PT-2011-1846

Name of the Vulnerable Software and Affected Versions PHP Classifieds Ads affected versions not specified Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the sid parameter in the "classi/detail.php" file. Recommendations At the moment, there i...

Researchers Find Ads on Bing, Yahoo Leading to Malware Downloads

Searching on the Internet is fun. You can find videos of cats making meatloaf, cats playing the hammer dulcimer and cats reading Shakespeare while juggling eggs. Oh, and you can find malware, too. Lots of malware. Researchers at GFI Labs are good at finding that malware, and they’ve come across a...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

Sql injection

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

CVE-2010-4829

The CVE-2010-4829 issue affects Techno Dreams (T-Dreams) Cars Ads Package 2.0, specifically the processview.asp component. The vulnerability is a SQL injection via the key parameter, enabling remote attackers to execute arbitrary SQL commands. This is caused by improper input handling in the proc...

PT-2011-1765

Name of the Vulnerable Software and Affected Versions Techno Dreams T-Dreams Cars Ads Package version 2.0 Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the key parameter in the "processview.asp" file. Recommendations For version 2.0, conside...

CVE-2010-4829: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in processview.asp in Techno Dreams T-Dreams Cars Ads Package 2.0 allows remote attackers to execute arbitrary SQL commands via the key parameter...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

CVE-2011-1223

CVE-2011-1223 describes a buffer overflow in the Alternate Data Stream (ADS) / named stream handling of the IBM Tivoli Storage Manager (TSM) backup-archive client on Windows. The vulnerability affects multiple product branches: TSM client versions before 5.4.3.4, 5.5.x before 5.5.3, 6.x before 6....

File Transit Inc. Cross Site Scripting

%+ $...............4.........|........0............// %+ %+ %+ %++++++++++++++++++++++++++++++++++++++++ Exploit Title:File Transit Inc. persistent XSS vulnerability Vendor: www.filetransit.com Author: $4d0//r007k17 a.k.a Raghavendra Karthik D [email protected] Google Dork: File Transit...

SEO Poisoning Campaign Infecting Users With Black Hole Exploit Kit

Researchers have found a new black hat SEO campaign that is being used to redirect users to links that will install the Black Hole exploit kit. The attack is based on searches for, of all things, Shia Labeouf, and leads users through a forest of redirects before plopping them on the compromised...

Callisto 821+ Cross Site Request Forgery / Cross Site Scripting

Hello list! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough at...

Report: Google May Face $500m Fine Over Rogue Pharma Ads

The Wall Street Journal is reporting that search giant Google is close to reaching a settlement with the U.S. Justice Department over an investigation of the company’s policy of running ads from online pharmacies that operate outside U.S. borders and in violation of U.S. law. Google has not made ...

XSS in CLASSIFIED ADS

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

Classifieds Ads 2.9.1 Cross Site Scripting

Product: CLASSIFIED ADS Vendor: http://www.got.my http://www.got.my/CLASSIFIED-ADS/ Vulnerable Version: 2.9.1 Vulnerability Type: XSS Cross Site Scripting Risk level: Medium Credit: Hector.x90 Vulnerability Details: User can execute arbitrary JavaScript code within the vulnerable application. The...

GoT.MY (Multiple Products) - theme_dir Cross-Site Scripting

GoT.MY Multiple Products - themedir Cross-Site Scripting source: https://www.securityfocus.com/bid/47702/info Multiple GoT.MY products are prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in...

TextAds 2.08 Cross Site Scripting

=========================================================================== TextAds 2.08 Script Cross Site Scripting Vulnerability =========================================================================== Name: TextAds 2.08 Script Cross Site Scripting Vulnerability Vendor:...

Classified Ads PLUS Scripts SQL Injection

Exploit Title : Classified Ads PLUS Scripts Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 05-04-2011 + Software Link: http://www.softbizscripts.com/classified-ads-plus-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Malicious Ads Serving Malware to Spotify Users

Users of free music streaming service, Spotify are reporting that they have been the victims of drive-by malware attacks according to a report from Netcraft. The attacks appear to be coming from third party advertisements which are displayed in the ad-supported version of Spotify’s software. By...