Oxygen2PHP <= 1.1.3 (forumdisplay.php) Blind SQL Injection Exploit

Exploit for php platform in category web applications ================================================================== Oxygen2PHP newGET = $Host; my $HTTP = new LWP::UserAgent; my $Referrer = "http://warwolfz.altervista.org/"; my $DefaultTime = request$Referrer; sub BlindSQLJnjection my $dec,$h...

wireshark -- DOCSIS dissector denial of service

A vulnerability found in the DOCSIS dissector can cause Wireshark to crash when a malformed packet trace file is opened. This means that an attacker will have to trick a victim into opening such a trace file before being able to crash the application...

Maple Maplet File Creation and Command Execution

This module harnesses Maple's ability to create files and execute commands automatically when opening a Maplet. All versions up to 13 are suspected vulnerable. Testing was conducted with version 13 on Windows. Standard security settings prevent code from running in a normal maple worksheet withou...

Mozilla Foundation Security Advisory 2010-21

Mozilla Foundation Security Advisory 2010-21 Title: Arbitrary code execution with Firebug XMLHttpRequestSpy Impact: High Announced: March 30, 2010 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.5.8 Firefox 3.0.19 SeaMonkey 2.0.3 Description Mozilla security researcher...

EFS Easy Chat server Universal BOF-SEH (Meta)

Exploit for unknown platform in category remote exploits ============================================= EFS Easy Chat server Universal BOF-SEH Meta ============================================= $Id: caigatewaydebug.rb 6568 2009-05-19 13:20:32Z hdm $ This file is part of the Metasploit Framework an...

Baby Web Server 2.7.2 - found Denial of Service

Baby Web Server 2.7.2 - found Denial of Service !/usr/bin/env python Author:Asheesh Kumar Mani Tripathi Created:Asheesh Kumar Mani Tripathi import socket print "" print "Baby Web Server 2.7.2 Vulnerbility found Denial of Service" print "Change IP to Victim Server s.connect127.0.0.1,80" print...

Guardian Jobs Site Hacked, Data Stolen

In what is being described as a “deliberate and sophisticated crime,” the Guardian newspaper in the U.K. says the careers section of its Web site was hacked, exposing sensitive data belonging to about half a million users. According to a note posted online by the Guardian: The police remain anxio...

IBM Rational RequisitePro 7.10 / ReqWebHelp - Multiple Cross-Site Scripting Vulnerabilities

Attackers can exploit these issues by enticing an unsuspecting victim into following a malicious URI. The following example URIs are available: http://www.example.com/ReqWebHelp/advanced/workingSet.jsp?operation=add/--/scriptscriptalert289325/script&workingSet=...

Malware Flea Market Pays Hackers to Hijack PCs

Among a slew of online cybercrime forums, Pay-Per-Install.org stands out as a malware flea market where shadowy pushers of Trojan downloaders and tools for evading detection are bargaining with thousands of would-be “affiliates” willing to compromise victims’ computers globally and get paid for i...

Facebook URL Cross Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Facebook XSS URL String Evasion + Author : 599eme Man + Contact : [email protected] + Special Thank : Syltrox66...

KVIrc URI Handler Argument Injection Vulnerability

This host has KVIrc installed and is prone to Argument Injection vulnerability. OpenVAS Vulnerability Test $Id: secpodkvircarginjvulnwin.nasl 5055 2017-01-20 14:08:39Z teissa $ KVIrc URI Handler Argument Injection Vulnerability Authors: Antu Sanadi Copyright c 2009 SecPod, http://www.secpod.com...

55,000 Hacked Sites Serving Malware Cocktail

Security researchers are raising an alarm for a potent malware cocktail — backdoor Trojans and password stealers — being pushed to Windows users from about 55,000 hacked Web sites. According to Mary Landesman, a researcher in ScanSafe’s security threat alert team, the cybercriminals have embedded...

Almnzm 2.0 - Blind SQL Injection

?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . o7 || q||| o///, : / / . /QQQQQQQQQQQQQQQQQQQ\ q Almnzm 2.0 Blind SQL Inj. /QQQ/\QQQ\ /QQQQQ/ \QQQQQQ\ q Cookie 3 /QQQQ/ QQQQ\ /QQQQ/ \QQQQ\ q http://www.almnzm.com |QQQQ/ By Qabandi \QQQQ| |QQQQ| |QQQQ| |QQQQ| From Kuwait, PEACE...

MyEgy Script SQL Injection

MyEgy Explo!t ..style1 text-align: center; function doitsi,co forvar n =1;n My Egy Explo!t By : Karar alShaMi & Sheko Victim: input name="site" type="text" style="width: 253px" value="...

COWON America jetCast 2.0.4.1109 (.mp3) Local Overflow Exploit

Exploit for unknown platform in category local exploits ============================================================== COWON America jetCast 2.0.4.1109 .mp3 Local Overflow Exploit ============================================================== ?php / COWON America jetCast 2.0.4.1109 .mp3 local hea...

Article Directory - 'page.php' Blind SQL Injection

-------------------------------------------------------------- Article Directory page.php Remote Blind SQL Injection Exploit --------------------------------------------------------------- Founder :ThE g0bL!N Home:http://www.yourarticlesdirectory.com Software : Article Directory Thank You Very Mu...

PHP Site Lock 2.0 - Insecure Cookie Handling

-------------------------------------+ Homepage:http://www.kalptarudemos.com Product: PHP Site Lock 2.0 home:www.h4ckf0ru.com ------------------------------------- PHP Site Lock 2.0 Insecure Cookie Handling Vuln ------------------------------------- Exploit: --------...

Destiny Media Player 1.61 PLS M3U Buffer Overflow

This module exploits a stack-based buffer overflow in the Destiny Media Player 1.61. An attacker must send the file to victim and the victim must open the file. File--Open Playlist This module requires Metasploit: https://metasploit.com/download Current source:...

IncrediMail 5.86 Cross Site Scripting

!/usr/bin/perl -w IncrediMail Xe latest version XSS Vulnerability Discovered by : Bui Quang Minh Description : The most of popular Mail Client now exclude Script Code for mail content. It aims to avoid the type of XSS exploitation For e.g: stolen cookie. IncrediMail also remove Script Code when t...

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling

Graugon PHP Article Publisher 1.0 - SQL Injection Cookie Handling 0x01 Informations: Name : Graugon PHP Article Publisher 1.0 Download : http://www.hotscripts.com/listings/jump/download/88458/ Vulnerability : Multiple Sql Injections / Insecure Cookie Handling Author : x0r Contact :...