2735 matches found
[SECURITY] Fedora 12 Update: drupal-6.16-1.fc12
Equipped with a powerful blend of features, Drupal is a Content Management System written in PHP that can support a variety of websites ranging from personal weblogs to large community-driven websites. Drupal is highly configurable, skinnable, and secure...
Social Pen Testers Highlight Gullible Users
Security B-Sides: Security penetration testers Mike Bailey and Mike Murray rely plenty on attacks that exploit weaknesses in websites and servers, but their approach is better summed up by the famous phrase “There’s a sucker born every minute.” Read the full article. The Register...
CVE-2010-0643
Google Chrome before 4.0.249.89 attempts to make direct connections to web sites when all configured proxy servers are unavailable, which allows remote HTTP servers to obtain potentially sensitive information about the identity of a client user via standard HTTP logging, as demonstrated by a prox...
intuitive - 'form.php' SQL Injection
intuitive form.php Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Home : www.sec-attack.com/vb Sec Attack Team .:. Script : http://www.intuitive-websites.com/ .:. Bug Type : Sql InjectionMysql .:. Dork : "si...
Pushdo Botnet Making the Rounds
More than 300 Web sites are being pestered by infected computers that are part of the Pushdo botnet, according to security researchers. Read the full article. Security Central...
U.S. Congress Websites Defaced
A number of Congressional websites were defaced with abuse aimed at President Obama following Wednesday’s State of the Union address. Read the full article. The Register...
OpenX Ad Serving SW Attacked
Hackers have exploited flaws in a popular open-source advertising software to place malicious code on advertisements on several popular Web sites over the past week. Read the full article. Computerworld...
QuickHeal Antivirus 2010 Privilege Escalation
Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction ===============...
QuickHeal AntiVirus 2010 - Local Privilege Escalation
QuickHeal AntiVirus 2010 - Local Privilege Escalation Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The...
QuickHeal AntiVirus 2010 - Local Privilege Escalation
Application: QuickHeal antivirus 2010 Local Privilege Escalation Platforms: Windows Vista SP2 Exploitation: Local Privilege Escalation Date: 2009-12-16 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code N/A =============== 1 Introduction ===============...
VideoCache 1.9.2 vccleaner root vulnerability
==== SYNOPSIS ===================================================== VideoCache is a Squid URL rewriter plugin written in Python for bandwidth optimization while browsing video sharing websites. Version 1.9.2 allows a user with the privileges of the Squid proxy server to append semi-arbitrary data...
Uploadscript 1.0 Disclosure / Shell Upload
Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...
Uploadscript 1.0 - Multiple Vulnerabilities
Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ / \ / \ | | |/ | | | Y Y | V\ / Y| |...
Uploadscript v1.0. Multiple Vulnerabilities
Exploit for unknown platform in category web applications =========================================== Uploadscript v1.0. Multiple Vulnerabilities =========================================== How to use it ? ----------------- Go to : http://site/path/password.txt You will find a Hashmd5 password !...
Uploadscript v1.0. Multiple Vulnerabilities
No description provided by source. Exploit Title: Uploadscript v1.0. Multiple Vulnerabilities Date: 13-12-2009 Author: Mr.aFiR Software Link: http://www.phpstudio.hu/?action=verify&categorize=php&subaction=php&context=php&ID=75&verify=0 Version: N/A Tested on: GNU/LINUX CVE : N/A Code : N/A / \ /...
Free ASP Upload - Arbitrary File Upload
/ \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ? ----------------- Go to :...
Free ASP Upload Shell Upload Vulnerability
No description provided by source. / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ?...
Free ASP Upload - Arbitrary File Upload
Free ASP Upload - Arbitrary File Upload / \ / \ / \ | | |/ | | | Y Y | V\ / Y| || |/ / A ||| \ | | | | || || \ // \ | | | || | | |/ |/|/ |/ Free ASP Upload Shell Upload Vulnerability Created By Mr.aFiR Moroccan Hacker Email: [email protected] Website: www.aFiR.me c -- 10/12/2oo9 How to use it ?...
Top Botnets By Name, Size And Scope
Botnets – apart from inundating out inboxes with spam – can also be used for ulterior purposes such as executing DDoS attacks or hosting websites, so understanding the “modus operandi” and size behind the well-known names is a good idea; Here’s a top ten botnet list. Read the full article. Help N...
Attackers and Phishers Still Winning the War
The United States may be falling perilously behind on science and engineering education, but that’s nothing compared to how poorly we’re doing on social engineering education. Social engineering known as “lying” in the real world is perhaps the oldest attack technique on the Internet. It’s been i...