CVE-2010-4685: Improper Certificate Validation

Cisco IOS before 15.01XA1 does not clear the public key cache upon a change to a certificate map, which allows remote authenticated users to bypass a certificate ban by connecting with a banned certificate that had previously been valid, aka Bug ID CSCta79031...

Hacker Poses as Graduate, Hacks Student Emails, Faces Legal Consequences

A hacker who posed as a university graduate to access the emails of hundreds of students has been given a suspended prison sentence and ordered to pay more than £20,000 in costs and compensation. Daniel Woo, a 23-year-old Bulgarian national, was sentenced for offenses under the Misuse of Computer...

В Швеции появится первый в мире пиратский провайдер

Пиратская партия Швеции станет первым в мире "пиратским" интернет-провайдером, пишет TorentFreak. Партнером Пиратской партии по организации доступа пользователей в Сеть станет провайдер ViaEuropa. Предполагается, что новая компания PirateISP, во главе которой находится член Пиратской партии Густа...

Diferior CMS 8.03 Cross Site Request Forgery

Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Diferior CMS 8.03 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Change...

Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities

Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Diferior CMS 8.03...

Diferior CMS 8.03 Multiple CSRF Vulnerabilities

Exploit for php platform in category web applications =============================================== Diferior CMS 8.03 Multiple CSRF Vulnerabilities =============================================== Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download:...

Diferior CMS 8.03 - Multiple Cross-Site Request Forgery Vulnerabilities

Date: Tue 13 Jul 2010 11:50:32 AM EEST Vendor: http://diferior.com/ Download: http://diferior.com/postfiles/news/diferior-8-03-released/Diferiorv8.03.tar.gz --- -= CSRF PoC 1 - Change Admin Password =- Diferior CMS 8.03 Multiple CSRF Vulnerabilities - Change Admin Password -= CSRF PoC 2 - Change...

I-net Multi User Email Script SQLi Vulnerability

I-net Multi User Email Script SQLi Vulnerability. Webapps exploit for linux platform Name : I-net Multi User Email Script SQLi Vulnerability Date : june, 27 2010 Critical Level : HIGH Vendor Url : http://www.i-netsolution.com/ Google Dork: inurl:/jobsearchengine/ Author : Sid3^effects aKa HaRi...

CVE-2010-0637

Multiple cross-site request forgery CSRF vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that 1 delete an event or 2 ban an IP address from posting via unknown vectors. NOTE: some of these...

CVE-2010-0637: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in WebCalendar 1.2.0, and other versions before 1.2.5, allow remote attackers to hijack the authentication of administrators for requests that 1 delete an event or 2 ban an IP address from posting via unknown vectors. NOTE: some of these...

SHOUTcast Server Version <= 1.9.8/win32 CSRF Vulnerability

Exploit for unknown platform in category web applications ========================================================== SHOUTcast Server Version = 1.9.8/win32 CSRF Vulnerability ========================================================== Exploit Title: HOUTcast Server Version = 1.9.8/win32 Cross Site...

SHOUTcast Server 1.9.8Win32 - Cross-Site Request Forgery

SHOUTcast Server 1.9.8Win32 - Cross-Site Request Forgery Exploit Title: HOUTcast Server Version Software Link: http://www.shoutcast.com/download Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole...

SHOUTcast Server 1.9.8/Win32 - Cross-Site Request Forgery

Exploit Title: HOUTcast Server Version Software Link: http://www.shoutcast.com/download Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole Subnet Ex: IP: p1.p2.p3.0-255...

HOUTcast 1.9.8/Win32 Cross Site Request Forgery

Exploit Title: HOUTcast Server Version Software Link: http://demo.safecms.co.il/ Version: X = 1.9.8/win32 CSRF: Ban Single IP: Ex: IP: p1.p2.p3.p4 http://URL:8000/admin.cgi?mode=banip&ip1=p1&ip2=p2&ip3=p3&ip4=p4&banmsk=255 Ban Whole Subnet Ex: IP: p1.p2.p3.0-255...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...

CVE-2008-6905

Cross-site request forgery CSRF vulnerability in index.php in BabbleBoard 1.1.6 allows remote authenticated users to hijack the authentication of administrators for requests that delete 1 categories or 2 groups; 3 ban users; or 4 delete users via the admin page...

Ubuntu Update for nagios-plugins vulnerability USN-532-1

Ubuntu Update for Linux kernel vulnerabilities USN-532-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN5321.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for nagios-plugins vulnerability USN-532-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

The Ryan & Roel Show Episode 6

USB Malware Mess – Fri, November 28, 2008 The boys explain the latest news around Lenovo distributing a malware-infected driver software and the network worm that forced the U.S. military to ban the use of USB drives and other forms of removable media. Download episode...

CuteNews多个跨站脚本及PHP代码注入漏洞

BUGTRAQ ID: 33167 Cutenews是一款功能强大的新闻管理系统，使用平坦式文件存储。 Cutenews的index.php文件没有正确地验证对mod参数的输入便返回给了用户，这允许攻击者执行跨站脚本攻击；此外在阻断IP地址时没有正确的验证对addip参数的输入便储存在了data/ipban.db.php文件中，这可能导致注入并执行任意PHP代码。成功利用这个漏洞要求管理权限且禁用了.htaccess文件支持。 CutePHP CuteNews 1.4.6 厂商补丁： CutePHP -------...

CuteNews 1.4.6 XSS / Code Execution Exploit

!/usr/bin/php -q ?php / CuteNews = 1.4.6 ip ban XSS / Remote Command Execution Exploit by athos - stakerathotmaildotit http://cutephp.com -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-- Remote Command Execution -=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=--=-...