[SECURITY] Fedora 12 Update: mediawiki-1.15.4-54.fc12

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Education WebSites CMS SQL Injection

Exploit Title: Education WebSites CMS Sql Injection Vulnerability Author: Pokeng Software Link: http://educationwebsites.net/creating.html Platform / Tested on: Win/Linux category: webapps/0day Code : http://site/mod.php?mod=publisher&op=viewcat&cid=SQLI Dork : ""Hosting: Education WebSites""...

CMS/Websites Designed By HYM SQL Injection

Exploit Title: SQLi to CMS/websites designed by HYM ================================================================ Websites designed or CMS provided by HYM is vulnerable to sqli. HYM is from 1998, they provide services in online tech and software.They provide CMS and Rankstinger...

CMS IneDuCom SQL Injection

Exploit Title: SQLi to CMS IneDuCom ================================================================ Websites designed or CMS provided by HYM is vulnerable to sqli. HYM is from 1998, they provide services in online tech and software.They provide CMS and Rankstinger...

Webring Script - SQL Injection

Webring Script - SQL Injection 1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:The webring service SQL Injection Vendor url:http://getaphpsite.com...

Webring Script - SQL Injection

1 1 0 I'm L0rd CrusAd3r member from Inj3ct0r Team 1 1 0 0-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=1 Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:The webring service SQL Injection Vendor url:http://getaphpsite.com Version:1 Price:20$ Published:...

EFF and Tor Launch HTTPS Everywhere Firefox Extension

Two prominent privacy-rights organizations, the Tor Project and the Electronic Frontier Foundation, have launched a new Firefox extension that encrypts all of the browser’s communications with some prominent Web sites. The extension, called HTTPS Everywhere, is designed to create secure HTTPS...

Tool Expoits Data Flaws in JavaServer Faces

Researchers have released software that exposes private information and executes arbitrary code on sensitive websites by exploiting weaknesses in the widely used web development technology JavaServer Faces. Read the full article. The Register...

Check if DNS client is active and working

This plugin uses SSH to check if a DNS client is active and working. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting

ReVou Twitter Clone 2.0 Beta - SQL Injection Cross-Site Scripting Title:reVou twitter clne Beta 2.0 sqli and Xss vulnerability Author: Sid3^effects Published: 2010-06-06 price:$99 email:[email protected] vendor: Revou url : http://www.revou.com/demo/home ooooo .oooooo. oooooo oooooo oooo 888' d8...

Apple Safari Flaw from 2008 Still Open

After more than two years, Apple’s Safari browser for Macs remains vulnerable to attacks that allow websites to litter a user’s hard drive with thousands of malicious files. The “carpet bomb” vulnerability was publicly disclosed in May 2008 after members of Apple’s security team said they didn’t...

Shop Script SQL Injection

Exploit Title: Shop Script SQL Injections Vulnerability Type : PHP Date: 23-05-2010 Author: fatal.001 Dork: inurl:"step1.php?number=" Or Dork: inurl:"/shop/step1.php?number=" http://crobidolls.com/shop/step1.php?number=1186' http://www.dimdoll.com/shop/step1.php?number=222'...

DDoS Suspect Who Caused Conservative Havoc Charged

Federal prosecutors have accused a man of carrying out a series of botnet offenses including attacks that brought down the websites of conservative talking heads Bill O’Reilly, Ann Coulter and Rudolph Giuliani. Read the full article. The Register...

B-Hind CMS Remote File Upload

Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be adjusted bya simple double click on the text or title in...

B-Hind CMS (tiny_mce) - Arbitrary File Upload

B-Hind CMS tinymce - Arbitrary File Upload Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: innrwrld & h00die DESCRIPTION by vendor: B-interference Lite is a simple CMS for small websites. Ideal for local merchants or organizations. The content of page can be...

B-Hind CMS (tiny_mce) Remote File Upload

Exploit for php platform in category web applications ======================================== B-Hind CMS tinymce Remote File Upload ======================================== Title: B-Hind CMS tinymce Remote File Upload Vendor: http://www.b-hind.eu/ AUTHOR: innrwrld & h00die DESCRIPTION by vendor:...

LinPHA 1.3.2 - rotate.php Remote Command Execution

LinPHA 1.3.2 - rotate.php Remote Command Execution /'\ /\ \ /'\ /\ /\/\L\ \ \ \ ,/\ /\ \ /\ \ /' \ /\ //\ /'\ \ /\ \ \ \ /'\ /'\ / \ /' \ \ \ /\ /\ \ \ \ /\ \L\ /\ /\ \ \ \ \ \ \ / /\ //\ \L\ /\ /\ /\ \ \ \ \ \\ \ \ /\ \\ \\ /\ \ /\ \ /\ \ \ \ //////\ \ //...

29o3 CMS (LibDir) Multiple RFI Vulnerability

Exploit for php platform in category web applications ============================================ 29o3 CMS LibDir Multiple RFI Vulnerability ============================================ 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, ...

Treasury Websites Hacked, Redirect to Malware

Websites operated by the US Treasury Department are redirecting visitors to websites that attempt to install malware on their PCs, a security researcher warned. Read the full article. The Register...

Opera 10.x Content Writing Uninitialised Memory Vulnerability

A vulnerability has been discovered in Opera, which can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to an error when e.g. continuously writing content to a page using document.write and results in a function call using uninitialised memory when ...