site : http://mybb.com MAil : No0PMatyahoodotcom -====Dork====-...

F2blog Shell Upload

Name: f2blog Remote File Uploader RFU Sh3ll Google Dork: inurl:/plugins/expose4/uploadimg.php Type: PhP Author: MR.XpR Tested On: Linux Backtrack 1.Upload shell ----- Sh3ll.php.jpg 2.load shell ------- http://patch/components/comexpose/expose/img/shell.php.jpg Expamle :...

f2blog Remote File Uploader (RFU) Vulnerability

Exploit for php platform in category web applications Name: f2blog Remote File Uploader RFU Sh3ll Google Dork: inurl:/plugins/expose4/uploadimg.php Type: PhP Author: MR.XpR Tested On: Linux Backtrack 1.Upload shell ----- Sh3ll.php.jpg 2.load shell -------...

Tim Hendriks Content Management System SQL Injection

Exploit Title: Content-Management-System Remote SQL Injection news.php Script Page : http://tim-hendriks.com Date: 24-3-2012 Version: Version 2.1 Author : Ali.Erroor Tested on: Firefox 8.0, Palemoon 8.0, Internet Explorer 9 Mail: [email protected] Web Site : www.anti-network.net Injection Point ...

Iran Defense Forum users logins compromised and Leaked

Iran Defense Forum users logins compromised and Leaked Hacker with name "Le0n B3lm0nt" claimed to hack into the Iran Defense Forum website irandefence.net and leak user details of all 3,212 members including their usernames, Emails and Passwords. Iran Defense Forum is an independent forum that is...

BBC Persian TV hacked by Iranian government

BBC Persian TV hacked by Iranian government According to BBC News, today Iran hacked BBC Persian TV . This is not the first time the Iranian government has tampered with the BBC's Persian service, Zdnet Report. The Reason behind this attack is part of a broader attempt by the government to disrup...

Joomla Currency Converter Cross Site Scripting

Exploit Title: Joomla modules modcurrencyconverter XSS Vulnerability Date: 2012-02-02 GMT +7 Author: BHG Security Center Software Link: http://joomla.org Dork: inurl:/includes/convert.php?from= Tested on: ubuntu 11.04 CVE : -...

DIGIT CMS 1.0.7 Cross Site Scripting / SQL Injection

Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT" Version : 1.0.7 Tested on: ubuntu 11.04 CVE : - Finders...

DIGIT CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT"...

Wordpress enable-latex plugin Remote File Include Vulnerabilities

a bug in Wordpress enable-latex plugin that allows to us to occur a Remote File Include on a Remote machin. Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress enable-latex plugin Remote File Include Vulnerabilities Download......:...

Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities

a bug in Wordpress meenews 5.1 plugin that allows to us to occur a Cross-Site Scripting on a Remote machin. Aria Security Team - Persian Network Security http://Aria-Security.Com/forum/ Wordpress meenews 5.1 plugin Cross-Site Scripting Vulnerabilities Download......:...

Joomla Component (com_sgicatalog) <= SQL Injection Vulnerability

Exploit Title: Joomla Component comsgicatalog = SQL Injection Vulnerability Google Dork: inurl:index.php?option=comsgicatalog Date: 2011-10-12 Author: BHG Security Center Home: Http://black-hg.org Software Link: http://joomlaapps.com/ Version: 1.x Tested on: Windows XP- Persian CVE : Webapps...