Sql injection

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

The CVE-2010-4829 issue affects Techno Dreams (T-Dreams) Cars Ads Package 2.0, specifically the processview.asp component. The vulnerability is a SQL injection via the key parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the proc...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

CVE-2011-1223

CVE-2011-1223 describes a buffer overflow in the Alternate Data Stream (ADS) / named stream handling of the IBM Tivoli Storage Manager (TSM) backup-archive client on Windows. The vulnerability affects multiple product branches: TSM client versions before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6....

File Transit Inc. Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title:File Transit Inc. persistent XSS vulnerability Vendor: www.filetransit.com Author: $4d0//r007k17 a.k.a Raghavendra Karthik D [email protected] Google Dork: File Transit...

SEO Poisoning Campaign Infecting Users With Black Hole Exploit Kit

Researchers have found a new black hat SEO campaign that is being used to redirect users to links that will install the Black Hole exploit kit. The attack is based on searches for, of all things, Shia Labeouf, and leads users through a forest of redirects before plopping them on the compromised...

Callisto 821+ Cross Site Request Forgery / Cross Site Scripting

Hello list! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...

Report: Google May Face $500m Fine Over Rogue Pharma Ads

The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...

XSS in CLASSIFIED ADS

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

Classifieds Ads 2.9.1 Cross Site Scripting

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

Classified Ads PLUS Scripts SQL Injection

Exploit Title : Classified Ads PLUS Scripts Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 05-04-2011 + Software Link: http://www.softbizscripts.com/classified-ads-plus-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Malicious Ads Serving Malware to Spotify Users

Users of free music streaming service, Spotify are reporting that they have been the victims of drive-by malware attacks according to a report from Netcraft. The attacks appear to be coming from third party advertisements which are displayed in the ad-supported version of Spotify’s software. By...

Step 7: Practice Safe Browsing

Rogue antivirus and scareware typically requires user interaction to get a toe hold on victims’ computers. Users can protect themselves by steering clear of suspicious or merely opaque links such as the shortened links common on Twitter and other social media platforms. Beware of pop-up ads warni...

London Stock Exchange website gets hacked with Malware Ads !

London Stock Exchange website gets hacked with Malware Ads ! THE LONDON STOCK EXCHANGE LSE website has been bombarded with fake insecurity software adverts that point to malware. It seems that dodgy security ads have been unknowingly hosted at the LSE website for at least a few months. An analysi...

Hackers Insert Rogue Content on Al Jazeera Arabic Website !

Al-Jazeera said that hackers have managed to bring the rogue content to some of its Arabic website for ads aimed at discrediting the objectivity of its coverage of Egyptian protests. "Hackers have managed to bring the portion of the advertising instead ajjazeera.net distort the network news...

Fake AVG: Scam Software Cops Name and Logo of Real AV

We’ve noted for a while that the practices of rogue antivirus software have started to mimic those of legitimate antivirus software vendors. But a new version of FakeXPA scareware take things a bit further: posing as a legitimate commercial AV package, AVG Antivirus 2011. Microsoft’s Malware...

PHP Classified ads software (cid) Blind SQL Injection Vulnerability

Exploit for php platform in category web applications == -Author: BorN To K!LL - h4ck3r -Contact: email protected == -Script: PHP Classified ads software -Version: n/a -Link: http://www.softbizsolutions.com/classified-ads-software.php == -3xploit: path/browsecats.php?cid=Blind-Injection -3xample:...