Asteriskguru Queue Statistics Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2013-002 - Original release date: January 22nd, 2013 - Last revised: March 10th, 2013 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I...

New Ransomware Encrypts Victim Data

An unusual new strain of ransomware makes good on its threat, doing what the majority of other varieties only claim to do. The Trojan actually encrypts data on infected machines, effectively rendering certain files inaccessible to users on compromised computers in order to block removal. This...

Businesses Remain Scared of Spear-Phishing as Attackers Study Behavior

Scared is a strong word, but the reality, according to a Websense analysis by Patrik Runald, is that spear-phishers, like the ones that compromised a White House network last week, are implementing new evasion tactics, fundamentally changing their attack strategies, and revolutionizing the target...

mailenable enterprise 6.5 - Persistent Cross-Site Scripting

!/usr/bin/python ''' Author: loneferret of Offensive Security Product: MailEnable Enterprise Version: 6.5 Vendor Site: http://www.mailenable.com Software Download: http://www.mailenable.com/download.asp Timeline: 29 May 2012: Vulnerability reported to CERT 30 May 2012: Response received from CERT...

International Cyber Crime Takedown Said to Be Largest of Its Kind

A two-year undercover operation today netted two dozen arrests in eight countries in what federal authorities say is the largest coordinated international takedown in history directed at those who traffic stolen financial data through online forums. The investigation uncovered 411,000 compromised...

Skimmers Hit Patrons of Wrigley Field, Chicago Restaurants

Six individuals were charged late last week with “skimming” more than $200,000 from victims who used their credit or debit cards at Wrigley Field and other Chicago restaurants. A press release from Illinois’ Attorney General Lisa Madigan on Friday alleged that Joseph Woods, 32, was the scheme’s...

Mozilla Firefox Bootstrapped Addon Social Engineering Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'rex/zip' class Metasploit3 'Mozil...

Xavi 7968 ADSL Router - '/webconfig/wan/confirm.html/confirm?pvcName' Cross-Site Scripting

source: https://www.securityfocus.com/bid/52098/info Xavi 7968 ADSL Router is prone to cross-site scripting, HTML-injection and cross-site request forgery vulnerabilities. The attacker can exploit the issues to execute arbitrary script code in the context of the vulnerable site, potentially...

DJ Studio Pro 5.1.6.5.2 SEH Exploit MSF

Exploit for windows platform in category local exploits $Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Enigma2 Webinterface Remote File Disclosure

!/usr/bin/perl Enigma2 Webinterface 1.7.x 1.6.x 1.5.x remote root file disclosure exploit Author: Todor Donev Email me: todor.donev@@gmail.com Platform: Linux Type: remote Gewgle Dork: "Enigma2 movielist" filetype:rss Enigma2 is a framebuffer-based zapping application GUI for linux. It's targeted...

FreeSSHd Remote Denial of Service

No description provided by source. import sys, socket, binascii print "\n" print "----------------------------------------------------------------" print "| FreeSSHd, Remote Denial of Service |" print "| Level, Smash the Stack |" print...

Asterisk Manager Login Utility

This module attempts to authenticate to an Asterisk Manager service. Please note that by default, Asterisk Call Management port 5038 only listens locally, but this can be manually configured in file /etc/asterisk/manager.conf by the admin on the victim machine. This module requires Metasploit:...

Linux Kernel 3.0.4 - '/proc/interrupts' Password Length Local Information Disclosure

/ source: https://www.securityfocus.com/bid/50573/info The Linux kernel is prone to a local information-disclosure weakness. Successful exploits allow local attackers to obtain the password length of a victim's account; information harvested may aid in further attacks. Linux kernel 3.1 and prior...

Cross Site Request Forgery - Deleting User's Dashboards

Security auditing tests performed on a Jira Bug Issue and Project Tracking Software locally running instance shown that the application is succeptible to Cross-Site Request Forgery attacks within this URL:...

LightNEasy 3.4.2 Multiple Vulnerabilities

Exploit for php platform in category web applications ========================================================================= LightNEasy 3.4.2 Multiple Vulnerabilities =========================================================================...

Td Web SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Td Web news.php?idcategoria AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.tdweb.it/ Persian Gulf 4 Ever! Exploite: www.victim.com/news.php?idcategoria=SQL Example :...

Neox (categoria.php?id) Remote SQL injection Vulnerability

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Neox categoria.php?id AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.neox.es/ Persian Gulf 4 Ever! Dork : "inurl:categoria.php?id=" "Diseсo web - Mбlaga" Exploite:...

Xpdf 3.02-13 - 'zxpdf' Security Bypass

source: https://www.securityfocus.com/bid/49007/info Xpdf is prone to a security-bypass vulnerability that may allow attackers to perform actions without proper authorization. Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions; this may aid in...

Powered By Website It SQL Injection

Powered By Website it 2009 © SQL Injection Vulnerability ! Author : Err0r Bug Researchers Date : 17.07.2011 Name : Powered By Website it 2009 © ! Bug Type : SQL Injection Vulnerability Fixed : harmful characters fix - whitelist Demo : http://www.opp-ti.sy + Demo:...

iCube Lab SQL Injection

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability iCube Lab productdetails.php?catid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.icubelab.com/ Persian Gulf 4 Ever! Dork : "Powered by iCube Lab"...