Wapkul Beta 3 SQL Injection Vulnerability

Exploit for php platform in category web applications / \ / | / \ /000000 | 00 | /000000 | 00 \00/ / \ / \ / \ 00 \ / / \ / \ 00 \00/ / \ / | 00 \ 000000 |/000000 |000000 |0000000 |000000 0000 | 000000 | 00 \ /000000 |/0000000/ 000000 | / 00 |00 | 00/ / 00 |00 | 00 |00 | 00 | 00 | / 00 | 000000...

Blast XPlayer - Local Buffer Overflow (PoC)

Title: Blast XPlayer Local Buffer Overflow PoC Vendor: http://sourceforge.net/projects/blast-player/files/latest/download?source=dlp Versions: Beta Platform: nix, windows Bug: Buffer Overflow ------------------------------------------------------- 1 Introduction 2 Proof of concept 3 Credits...

FBI Warning Users About Financial Malware Beta Bot

The FBI began warning computer users about the Beta Bot Trojan this week, sounding the alarm about malware that has targeted a variety of online payment platforms and financial institutions over the few last months. According to an intelligence note prepared by the Internet Crime Complaint Center...

PotPlayer 1.5.39036 - .wav Crash (PoC)

PotPlayer 1.5.39036 - .wav Crash PoC Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

PotPlayer 1.5.39036 - '.wav' Crash (PoC)

Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

PotPlayer 1.5.39036 Proof Of Concept

Exploit Title: PotPlayer Version 1.5.39036 - Beta .wav - Crash POC Date: 03-09-2013 Exploit Author: ariarat Software Link: http://download.cnet.com/Daum-Potplayer/3000-136324-75587055.html Version: 1.5.39036 Tested on: Windows XP sp3...

Apple to Fix Malicious Fake USB Charger Flaw

Apple claims it will fix a previously disclosed flaw in the current iteration of its mobile operating system, iOS 6, that can allow hackers complete access to an iPhone or iPad via a fake USB charger. Reuters confirmed the impending fix Wednesday after speaking with Apple spokesman Tom Numayr at...

Firefox Adds Mixed Content Blocking by Default

The proliferation of SSL-protected sites has been a boon for security conscious Web users in the last couple of years, as more and more sites have taken the step of offering encrypted connections for sensitive sessions. But one of the problems that’s cropped up is that the dynamic nature of today...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don't know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

Hack Windows 8.1 to earn $100,000 bounty from Microsoft

If you don’t know yet, Microsoft is offerings up to $100,000 in exchange for finding vulnerabilities and exploits in the upcoming Windows 8.1 Preview which is expected to launch on June 26, the same time as the Microsoft Build Developer Conference. Qualifying submissions with accompanying defensi...

Cuppa CMS Remote/Local File Inclusion Vulnerability

Cuppa CMS is prone to a file inclusion vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Beta Bot Trojan Emerges as New Type of Banking Malware

A new strain of banking malware, Beta Bot, has been refined over the last few months to target ecommerce and comes complete with an array of features to help prevent it from being caught by usual security measures. According to research conducted by RSA Security’s Limor Kessem, the bot started ou...

Data Injection

Overview activerecord is a library for databases on Rails. Affected versions of this package are vulnerable to Data Injection. It does not ensure that the declared data type of a database column is used during comparisons of input values to stored values in that column, which makes it easier for...

vBulletin 5 Beta index.php/ajax/api/reputation/vote/ SQL注入漏洞

No description provided by source...

vBulletin 5.0.0 Beta xx SQL Injection

SQL Injection vulnerability in vBulletin nodeid Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Mozilla Drops Second Beta of Persona Privacy System

Mozilla has pushed out the second beta version of its Persona authentication system . The move is the latest step in the company’s campaign to rid the Web of passwords and make it easier for consumers to log on to sites regardless of the browser they’re using. The goal of Persona is that it will...

Stuxnet 0.5 : Symantec study reveals Stuxnet was dated 2005

Today social media are spreading a shocking news, authors of Stuxnet virus that hit Iranian nuclear program in 2010 according a new research proposed by Symantec security company started in 2005 and contrary to successive instance of the malware he was designed to manipulate the nuclear facility'...

Stuxnet 0.5 : Symantec study reveals Stuxnet was dated 2005

Today social media are spreading a shocking news, authors of Stuxnet virus that hit Iranian nuclear program in 2010 according a new research proposed by Symantec security company started in 2005 and contrary to successive instance of the malware he was designed to manipulate the nuclear facility’...

[zANTI] The Power of Backtrack on your Android

Android Network Toolkit also known as zANTI is the most comprehensive and refined pentest tool for android by Zimperium. Zimperium is founded by white hat hacker Itzhack ‘Zuk’ Avraham and also have Kevin Mitnick on there team! They also had recently held the Pentester’s WorldCup. zAnti still come...

[Http-enum] Automated HTTP Enumeration Tool

Null Security Team writing a python script for Automated HTTP Enumeration. currently only in the initial beta stage, but includes basic checking of files including the Apache server-status as well as well IIS WebDAV and Microsoft FrontPage Extensions, many more features will be added to this tool...