2721 matches found
Infocus Real Estate Enterprise Edition Script Authentication Bypass
Exploit for php platform in category web applications =================================================================== Infocus Real Estate Enterprise Edition Script Authentication Bypass =================================================================== Authentication bypass in Infocus Real...
New Clickjacking Techniques to Be Revealed
At Black Hat Europe a researcher will demonstrate a new, powerful breed of clickjacking attacks he devised that can bypass newly constructed defenses in browsers and Websites. Read the full article. Dark Readiing...
Multi Profit Websites Local File Inclusion
Local File Inclusion LFI in Multi Profit Websites Multi Profit Websites is a commercial script that is running on multiple domains and they claims that this script earns money for the owner. Vulnerability Local File Inclusion Via URL which can be reproduced by...
Multi Profit Websites Local File Inclusion (LFI)
Exploit for php platform in category web applications ================================================ Multi Profit Websites Local File Inclusion LFI ================================================ Local File Inclusion LFI in Multi Profit Websites Multi Profit Websites is a commercial script tha...
US Tax Season Phishing Scams and Malware Campaigns
In the past, US-CERT has received reports of an increased number of phishing scams and malware campaigns that take advantage of the United States tax season. Due to the upcoming tax deadline, US-CERT reminds users to remain cautious when receiving unsolicited email that could be part of a potenti...
Copyright Infringement Lawsuit Email Scam
US-CERT is aware of public reports of an active email scam. These emails, which appear to come from seemingly legitimate law firms, indicate that someone has filed a copyright lawsuit against the message recipient. The messages may contain malicious attachments or web links. If a user opens the...
[SECURITY] Fedora 12 Update: drupal-6.16-1.fc12
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
Social Pen Testers Highlight Gullible Users
Security B-Sides: Security penetration testers Mike Bailey and Mike Murray rely plenty on attacks that exploit weaknesses in websites and servers, but their approach is better summed up by the famous phrase “There’s a sucker born every minute.” Read the full article. The Register...
CVE-2010-0643
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a prox...
intuitive - 'form.php' SQL Injection
intuitive form.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Script : http://www.intuitive-websites.com/ .:. Bug Type : Sql InjectionMysql .:. Dork : "si...
Pushdo Botnet Making the Rounds
More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers. Read the full article. Security Central...
U.S. Congress Websites Defaced
A number of Congressional websites were defaced with abuse aimed at President Obama following Wednesday’s State of the Union address. Read the full article. The Register...
OpenX Ad Serving SW Attacked
Hackers have exploited flaws in a popular open-source advertising software to place malicious code on advertisements on several popular Web sites over the past week. Read the full article. Computerworld...
QuickHeal AntiVirus 2010 - Local Privilege Escalation
QuickHeal AntiVirus 2010 - Local Privilege Escalation Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The...
VideoCache 1.9.2 vccleaner root vulnerability
==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...
QuickHeal Antivirus 2010 Privilege Escalation
Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction ===============...
QuickHeal AntiVirus 2010 - Local Privilege Escalation
Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction ===============...
Uploadscript 1.0 Disclosure / Shell Upload
Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...
Uploadscript v1.0. Multiple Vulnerabilities
No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...
Uploadscript v1.0. Multiple Vulnerabilities
Exploit for unknown platform in category web applications =========================================== Uploadscript v1.0. Multiple Vulnerabilities =========================================== How to use it ? ----------------- Go to : http://site/path/password.txt You will find a Hashmd5 password !...