258 matches found
oclHashcat v1.20 - Worlds fastest password cracker
oclHashcat is a GPGPU-based multi-hash cracker using a brute-force attack implemented as mask attack, combinator attack, dictionary attack, hybrid attack, mask attack, and rule-based attack. This GPU cracker is a fusioned version of oclHashcat-plus and oclHashcat-lite. GPU Driver requirements: NV...
SuSE 11.2 / 11.3 Security Update : Mozilla NSS (SAT Patch Numbers 8484 / 8485)
"Mozilla NSS has been updated to 3.15.2 bnc847708 bringing various features and bugfixes : The main feature is TLS 1.2 support and its dependent algorithms. - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add...
SuSE 11.2 Security Update : Mozilla NSS (SAT Patch Number 8484)
"Mozilla NSS has been updated to 3.15.2 bnc847708 bringing various features and bugfixes : The main feature is TLS 1.2 support and its dependent algorithms. - Support for AES-GCM ciphersuites that use the SHA-256 PRF - MD2, MD4, and MD5 signatures are no longer accepted for OCSP or CRLs - Add...
[JBrute v0.9.4] Open Source Security tool to audit hashed passwords
JBrute is an open source tool written in Java to audit security and stronghold of stored password for several open source and commercial apps. It is focused to provide multi-platform support and flexible parameters to cover most of the possible password-auditing scenarios. Java Runtime version 1....
Bitcoins - Secured by NSA designed Encryption or Backdoored ?
It's been nearly three months since Edward Snowden started telling the world about the National Security Agency's mass surveillance of global communications. After the last week report that the National Security Agency has leveraged its cooperative relationships with specific industry partners to...
Bitcoins - Secured by NSA designed Encryption or Backdoored ?
It’s been nearly three months since Edward Snowden started telling the world about the National Security Agency’s mass surveillance of global communications. After the last week report that the National Security Agency has leveraged its cooperative relationships with specific industry partners to...
SSL/TLS: Collect and Report Certificate Details
This script collects and reports the details of all SSL/TLS certificates. This data will be used by other tests to verify server certificates. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...
Social Site Formspring Says 420k User Password Hashes Posted Online
Hackers broke into a development server at Formspring, a social Q&A site, and made off with the password hashes for 420,000 users and later posted them online. The company has reset all of the users’ passwords and said it also has changed the way that it handles passwords. Formspring officials sa...
Wind River Systems VxWorks weak default hashing algorithm in standard authentication API (loginLib)
Overview The hashing algorithm that is used in the standard authentication API for VxWorks is susceptible to collisions. An attacker can brute force a password by guessing a string that produces the same hash as a legitimate password. Description An attacker with a known username and access to a...
Fedora 12 : maniadrive-1.2-21.fc12 / php-5.3.2-1.fc12 (2010-4212)
This is a maintenance release in the 5.3 series, which includes a large number of bug fixes. Security Enhancements and Fixes in PHP 5.3.2: - Improved LCG entropy. Rasmus, Samy Kamkar - Fixed safemode validation inside tempnam when the directory path does not end with a /. Martin Jansen - Fixed a...
SSL Certificate Information
This plugin connects to every SSL-related port and attempts to extract and dump the X.509 certificate. TRUSTED...
iyzi Forum s1 b2 (tr) SQL Injection Vulnerability
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
Exploit for unknown platform in category web applications =============================================================== iyzi Forum = 1.0 Beta 3 uyeayrinti.asp Remote SQL Injection ===============================================================...
iyzi Forum <= 1.0 Beta 3 (uye_ayrinti.asp) Remote SQL Injection
No description provided by source. ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download &...
iyzi Forum 1.0 Beta 3 - SQL Injection
iyzi Forum 1.0 Beta 3 - SQL Injection ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download ...
iyzi Forum 1.0 Beta 3 - SQL Injection
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + iyzi Forum s1 b2 tr SQL Injection Vulnerability + + Author : Fix TR + + Site : www.hack.gen.tr + + Contact : fixtratbsdmail.com + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Download & Info:...
xpl_detail.pl.txt
This is a multi-part message in MIME format. ------=NextPart000003201C5473D.B3E3E000 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable http://icis.digitalparadox.org/exploits/xpldetail.pl =20 !/usr/bin/perl use IO::Socket; use Getopt::Std; print "xASP NUKE...
Multiple Sql injection and XSS in Asp Nuke 0.80 (Working exploits included)
Severity: High Title: Multiple Sql injection and XSS in Asp Nuke 0.80 Working exploits included Date: 22/04/2005 Vendor: Asp Nuke Vendor Website: http://www.aspnuke.com/ Summary: There are, multiple sql injection and xss in asp nuke 0.80. Proof of Concept Exploits:...