win32/xp sp3 (Ru) WinExec+ExitProcess cmd shellcode 12 bytes

Exploit for win32 platform in category shellcode ============================================================ win32/xp sp3 Ru WinExec+ExitProcess cmd shellcode 12 bytes ============================================================ Thanks to last cotribution to inj3ct0r.com WinExec+ExitProcess in 1...

BigForum 4.5 SQL Injection

Exploit Title: BigForum 4.5 SQL INJECTION EXPLOIT Date: 07.03.2010 Author: Ctacok Software Link: http://sourceforge.net/projects/npage-bigforum/ Version: 4.5 Tested on: Ubuntu 9.10 !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL INJECTION \n"; print "...

BigForum 4.5 - SQL Injection

BigForum 4.5 - SQL Injection !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL INJECTION \n"; print " Author: Ctacok Russian \n"; print " Blog : www.Ctacok.ru \n"; print " Special for Antichat forum.antichat.ru and xakep.ru \n"; print " Require : Magicquote...

BigForum Version 4.5 SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================ BigForum Version 4.5 SQL Injection Vulnerability ================================================ !/usr/bin/perl use LWP::Simple; print "\n"; print "\n"; print " BigForum Version: 4.5 SQL...

RSA 2010: BlackEnergy 2 Botnet Revealed

Like the sequel to a successful movie, the botnet behind the distributed denial of service attacks that hit the country of Georgia during its conflict with Russia in 2008 has been updated. This time though, the idea isn’t hacktivism—it’s stealing financial data and, unlike in the case of other...

win32/xp sp3 (Ru) cmd 13 bytes

Exploit for win32 platform in category shellcode ============================== win32/xp sp3 Ru cmd 13 bytes ============================== Tested on Windows XP Pro Rus sp3. Probably, will work with any service pack present. 68 636D6420 push 0x20646D63 54 push esp B8 C793C177 mov eax,msvcrt.syste...

Gravity Board X 2.0 Beta (Public Release 3) - SQL Injection

Gravity Board X 2.0 Beta Public Release 3 - SQL Injection !/usr/bin/perl Exploit Title: Gravity Board X 2.0 BETA Public Release 3 SQL INJECTION Date: 26.02.2010 Author: Ctacok Software Link: http://www.gravityboardx.com/ Version: 2.0 BETA Public Release 3 Tested on: Windows SP 3 Code : exploit co...

Black Energy Tool Used in Citigroup Hack

The Federal Bureau of Investigation is probing a computer-security breach targeting Citigroup Inc. that resulted in a theft of tens of millions of dollars by computer hackers who appear linked to a Russian cyber gang, according to government officials. Read the full article. Wall Street Journal...

Attackers Buying Own Data Centers for Botnets, Spam

The malware writers and criminals who run botnets for years have been using shared hosting platforms and so-called bulletproof hosting providers as bases of operations for their online crimes. But, as law enforcement agencies and security experts have moved to take these providers offline, the...

Mura CMS

ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...

Mura CMS <= 5.1 xss

Exploit for unknown platform in category web applications =================== Mura CMS = 5.1 xss =================== Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir...

Mura CMS 5.1 xss

No description provided by source. ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group...

Mura CMS 5.1 - Root Path Disclosure

ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Description: content...

Mura CMS 5.1 - Root Path Disclosure

Mura CMS 5.1 - Root Path Disclosure ONSEC-09-020 Mura CMS root folder disclosure Objective: Mura CMS = 5.1 Type: Disclosure of ways Threat: Medium Date Discovered: 22.09.2009 Date of notification Developer: 22.09.2009 Released corrections: Author: Vladimir Vorontsov OnSec Russian Security Group...

Amiro.CMS 5.4.0.0 Root Folder Disclosure

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ONSEC-09-005 Amiro.CMS root folder disclosure Objective: Amiro CMS = 5.4.0.0 Type: Disclosure of ways Threat: Medium Date Discovered: 01.07.2009 Date of notification Developer: 01.07.2009...

[ONSEC-09-004] Amiro.CMS Multiple XSS

http://onsec.ru/vuln?id=11 ONSEC-09-004 Amiro.CMS Multiple XSS Цель: Amiro = 5.4.0.0 Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 01.07.2009 Дата оповещения разработчика: 01.07.2009 Дата выхода исправления: 06.10.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec do...

[ONSEC-09-018] Twilight CMS XSS

http://onsec.ru/vuln?id=10 ONSEC-09-018 Twilight CMS XSS Цель: Twilight CMS Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 01.10.2009 Дата оповещения разработчика: 01.10.2009 Дата выхода исправления: 10.01.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru...

Apple Malware Bounty: Infect a Mac, Earn $0.43

GENEVA — In a sign that cyber-criminals are investing more time and resources into attacks against Apple’s Mac users, a new malware affiliate program has been discovered offering 43c for every infected Mac machine. During an eye-opening presentation at the VB Conference 2009 conference here, Soph...

[ONSEC-09-013] 1C Bitrix 8.0.5 Admin Console XSS

ONSEC-09-013 1C Bitrix 8.0.5 Admin Console XSS Цель: 1C Bitrix 8.0.5 Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 25.08.2009 Дата оповещения разработчика: 30.08.2009 Дата выхода исправления: 01.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание:...

[ONSEC-09-016] Blogolet XSS

ONSEC-09-016 Blogolet XSS Цель: Blogolet CMS Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 21.09.2009 Дата оповещения разработчика: 21.09.2009 Дата выхода исправления: 21.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Уязвимости существуют из-...