PhpBridges Blog System members.php SQL injection and fix-vulnerability warning-the black bar safety net

Title: PhpBridges Blog System SQL Injection Vulnerability Author: 3spi0n Program website: https://launchpad.net/phpbridges Test platform: BackTrack 5 - Win7 Ultimate Development language: Php $The defect file: members.php $ Test site: www.badguest.cn /members. php? id=2" SQL Injection Dar bi...

Pass to kill IIS7. 0 deformity parsing 0day vulnerabilities-vulnerability warning-the black bar safety net

To merge a PHP word pictures of horses, the combined method: ① , DOS merge: copy 1.gif /b + 1. txt/a asp.gif ② , With edjpgcom, make picture and word Trojan of the merger, Pictures just to find one. 【Incidentally, with the way edjpgcom the use of method: open the edjpgcom. exe the folder, and the...

python hash collision attacks exploit-vulnerability warning-the black bar safety net

/usr/bin/python to attack hash collision in python code by [email protected] 2012-01-05 to save as atk.py python atk.py 4 0 0 0 0 . 42.530313015 0.087562084198 import time, sys MAX = 1 0 0 0 0 0 try: MAX = int sys. argv1 except: pass t0= time. time k= for i in rangeMAX: k i223 1-i = 0 print '.'...

WordPress Plug-In wp-autoyoutube blind defect and repair-vulnerability warning-the black bar safety net

Title: WordPress wp-autoyoutube plugin Blind SQL Injection Vulnerability Author: longrifle0x Software: Wordpress Download address:http://wordpress. org/extend/plugins/wp-autoyoutube/ Test tool: SQLMAP Overview Wordpress Plug-In wp-autoyoutube is found that the presence of blind issues File:...

http TRACE cross-site attacks a vulnerability test with the defense fix-bug warning-the black bar safety net

From the bad wolf's blog Web Presence: http TRACE cross-site attack vulnerabilities. Scan results: http TRACE cross-site attacks His webserver supports the TRACE and/or TRACK methods. TRACE and TRACK is used to debugweb serverthe connection to the HTTP way. Support the way of a presence Server...

Atar2b CMS 4.0.1 SQL Injection

Exploit Title: Atar2b Cms SQL Injection Vulnerability Date: 2012-01-06 GMT +7 Author: BHG Security Center Software Link: http://www.atar2b.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Atar2b ????? ?????? ?????" Version : 4.0.1 Tested on: ubuntu 11.04 CVE : - Finders: ...

DIGIT CMS Multiple Vulnerabilities

Exploit for asp platform in category web applications Exploit Title: DIGIT Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.dig-it.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Site by DIGIT"...

Mediashaker blind defect and repair-vulnerability warning-the black bar safety net

Title: Mediashaker Blind SQL Injection Vulnerabilitiy Author: H4ckCity Security Team www.badguest.cnWwW.H4ckCity.Org Affect all versions Developer: http://www.mediashaker.com/ Testing platform: GNU/Linux Ubuntu - Windows Server - win7 Sample test http://www.badguest.cn /content. php? id=1 Blind S...

Facebook distributing White Hat Debit Card to Bug Bounty Winners

Facebook distributing White Hat Debit Card to Bug Bounty Winners Polish IT security portal Niebezpiecznik.pl, which recently published an image of a bug bounty card given to Szymon Gruszecki, a Polish security researcher and penetration tester. Neal Poole, a junior at Brown University, has report...

Empire(EmpireCMS)cms 6.6 the background to get shell-vulnerability warning-the black bar safety net

Previous 6. 5http://www.badguest.cn/Article/201011/78510.htmlsomeone hair of the method is that the background---system setup---the management data table---management system models---import new module,directly put the modified php shell was renamed the shell. php. mod uploaded, the new version us...

Joomla component(com_dshop) SQL injection flaws and fixes-vulnerability warning-the black bar safety net

Title: Joomla Component comdshop SQL Injection Vulnerability Author: CoBRa21 www.badguest.cn uykucu at windowslive.com Level: high risk SQL defects http://www.badguest.cn /PATH/index. php? option=comdshop&controller=fpage&task=flypage&idofitem=1 2 SQL Test example...

Exploit Kits Now Updated With New Wares Before Patches Are Ready

The creators and maintainers of exploit kits often rely on public reports of new exploits and proof-of-concept exploit code in order to be able to add new exploits to their software. And in many cases, the exploits included in kits such as Black Hole and Eleonore and others will be for...

BIWEB bugs and fixes-vulnerability warning-the black bar safety net

BIWEB PHP open source enterprise built Station system bug fixed version, 1. Pass to kill the contains /wap/detail.php, X, X... $objWebInit = new wap; if empty$GET'page' $intPage = 1 ; else $intPage = intval$GET'page'; if empty$GET'cpage' $intCPage = 1 ; else $intCPage = intval$GET'cpage'; if !...

QCMS 1.6 minor bugs and fixes-vulnerability warning-the black bar safety net

Baidu and GG told me so few people with so release. The problem in the background login authentication private function adminlogin if! empty$REQUEST'api' || $REQUEST'api' == $this-psite'connect' || $COOKIE'api' == $this-psite'connect' setcookie "api", $this-psite'connect', time + 3 1 5 3 6 0 0 0,...

Capexweb universal password-vulnerability warning-the black bar safety net

Title: Capexweb Sql Vulnerable Author: D1rt3 Dud3 Affected version: 1.1 A description of the problem: Capexweb is a Web based Backoffice client used by leading Stock Exchanges like Berkeley Gains, angle broking house etc. http://www.badguest.cn /capexweb/capexweb/ Log in details: Username:...

dedecms any address jump-vulnerability warning-the black bar safety net

Brief description: dedecms any address jump Detailed description: http://www.dedecms.com/plus/download.php?open=1&link=aHR0cDovL3d3dy5iYWlkdS5jb20%3D $link = base64decodeurldecode$link; http://www.badguest.cn the link can be configured to any address, below to jump directly. header"location:$link...

Xoops 2.5.4 blind and fix-vulnerability warning-the black bar safety net

------------------------------------------ Xoops 2.5.4 Blind SQL Injection ------------------------------------------ Download address: Author: blkhtc0rp www.badguest.cn blkhtc0rpatyahoodotcom Test platform: Freebsd 8 and Debian Squeeze Comment: In order to be successful an attacker must have...

whmcs hosting management system 0day and fix-vulnerability warning-the black bar safety net

First register an id Submitted a ticket as follows...

DiyPage8. 3 orderby injection and code execution vulnerabilities and fixes-vulnerability warning-the black bar safety net

mod\dpcms\js\searchsubmit.php Paragraph 3 line 6 $srchorder= $GET'srchorder' ? $GET'srchorder' : 'eid'; Paragraph 5 line 2 $sql='SELECT eid,builddate,title,author,content'; $sql.=' FROM '. DPDBPREFIX.'cmsentry WHERE active=1 AND'; 。。。。。。 。。。。。。。。。。。 $sql.=' ORDER BY '.$ srchorder.' '.$ ascdesc;...

DNS Hijacks Now Being Used to Serve Black Hole Exploit Kit

Attackers have been going after various pieces of the DNS infrastructure for a long time now, and it’s not unusual for there to be somewhat organized campaigns that target certain vertical industries or geographic regions. But researchers lately have been seeing an interesting pattern of...