[ONSEC-09-014] 1C Bitrix WAF multiple XSS

Цель: 1C Bitrix WAF =8.0.5 Тип: Межсайтовый скриптинг Угроза: Средняя Дата обнаружения: 29.08.2009 Дата оповещения разработчика: 29.08.2009 Дата выхода исправления: 01.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Проактивный фильтр WAF системы управления...

[ONSEC-09-017] Blogolet PHP including

ONSEC-09-017 Blogolet PHP including Цель: Blogolet CMS Тип: PHP инъекция Угроза: Высокая Дата обнаружения: 21.09.2009 Дата оповещения разработчика: 21.09.2009 Дата выхода исправления: 21.09.2009 Автор: Vladimir Vorontsov OnSec Russian Security Group onsec dot ru Описание: Уязвимость существует...

Three Indicted For Hack Attacks on Heartland, Hannaford

A Miami man and two Russians have been indicted usdoj.gov by a grand jury in New Jersey on charges of conspiring to commit some of the largest data breaches in U.S. history. Albert Gonzalez, 28, and the two still-unnamed Russian citizens are charged with running an international scheme to steal...

Acajoom Component for Joomla! <= 3.2.6 Backdoor Detection

Acajoom, a third-party component for Joomla! for managing mailing lists, newsletters, auto-responders, and other communications, is running on the remote host. This version of Acajoom is equal or prior to 3.2.6. It is, therefore, affected by a backdoor in the self.acajoom.php script. An...

Unfixed XSS vulnerability at www.russian-info.com

Security researcher doublecheck, has submitted on 06/04/2009 a cross-site-scripting XSS vulnerability affecting www.russian-info.com, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is...

Windows NT/2k/XP useradd shellcode for russian systems 318 bytes

No description provided by source. / \ win32 useradd shellcode for russian systems / by Darkeagle \ ExploiterZ Lab / http://exploiterz.org \ / // add user "slim" with password "shady" with admin prem. in Russian Systems unsigned char data318 = 0xEB, 0x0F, 0x58, 0x80, 0x30, 0x17, 0x40, 0x81, 0x38,...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

Unfixed XSS vulnerability at www.single-russian-woman.com

Security researcher TreX, has submitted on 12/12/2007 a cross-site-scripting XSS vulnerability affecting www.single-russian-woman.com, which at the time of submission ranked 201873 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2007. It ...

russian-multi.txt

Dear [email protected], Vulnerabilities reported by different Russian speaking authors to http://securityvulns.ru 1. ElektAntichat.ru reports protection bypass vulnerability in PHP 4 and 5. disablefunctions feature can be bypassed by using functions alias. A list of aliases is given in...

MPack with virtual hosting and PHP security-vulnerability warning-the black bar safety net

MPack is by a self-proclaimed "Dream Coders Team" of the organization development of the PHP program, which contain a number of the latest exploit code can be used to manipulate the distal end of attacks on Panda Labs at the end of last year when for the first time found that, at the time someone...

Interview:Void

Team Void What is the world's attitude towards hackers from Russia? They are respected. Indeed, our compatriots are members of many well-known clans - w00w00, ADM and other highly revered teams. It should also be noted that the level of our computer professionals is quite worthy - you will meet...

Omni-NFS Server 5.2 (nfsd.exe) Remote Stack Overflow Exploit (meta)

No description provided by source. vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of the...

OpenLDAP 2.2.29 Remote Denial of Service Exploit (meta)

No description provided by source. vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it under the terms of th...

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow (Metasploit)

Omni-NFS Server 5.2 - nfsd.exe Remote Stack Overflow Metasploit vdxlink.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to us...

OpenLDAP 2.2.29 - Remote Denial of Service (Metasploit)

OpenLDAP 2.2.29 - Remote Denial of Service Metasploit vdopenldap.pm The exploit is a part of VulnDisco Pack - use only under the license agreement specified in LICENSE.txt in your VulnDisco distribution VULNDISCO LICENSE Purchaser buys VulnDisco Pack "the Pack" and receives the right to use it...