[BSA-057] Security update for nss

This update to the NSS cryptographic libraries revokes the trust in the "DigiCert Sdn. Bhd" certificate authority. More information can be found in the Mozilla Security Blog: http://blog.mozilla.com/security/2011/11/03/revoking-trust-in-digicert-sdn-bhd-intermediate-certificate-authority/ This...

Sify.com hacked with SQL Injection Vulnerability

Sify.com hacked with SQL Injection Vulnerability Sify's website contain SQL injection Vulnerability and Hackers are able to Database Access, Database Dump, Possibility of shell uploading. Sify is one of India's leading integrated Information Communications Technology companies. Sify was one of th...

VSFTPD v2.3.4 Backdoor Command Execution

No description provided by source. $Id: vsftpd234backdoor.rb 13099 2011-07-05 05:20:47Z hdm $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of...

vsftpd Compromised Source Packages Backdoor Vulnerability - Active Check

vsftpd is prone to a backdoor vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:vsftpdproject:vsftpd"; ifdescription...

Lil' HTTP Server 2.2 Cross Site Scripting

Lil' HTTP Server v2.2 Default CGI From Xss Vulnerability Discription : In Lil' HTTP server 2.2v come with some Default applications in "CGI Form Demo" Applicatio they alows you to submit your name and e-mail . there is a XSS vuln in submit application Sample :...

Pragyan CMS 3.0 - Multiple Vulnerabilities

Pragyan CMS 3.0 - Multiple Vulnerabilities Pragyan CMS v 3.0 mutiple Vulnerabilities Author Villy and Abhishek Lyall - villys777atgmaildotcom, abhilyallatgmaildotcom Web - http://www.aslitsecurity.com/ Blog - http://bugix-security.blogspot.com http://www.aslitsecurity.blogspot.com/ Pragyan CMS v...

Virtual DJ Trial 6.1.2 Buffer Overflow

Virtual DJ Trail 6.1.2 SEH Buffer Overflow Crash POC vulnerble application link http://www.virtualdj.com/download/trial.html tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/ !/usr/bin/python filename ...

Mediacoder 0.7.5.4710 Buffer Overflow

media coder 0.7.5.4710 0 day buffer overflow exploit vulnerble application link http://www.mediacoderhq.com/dlfull.htm tested on XP SP2 author abhishek lyall - abhilyallatgmaildotcom web - http://www.aslitsecurity.com/ blog - http://www.aslitsecurity.blogspot.com/ !/usr/bin/python to exploit load...

Pulling Back the Curtain on Rogue AV Tech Support

We’ve blogged a few times about rogue AV, explaining how search engines have been abused using Black Hat Search Engine Optimization techniques to redirect web surfers to rogue AV websites. Recently, we’ve noticed that the rogue AVs being spread are all equipped with an “Online Support” button. Se...

MidiCart PHP/ASP - Arbitrary File Upload

Exploit Title: MidiCart PHP,ASP Shell Upload Vulnerability Date: 17.05.2010 Author: DigitALL Software Link: http://download.cnet.com/MidiCart-PHP-Shopping-Cart/3000-26494-10064577.html Version: All Version Tested on: DigitALL Xp Version x1 Code : dork : inurl:"ordermoney.php" or...

Uploader 0.7 Shell Upload

Exploit Title: Uploader 0.7 Shell Upload Vulnerability Date: 16.04.2010 Author: DigitALL Software Link: http://www.paehl.de/ Version: 0.7 Code : g00gle d0rk: "File viewer for Uploader" 3xpl0it: Your Shell shell.php.jpg And Upload Site. And Go to /view.php Your Shell Link Click And Go To Shell...

DSEmu 0.4.10 Proof Of Concept

!/usr/bin/env python DSEmu 0.4.10 .nds local crash Software Link: http://double.co.nz/nintendods/dsemu-0.4.10.zip Author: l3D Sites: http://xraysecurity.blogspot.com, http://nullbyte.org.il IRC: irc://irc.nix.co.il Email: [email protected] Open the file, and after 4 seconds the application shou...

TopDownloads MP3 Player 1.0 - .m3u Crash

TopDownloads MP3 Player 1.0 - .m3u Crash !/usr/bin/env python MP3 player 1.0 Local Crash Author: l3D Software Link: http://files.brothersoft.com/mp3audio/players/td-mp3.exe Site: http://xraysecurity.blogspot.com IRC: irc://irc.nix.co.il Email: [email protected] bad=open'crash.mp3', 'w'...

si2007-sql.txt

Homepage: http://devilteam.eu/ 126 $result.=" ."; else $result.=" ".$string$i; if strlendechexord$string$i==2 $exa.=" ".dechexord$string$i; else $exa.=" 0".dechexord$string$i; $cont++;if $cont==15 $cont=0; $result.="\r\n"; $exa...

F3Site 2.1 - Remote Code Execution

F3Site 2.1 - Remote Code Execution ? // //Kacper & str0ke Settings $exploitname = "F3Site = 2.1 Remote Code Execution Exploit"; $scriptname = "F3Site 2.1"; $scriptsite = "http://dhost.info/compmaster/"; $dork = '"Powered by F3Site"'; //to work exploit you need admin session, and cookies prefix //...

kgb19-lfi.txt

? //Kacper & str0ke Settings $exploitname = "KGB = 1.9 Remote Code Execution Exploit"; $scriptname = "KGB 1.9"; $scriptsite = "http://www.kgb.xs.com.pl/index.php?tri=2"; $dork = 'inurl:"kgb19"'; // print ' ::::::::: :::::::::: ::: ::: ::::::::::: ::: :+: :+: :+: :+: :+: :+: :+: +:+ +:+ +:+ +:+ +:...