Stuxnet Media Storm Now Feeding SEO Attacks?

How do you know when a computer virus has officially jumped the fence to become a media sensation? Probably when scammers start using popular interest in it as bait for their own malware. So it is with the Stuxnet worm, which was identified in July, but has become the focus of intense media...

Car Portal v2.0 BLIND SQL Injection Vulnerability

Exploit for php platform in category web applications ================================================= Car Portal v2.0 BLIND SQL Injection Vulnerability ================================================= 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ ...

Updated Android Trojan Pushed in SEO Attacks

Mobile attacks may have reached a tipping point, as researchers observe search engine optimization used to spread a malicious program for mobile devices running the Android operating system. One month after researchers first identified a Trojan horse program that targets mobile devices running...

Users Still Making Life Easy for Scareware Crews

Scareware and rogue AV programs have enjoyed a very good run in the last few years, making millions of dollars for their creators and generally making life miserable for victims. And while there’s been some innovation recently in the mechanisms attackers use to keep the programs resident on...

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion

Exploit Title: PHP-Nuke-8.1-seo-Arabic Remote File Include Date: 12-8-2010 Author: LoSt.HaCkEr Software Link: http://scripts.bdr130.net/faile/PHP-Nuke-8.1-seo-Arabic.zip Version: v 8.1 Tested on: Windows XP CVE : هكر المسيب Contact: LoSt.HaCkEratyahoodotcom Exploit:...

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion

PHP-Nuke 8.1 SEO Arabic - Remote File Inclusion Exploit Title: PHP-Nuke-8.1-seo-Arabic Remote File Include Date: 12-8-2010 Author: LoSt.HaCkEr Software Link: http://scripts.bdr130.net/faile/PHP-Nuke-8.1-seo-Arabic.zip Version: v 8.1 Tested on: Windows XP CVE : هكر المسيب Contact:...

Table2CSS Denial of Service PoC

Exploit for php platform in category dos / poc =============================== Table2CSS Denial of Service PoC =============================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /...

Paul Judge and David Maynor on Twitter Crime and Searching for Malware

Dennis Fisher talks with Paul Judge and David Maynor of Barracuda about new research the pair will be presenting at BSides Las Vegas and Defcon this week on the start of a reputation system for Twitter accounts, how attackers use search engines to spread malware and what kinds of sites are most...

Pulling Back the Curtain on Rogue AV Tech Support

We’ve blogged a few times about rogue AV, explaining how search engines have been abused using Black Hat Search Engine Optimization techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all equipped with an “Online Support” button. Se...

Lyrics V3 Engine SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Author : Sid3^effects aKa HaRi special...

Lyrics 3.0 - Engine SQL Injection

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Author : Sid3^effects aKa HaRi special...

Lyrics V3 engine SQL injection Vulnerabilty

Exploit for php platform in category web applications =========================================== Lyrics V3 engine SQL injection Vulnerabilty =========================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\...

Lyrics 3.0 - Engine SQL Injection

Lyrics 3.0 - Engine SQL Injection 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : Lyrics V3 engine Sqli Vulnerability Date : july 6,2010 Critical Level : HIGH vendor URL :http://rightinpoint.com/ Price:$99 Auth...

iLister listing script LFi Vulnerability

Exploit for php platform in category web applications ======================================== iLister listing script LFi Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

iLister Listing Software - Local File Inclusion

iLister Listing Software - Local File Inclusion 1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL...

iLister Listing Software - Local File Inclusion

1 1 0 I'm Sid3^effects member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-==-=-=-1 Name : iLister listing script LFi Vulnerability Date : july 4,2010 Critical Level : HIGH vendor URL :http://www.worksforweb.com/ Author : Sid3^effects aKa HaRi special...

SweetRice 0.6.4 - FCKeditor Arbitrary File Upload

SweetRice 0.6.4 - FCKeditor Arbitrary File Upload Title: SweetRice 0.6.4 fckeditor Remote File Upload Vendor: http://www.basic-cms.org Dork: "Powered By Basic CMS SweetRice" AUTHOR: ITSecTeam Email: [email protected] Website: http://www.itsecteam.com Forum : http://forum.ITSecTeam.com Original...

SweetRice <= 0.6.4 (fckeditor) Remote File Upload

Exploit for php platform in category web applications ================================================= SweetRice = 0.6.4 fckeditor Remote File Upload ================================================= Title: SweetRice 0.6.4 fckeditor Remote File Upload Vendor: http://www.basic-cms.org Dork:...

CVE-2010-2626

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...

Information disclosure

index.pl in Miyabi CGI Tools SEO Links 1.02 allows remote attackers to execute arbitrary commands via shell metacharacters in the fn command. NOTE: some of these details are obtained from third party information...