Uploadscript 1.0 - Multiple Vulnerabilities

Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...

Free ASP Upload - Arbitrary File Upload

Free ASP Upload - Arbitrary File Upload / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ?...

Free ASP Upload Shell Upload Vulnerability

No description provided by source. / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ?...

Free ASP Upload - Arbitrary File Upload

/ \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ? ----------------- Go to :...

Top Botnets By Name, Size And Scope

Botnets – apart from inundating out inboxes with spam – can also be used for ulterior purposes such as executing DDoS attacks or hosting websites, so understanding the “modus operandi” and size behind the well-known names is a good idea; Here’s a top ten botnet list. Read the full article. Help N...

Attackers and Phishers Still Winning the War

The United States may be falling perilously behind on science and engineering education, but that’s nothing compared to how poorly we’re doing on social engineering education. Social engineering known as “lying” in the real world is perhaps the oldest attack technique on the Internet. It’s been i...

Quick.Cart 3.4 and Quick.CMS 2.4 CSRF Vulnerabilities

No description provided by source. Systems Affected: Quick.Cart 3.4 other versions untested, Quick.CMS 2.4 other versions untested Severity: Medium Vendor: http://opensolution.org/ Author: Alice Kaerast 0. Timeline 25-10-2009 Vulnerability discovered 26-10-2009 Vendor contacted 23-11-2009 No...

Facebook XXX Worm Replaces Profiles

Security researchers have identified a new worm spreading across Facebook, luring people out to adult Web sites and automatically replicating itself across people’s profile pages. Read the full article. internetnews.com...

SEO Scareware Campaign Compromises 200K Websites

Security researchers have detected a massive blackhat SEO search engine optimization campaign consisting of over 200,000 compromised web sites, all redirecting to fake security software Inst58s6.exe, commonly referred to as scareware. The massive blackat SEO campaign has been launched by the same...

Twitter API Being Exploited by Drive By Malware

Drive-by exploit writers have been spotted using a popular Twitter command to send web surfers to malicious sites, a technique that helps conceal the devious deed. According to researcher Denis Sinegubko, it’s being added to heavily obfuscated redirection scripts injected into compromised website...

Nigeria Moving to Shut Down Scammers

It turns out Nigeria is taking measures to fight Internet scams—law enforcement there has shut down close to a thousand websites and made 18 arrests as part of a new initiative to save the nation’s reputation and crack down on Internet scammers. The program, called “Project Eagle Claw,” has only...

nginx Proxy DNS Cache Domain Spoofing Vulnerability

The 'nginx' program is prone to a vulnerability that may allow attackers to spoof domains because the software fails to properly compare domains when referencing an internal DNS cache. This issue can be exploited when nginx is configured to act as a forward proxy, but this is a nonstandard and...

Microsoft Takes Aim at Malvertising Threat

Less than a week after a malicious advertising attack against the New York Times ad servers, Microsoft filed five civil lawsuits against companies allegedly using online advertising to serve malware. The lawsuits allege that individuals using the business names “Soft Solutions,” “Direct Ad,”...

ChartDirector 5.0.1 - 'cacheId' Arbitrary File Disclosure

==================================================== Advisory No.: ISNSC-0910 ============= ChartDirector Critical File Access Information ====== Author: DokFLeed Program Affected: http://www.chartdir.com for .NET Version: 5.0.1 Severity: Critical. Type of Advisory: Mid Disclosure. Affected/Teste...

FreeSchool 1.1.0 Remote File Inclusion

x FreeSchool = 1.1.0 Mutiple Remote File Include Vulnerability ! Download Script : http://sourceforge.net/projects/freeschool/files/ ! Author : cr4wl3r ! Contact : cr4wl3r4tlinuxmaildotorg ! Location : Gorontalo - INDONESIA ! Dork : "FuCk y0u MaLaYsia" x 3xplo!t :...

55,000 Hacked Sites Serving Malware Cocktail

Security researchers are raising an alarm for a potent malware cocktail — backdoor Trojans and password stealers — being pushed to Windows users from about 55,000 hacked Web sites. According to Mary Landesman, a researcher in ScanSafe’s security threat alert team, the cybercriminals have embedded...

Mitigating Web-Based Malware Attacks

In this Google Tech Talk, Neil Daswani, founder of Dasient and a former Google engineer, discusses the recent epidemic of attacks featuring legitimate Web sites that have been compromised by malware and what can be done to combat the threat...

Solo Artist SQL Injection

Title : solo artist websites Remote SQL injection Software : solo artist websites vendor : LIGiclee.com OrderPage : http://webspaceforart.com/index.php Date : 08/13/2009 Indonesia Author : S3T4N Contact : rootatsux0r.net Blog : http://sux0r.net oVulnerable file index.php o Dork intext:Powered by...

[SECURITY] Fedora 10 Update: mediawiki-1.15.1-48.fc10

MediaWiki is the software used for Wikipedia and the other Wikimedia Foundation websites. Compared to other wikis, it has an excellent range of features and support for high-traffic websites using multiple servers This package supports wiki farms. Copy /var/www/wiki over to the desired wiki...

Siteframe CMS 3.2.x SQL Injection/phpinfo() Multiple Vulnerabilities

Exploit for unknown platform in category web applications ==================================================================== Siteframe CMS 3.2.x SQL Injection/phpinfo Multiple Vulnerabilities ====================================================================...