1864 matches found
Xtemplate Shell Upload
Exploit Title: Xtemplate shell upload Date: 4/6/12 Author: Th3-Skywalk3r Email : [email protected] Category:: webapps Google dork: /xtemplates/eng/ Tested on: Windows 7 & BT5r2 Demo site: http://www.deadseashop.co.il/inc/xtemplates/eng/fileedit.php...
Like Those Wikipedia Ads? They Mean You're Infected With Malware!
The Wikimedia Foundation is warning its millions of visitors that if they’re seeing ads appearing on any of the Foundation’s Web sites, then their computer is probably infected with malware. The Foundation issued a statement on Monday clarifying that it never runs ads on the Web site for Wikipedi...
update for samba (important)
docs-xml: fix default name resolve order; bso7564. - s3-aio-fork: Fix a segfault in vfsaiofork; bso8836. - docs: remove whitespace in example samba.ldif; bso8789. - s3-smbd: move printbackendinit behind initsysteminfo; bso8845. - s3-docs: Prepend '/' to filename argument; bso8826. - Restrict self...
Car Portal CMS 3.0 - Multiple Vulnerabilities
Car Portal CMS 3.0 - Multiple Vulnerabilities Title: ====== Car Portal CMS v3.0 - Multiple Web Vulnerabilities Date: ===== 2012-04-24 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=502 VL-ID: ===== 502 Introduction: ============= Car Portal is a php software product fo...
Deceptive In-App Ads Hit Users of Draw Something
I really like the new app by OMGPOP called Draw Something. I play this game with my friends possibly a little too much. Draw Something has attracted more than 50 million downloads, and was just acquired by Zynga for $200 million dollars. It was surprising the other day when I noticed an...
SEO classified Ads Script CSRF Vulnerability
Exploit for php platform in category web applications Exploit Title: SEO classified Ads Script CSRF Author: Jonturk75 Category:: webapps Demo : http://demos1.softbiz.com/scripts/seoclassifieds/admin/ Greetz: Inj3ct0r Exploit DataBase 1337day.com 0day.today 2018-04-03...
Google to Revise Privacy Policy, Terms of Service, Users Can't Opt Out
Google announced Tuesday that it will revamp its privacy policy and terms of service, boiling more than 60 privacy policies down to one comprehensive document that will extend across most of their products. Under the new policy all information entered by users via Google will be indexed together...
US Congressmen Call Foul on Facebook's Tracking Methods
Two congressmen have accused Facebook of dodging questions about whether it tracks the activity of its 800 million members. On Monday, Representatives Ed Markey D-Mass and Joe Barton R-Tex. questioned the reasoning behind a recent patent application by the site that suggests it may use informatio...
FTC Gives Refunds to Rogue Antivirus Victims
The Federal Trade Commission FTC is sending reimbursement checks to more than 300,000 people victimized by a rogue antivirus scam. According to the FTC, the checks are the result of the settlement between the agency and several defendants named in a complaint the FTC filed in 2008. As part of the...
Sql injection
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...
CVE-2010-4975
SQL injection vulnerability in the Techjoomla SocialAds For JomSocial comsocialads component for Joomla! allows remote attackers to execute arbitrary SQL commands via the ads description field in a showad action to index.php...
Microsoft's official Youtube channel hacked
Microsoft's official Youtube channel hacked It appears that someone has hacked into Microsoft's account on Youtube and removed all videos. As can be seen in the picture, there are currently no videos at all anymore see the red arrow in the screenshot and the comment about the website is not "Wish...
An Inside Look at Criminal Shipping Operations
Cyber criminals are relying more than ever on mules to move fenced goods from the U.S. to foreign markets for resale, according to a report on krebsonsecurity.com. With online retailers cracking down on fraudulent purchases, criminal gangs are using networks of complicit or unwitting citizens to...
Malicious Ads on Bing Lead to ZeroAccess Trojan
Search-engine poisoning has been the bane of many Internet users’ existence for a long time, and it’s one of many security problems that seems to not be getting any better. In some ways, it may be getting worse, actually. One of the main problems these days is the use of legitimate-looking ads th...
CVE-2010-4911
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...
Sql injection
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4911
SQL injection vulnerability in classi/detail.php in PHP Classifieds Ads allows remote attackers to execute arbitrary SQL commands via the sid parameter...
CVE-2010-4911
CVE-2010-4911 : The vulnerability affects PHP Classifieds Ads, specifically the file component classi/detail.php. It is a SQL injection vulnerability exploitable via the sid parameter, enabling remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affec...
Researchers Find Ads on Bing, Yahoo Leading to Malware Downloads
Searching on the Internet is fun. You can find videos of cats making meatloaf, cats playing the hammer dulcimer and cats reading Shakespeare while juggling eggs. Oh, and you can find malware, too. Lots of malware. Researchers at GFI Labs are good at finding that malware, and they’ve come across a...