X7 Chat 2.0.5.1 CSRF Add Admin Exploit

Exploit for php platform in category web applications Exploit Title: X7 Chat 2.0.5.1 CSRF Add Admin Exploit Google Dork: intitle:"Chat Room" "Powered By X7 Chat 2.0.5" Date: 09.05.2012 Author: DennSpec Software Link: http://x7chat.com/releases/v2/x7chat2051.zip Version: Replace...

DNS zone transfer exploit and fix-vulnerability warning-the black bar safety net

In fact, the use of the method is divided into manual and tool two, we can use BT5 the following tools Dnsenum or other tools, hand while you use the nslookup. 1, Using the tool to get DNS information cd /pentest/enumeration/dns/dnsenum ./ dnsenum.pl --enum domain.com This can be simple to make u...

Skype Vulnerability Exposing User IP Addresses

Skype Vulnerability Exposing User IP Addresses Skype is warning users following the launch of a site devoted to harvesting user IP addresses.The Skype IP-Finder site allowed third-parties to see a user's last known IP address by simply typing in a user name. A script has been uploaded to Github...

Malware Poses as US Department of Justice Violation Notice

Posing as the US Department of Justice DoJ, a new variant of the Citadel Malware called Reveton is responsible for a ransomware campaign that attempts to extort $100 from its victims. The infections are occurring after users are lured to a drive-by download site where a dropper installs the Citad...

Shoot off piikee auction website system injection vulnerability and fix-vulnerability warning-the black bar safety net

Because there are no manufacturers, just write a bidding system to it, came out good to With this system webmasters mind you. The system is called: shoot off piikee auction website system Why say 2B? The reception is all the files the parameter values are such, we see this code newsarc.php ? php...

PageAdmin XSS vulnerability-vulnerability warning-the black bar safety net

A station in the fall, all stations are to perish XSSWe are not very concerned?? http://www.pageadmin.net/e/info/suc.aspx?code=%3Cscript%3Ealert'hacked%20by%20wing'%3C/script%3E Excerpts from:...

Discuz! X2. 5 remote code execution vulnerability warning and EXP[XDAY]-vulnerability warning-the black bar safety net

See discuz dede what vulnerabilities just mental, ha ha...... The process is simple to say, remember a bit of a mess not posted too much code. diff see balabalabala..... if! defined'INDISCUZ' @@ -89,7 +89,7 @@ if$searcharray && $replacearray - $content = pregreplace"/a\s+.?& gt;.?& lt;/a|img\s+.?...

Quick.Cart 5.0 Information Disclosure

TITLE ....... Information disclosure in Quick.Cartv5.0 ............ DATE ........ 18.03.2012 .......................................... AUTOHR ...... http://hauntit.blogspot.com ......................... SOFT LINK ... http://http://opensolution.org/ .................... VERSION...

Hacker deface T&T Parliament website to warn about security holes

Hacker deface T&T Parliament website to warn about security holes The Government's parliamentary website, www.ttparliament.org, was taken offline yesterday after a computer software hacker apparently breached the security codes of the site and left a mischievous message announcing the security...

Most soil group purchase network to BYPASS the login background 0day-vulnerability warning-the black bar safety net

1: The 后台 地址 manage/login.php 2. Right-view the source code. Find the following code: divlabelfor="manage-login"login/labelinputtype="text"size="3 0"name="username"id="manage-username"datatype="require"require="true"//div 3. Which will be name="username" was changed to: name="username=0x7c or...

NetworX CMS-CSRF flaws add administrator accounts-vulnerability warning-the black bar safety net

Title: NetworX CMS - CSRF Add Admin Author: N3t. Crack3r Program address: http://www.socialabc.com/downloads/networx-social/ Affect all versions Test System Platform: Ubuntu Demo Station: http://www.socialabc.com/demo/ !--...

A simple file extension authentication bypass techniques-vulnerability warning-the black bar safety net

Mining the web application 0day the most effective and most direct way is directly from the file operation function to start with, my personal preference first took a fancy to pass the class code, The this article to a simple tips. Of course skill is not entirely original, is by learning someone...

joomla component The Estate Agent (com_estateagent) SQL injection and fix-vulnerability warning-the black bar safety net

Title: joomla component comestateagent SQL injection Vulnerability Author: xDarkSton3x [email protected] Test system platforms: linux + windows Developer: http://www.eaimproved.eu/index.php Test: http://www.badguest.cn/index.php?option=comestateagent&Itemid=4 7&act=object&task=showEO&id=sqli...

ewebeditor(PHP) Ver 3.8 arbitrary file upload 0day-vulnerability warning-the black bar safety net

titleeWebeditoR3. 8 for php any file on the EXP/title form action=”" method=post enctype=”multipart/form-data” INPUT TYPE="hidden" name="MAXFILESIZE" value="5 1 2 0 0 0" URL:input type=text name=url value=”http://www.sitedirsec.com/ewebeditor/” size=1 0 0br INPUT TYPE=”hidden” name=”aStyle1 2”...

TOM Online WEB mailbox the presence of multiple CSRF vulnerabilities and fixes-vulnerability warning-the black bar safety net

For contains a picture of the accessory, a request to Annex when the Referer will be exposed to the current sid, for example: GET /mblogpic/be654a34c8f4aad1ec6a/2 0 0 0 HTTP/1.1 Host: t100. qpic. cn Connection: keep-alive Cache-Control: max-age=0 If-Modified-Since: Mon, 0 6 Apr 2 0 1 2 1 4:0 0:0 ...

PHPmyadmin 2.11. 3 and 2. 1 1. 4 universal password vulnerability-vulnerability warning-the black bar safety net

Affected versions: PHPmyadmin 2.11.3 PHPmyadmin 2.11.4 Both versions have this vulnerability Only need to enter the account password does not need to input Use the code as follows:‘localhost’@'@” !...

SiteEngine 7.1 members to upload WEBSHELL vulnerability 0DAY-vulnerability warning-the black bar safety net

Author:hackdn Reprinted indicate the zend encoding and decryption is not complete, do not bother to look at the code, use a Tamper or the like of the plug-in test of the POST parameters, it's$sFile = $oFile'name';filtering too fool, looks like the 5th version after you modify a function. This is ...

discuz! X1. 0 – X1. 5 Blind SQL injection exploit & Get Shell-vulnerability warning-the black bar safety net

Exploit Title: discuz! X1. 0 - X1. 5 Blind SQL injection exploit &Get Shell Date: 06-04-2012 Author: Hacker-Fire Category:: webapps Google dork: Powered by Discuz Tested on: Windows 7 P0c : ? Php printr ' + ------------------------------------------------- -------------------------- + Discuz! 1-1...

A domain name is a virtual host distribution management system 0day-vulnerability warning-the black bar safety net

google search: inurl:help/notice. asp? nid= Placed directly into the injection tool is injected directly can wait until the DBOWNER Background setinmanager Table name segment does not tell you! You guys are hackers you know. Nerve haha...

Hishop 5.4 & 5.4.1 SQL injection-vulnerability warning-the black bar safety net

Exploit Title: Hishop 5.4 &5.4.1 SQL injection Date: 06-04-2012 Author: Hacker-Fire Vendor orSoftware Link: http://www.hishop.com.cn/bbs/thread-htm-fid-13.html Version: 5.4 & 5.4.1 Category:: webapps Google dork: intext:Hishop 5.4 Tested on: Windows 7 P0c : ? Php printr ' +...