The vulnerability of the Windows operating system, which allows a malicious individual to compromise the confidentiality of information

The Microsoft Windows operating system contains a vulnerability in the Active Directory services, related to incorrect handling of user exit. Exploiting this vulnerability can allow attackers to access user information by reopening the application from which the user exited. Due to the error in...

EFF Evaluates Internet Companies on Privacy, Transparency

Internet companies are making it a standard practice to publish transparency reports and advocate for users’ privacy concerns with law enforcement and legislators. And while some do it well, there’s plenty of room for improvement among ISPs such as AT&T and Verizon, and large companies such as...

2B.COM sprl SQL Injection

2B.COM sprl = SQL Injection Vulnerability ======================================================== .:. Author : Metropolis .:. Home : http://metropolis.fr.cr .:. Script : 2B.COM sprl .:. Version : N/A .:. Dork : inurl:/php/index.php?docid= .:. Bug Type : Sql Injection === Exploit ===...

Most advanced and dangerous malware for Apple products - why you should be concerned !

Most advanced and dangerous malware for Apple products - Why you should be concerned ! Indian security researcher from MalCon has created an advanced and dangerous malware for Apple products which can not only compromize your privacy but also steal important data and let hackers control your...

EasyClassifields 3.0 - 'go' SQL Injection

EasyClassifields v3.0 SQL Injection By: e.wiZz! Info: Bosnian Idiot FTW! Site: infected.blogger.ba Greetz: Luigi,suN8Hclf,str0ke In the wild... Script Site: http://myiosoft.com/?1.6.0.0 Vulnerability: http://www.inthewild.xxx/path/index.php?PageSection=x&page=browse&go= PoC on demo site:...

phptest-sql.txt

Name : phpTest 0.6.3 picture.php imageid Remote SQL Injection Vulnerability Author : cOndemned Dark-Coders Dork : sorry, today no dork ; Greetz : ZaBeaTy, str0ke, GregStar, Voo|doo, ixos, 0in, suN8Hclf, TBH, Avantura : Source code of "picture.php" : 24. ptregister'GET', 'imageid'; 25. 26. if...

kwsphp-sql.txt

KwsPHP Module jeuxflash Remote SQL Injection Vulnerability AUTHOR : H-T Team HouSSamix ToXiC350 HOME : http://no-hack.fr & http://no-hack.net Site: http://koogar.alorys-hebergement.com/kwsphp/index.php?mod=downloads&filedl=30&before=8&pdl=1 Dork : inurl:index.php?mod=jeuxflash EXPLOITS :...

Woltlab Burning Board 2.3.5 - 'links.php' SQL Injection

!/usr/bin/perl use IO::Socket; print q Woltlab Burning Board 2.3.4 newProto="tcp", PeerAddr="$webpage", PeerPort="80" || die "+ Can't connect to Server\n"; print "+ Exploiting....\n"; print $sock "GET $wbbdir HTTP/1.1\n"; print $sock "Accept: /\n"; print $sock "User-Agent: Hacker\n"; print $sock...

Arki-DB 1.0 (catid) Remote SQL Injection Vulnerabilities

Exploit for unknown platform in category web applications ======================================================== Arki-DB 1.0 catid Remote SQL Injection Vulnerabilities ======================================================== ArkiDB SQL Injection's ArkiDB catid Ramote SQL Injection's...

yabbSE.txt

Summary: YaBB SE is a PHP/MySQL port of the popular forum software YaBB yet another bulletin board. An SQL Injection vulnerability in the product allows a remote attacker to insert malicious SQL statements. Details: Vulnerable Systems: Yabb Se version 1.5.4 tested, 1.5.3tested maybe others Immune...

Microsoft Virtual Machine incorrectly parses the domain portion of URLs containing a colon

Overview Some versions of the Microsoft virtual machine Microsoft VM contain a flaw that could allow untrusted Java applets from an attacker's site to be run instead of the trusted applet from the intended site. Description The Microsoft virtual machine Microsoft VM enables Java programs to run o...

ansi outer join syntax in Oracle allows access to any data

Hi all I thought this list may be interested in this issue, apologies if its known here already. Oracle 9i includes the new ANSI outer join syntax. Oracle still supports the old syntax but in the new syntax there is a serious security issue that allows any user to view any data. here is an exampl...

security hole in os groupware suite PHProjekt

Overview PHProjekt is an open source groupware suite written in PHP4 with mysql/postgres/oracle/informix/ms-sql support: www.PHProjekt.com The security hole concernes the several modules. Details By modifying the ID number in links an user can view, moduify or delete data of other users randomly...

Microsoft Internet Explorer 4/5/5.5/5.0.1 - external.NavigateAndFind() Cross-Frame

Microsoft Internet Explorer 4.0 for WfW/Windows 3.1/Windows 95/Windows NT 3/Windows NT 4,Internet Explorer 5.0 for Windows 2000/Windows 95/Windows 98/Windows NT 4,Internet Explorer 5.5,Internet Explorer 5.0.1,Internet Explorer for Unix 5.0 external.NavigateAndFind Cross-Frame Vulnerability source...

ffingerd.txt

Date: Fri, 23 Apr 1999 19:26:13 +0300 From: Eilon Gishri To: [email protected] Subject: Ffingerd privacy issues Hi, I found a couple of bugs in ffingerd 1.19 which are related to privacy. Here goes: The permission on root's home directory are now 700 /home/root. ----- aristo/cc/eilonfinger...