ES Job Search Engine v3.0 - SQL injection vulnerability

Document Title: =============== ES Job Search Engine v3.0 - SQL injection vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=675 Release Date: ============= 2012-08-08 Vulnerability Laboratory ID VL-ID: ==================================== 675...

Code injection

Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google,...

CVE-2011-4279

Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google,...

CVE-2011-4279

Moodle 2.0.x before 2.0.2 does not use the forceloginforprofiles setting for course-profiles access control, which makes it easier for remote attackers to obtain potentially sensitive information via vectors involving use of a search engine, as demonstrated by the search functionality of Google,...

Orion Browser Dumper v1.0 released

Orion Browser Dumper v1.0 released Jean-Pierre LESUEUR DarkCoderSc releases another Browser Forensic tool for Community called "Orion Browser Dumper v1.0". This software is an advanced local browser history extractor dumper, in less than few seconds like for Browser Forensic Tool it will extract...

Iran replacing Google, Hotmail with its own internal search engines and email services

Iran replacing Google, Hotmail with its own internal search engines and email services Iran has denied the report that it plans to cut itself off from the Internet. In a statement, the ministry said "The report is in no way confirmed by the ministry". It added that it was "completely baseless," a...

Japan orders Google to remove auto-complete function over privacy complaint

Japan orders Google to remove auto-complete function over privacy complaint Google has been ordered to disable part of its autocomplete function in Japan after complaints it violates privacy. According to a report by The Japan Times, the court was acting on a petition accusing Google's autocomple...

PCWorld Cross Site Scripting

------------------------------------------------------- Exploit Title: PCWorld Cross Site Scripting Date: 19.03.2012 Author: konsoleskanner Web Browser : Mozilla Firefox PoC: http://www.pcworld.com/downloads/search?qt=XSS -------------------------------------------------------- A cross site...

Mobile Mp3 Search Engine HTTP Response Splitting

-=--------------------ADVISORY-------------------=- Mobile Mp3 Search Engine 2.0 Author: Corrado Liotta Aka CorryL [email protected] -=-----------------------------------------------=- -=+ Application: Mobile Mp3 Search Engine -=+ Version: 2.0 -=+ Vendor's URL:...

Search Engine Builder Cross Site Scripting

Search Engine Builder XSS/HTML Injection Vulnerabilities Software : Search Engine Builder Date : 2/20/2012 Vendor : http://www.aleadsoft.com Get App. : http://www.aleadsoft.com/SearchMakerSetup.exe Platform : Windows Language : ASP Tested on: Windows Dork : "Powered by Search Engine Builder" Auth...

Prediction: Handful of Malicious Networks Will Spawn Most Attacks In 2012

A shadowy web of malicious networks, or “malnets” will be the source of two thirds of online attacks in 2012, according to a report from the security firm Blue Coat. Despite the continued industry focus on specific families and samples of malicious software, Blue Coat researchers say that...

Conduit Image Search Engine Cross Site Scripting

TITLE: Conduit Image Search Engine Cross site Scripting vendor: Conduit Author: r007k17-w Email: [email protected] My blog: http://shadowrootkit.wordpress.com/ Google Dork: © 2012 Conduit...

PHPSou open-source search system of 0Day-vulnerability warning-the black bar safety net

Go from tools, author: yizhigu The reprint must be famous copyrights! 1 vulnerability description Is an open source search engine system, the official forum is: www.phpsou.net,simple introduction is as follows: PHPSou vertical search engine using PHP+Mysql development, is domestic first based on...

Creator Of New Site Claims To Out The Online Pirates Among Us

Pirates beware! The creator of a new Web based search engine says that linking you up with your illegal downloads is easier than you may think. Suren Ter Saakov, the creator of the Web site youhavedownloaded.com, said his new Web site can link legal and illegal downloading activity from a number ...

Babylon Cross Site Scripting

HackingAlert Security Lies within you Exploit Title: search.babylon.com XSS vulnerability Date: 12/11/2011 Author: Abhinav Singh Website: http://hackingalert.blogspot.com Tested On: Win7 Platform: - Email: [email protected] Google Dork : babylon search engine,©Babylon inc. $ Vulnerable :...

Blekko.com Cross Site Scripting

Date: 24.11.2011 Author: Sony Site: http://blekko.com My blog and PoC: http://st2tea.blogspot.com/2011/11/blekkocom-web-search-engine-cross-site.html What is blekko.com? You can read here: http://en.wikipedia.org/wiki/Blekko So..our xss in the profile website link...

Drive By Download Sites Using New Tricks To Avoid Detection

Amid an increase in defacements of legitimate websites over the past few weeks, Fraser Howard, a researcher from Sophos, has discovered that the groups behind the attacks are increasingly using sophisticated filtering and dynamic content to avoid detection by search engines and web filtering firm...

Я.Инцидент: Почему я читал ваши СМС?

События прошедшего лета, связанные с утечками конфиденциальных данных в поисковые системы, прямо или косвенно коснулись каждого, кто следит за новостями, любезно предоставляемыми СМИ. Под «системный нож» попали поисковые роботы и персональные данные гражданина РФ. Копнем немного глубже и выясним,...

LightNEasy v2.3.3 - Local File Include Vulnerability

Document Title: =============== LightNEasy v2.3.3 - Local File Include Vulnerability References Source: ==================== LightNEasy v2.3.3 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 50 Product & Service Introduction:...

LightNEasy v2.3.3 - Local File Include Vulnerability

Document Title: =============== LightNEasy v2.3.3 - Local File Include Vulnerability References Source: ==================== LightNEasy v2.3.3 Release Date: ============= 2011-09-21 Vulnerability Laboratory ID VL-ID: ==================================== 50 Product & Service Introduction:...