Mobile Attacks Reign at Black Hat DC

ARLINGTON, VA–A number of researchers showed off interesting new attack techniques at the Black Hat DC conference this week, including one that enables an attacker to execute malicious code on handsets over the air. Perhaps the most interesting technique discussed at the show was a novel attack...

CVE-2010-0279

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

Unrestricted file upload

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

CVE-2010-0279

CVE-2010-0279 describes an unrestricted file upload vulnerability in upload.php of BTS-GI Read excel 1.1 that enables remote code execution by uploading a file with an executable extension and accessing it directly in an unspecified directory. The root cause is improper handling of uploaded files...

CVE-2010-0279

Unrestricted file upload vulnerability in upload.php in BTS-GI Read excel 1.1 allows remote attackers to execute arbitrary code by uploading a file with an executable extension, then accessing it via a direct request to the file in an unspecified directory. NOTE: some of these details are obtaine...

Read Excel Script 1.1 - Arbitrary File Upload

Read Excel Script 1.1 - Arbitrary File Upload Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Vendor : http://www.bts-gi.net.tc/home.php ======================================= Vuln...

Read Excel 1.1 Shell Upload

Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Site : http://www.bts-gi.net.tc/home.php Tx : http://www.comscripts.com/scripts/php.read-excel.2210.html Demo :...

Read Excel Script v1.1 Shell Upload Vulnerability

Exploit for unknown platform in category web applications ================================================= Read Excel Script v1.1 Shell Upload Vulnerability ================================================= ======================================= Script : Read Excel v1.1 Shell Upload Vendor :...

Read Excel Script 1.1 - Arbitrary File Upload

Read Excel v1.1 Shell Upload Vulnerability Author : Yozgat.Us Website : WWW.YOZGAT.US ======================================= Script : Read Excel v1.1 Shell Upload Vendor : http://www.bts-gi.net.tc/home.php ======================================= Vuln : http://yozgat.us/ ReadExcelPath /index.php...

[Backports-security-announce] Security update for znc

Patrick Matthäi uploaded new packages for znc which fixed the following security problems: TEMP-0537977-000291, Debian BTS 537977 It was discovered that znc, an IRC proxy, did not properly process certain DCC requests, allowing attackers to upload arbitrary files. For the etch-backports...

Elvin BTS 1.2.2 (SQL/XSS) Multiple Remote Vulnerabilities

No description provided by source. 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Elvin BTS 1.2.2 SQL/XSS Multiple Remote Vulnerabilities + Software : Elvin BTS + Author : 599eme Man + Contact :...

elvin bts 1.2.2 - SQL Injection Cross-Site Scripting

elvin bts 1.2.2 - SQL Injection Cross-Site Scripting 0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Elvin BTS 1.2.2 SQL/XSS Multiple Remote Vulnerabilities + Software : Elvin BTS + Author : 599eme Ma...

elvin bts 1.2.2 - SQL Injection / Cross-Site Scripting

0000000000000000000000000000000000 000000000000000000000 00000000000000000000000000000000000 0000000000000000 00000000000000000000000000000000 + Elvin BTS 1.2.2 SQL/XSS Multiple Remote Vulnerabilities + Software : Elvin BTS + Author : 599eme Man + Contact : [email protected] + Thanks : Moudi,...

Elvin BTS 1.2.2 SQL Injection / XSS

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= - Elvin BTS 1.2.2 Multiple Remote VUlnerabilities - Official SITE : http://www.elvinbts.org/ - Dork : Powered by Elvin Bug Tracking Server. -------------------------------------------------------------- - Discovered By 599eme Man -...

elvin bts 1.2.0 - Multiple Vulnerabilities

elvin bts 1.2.0 - Multiple Vulnerabilities + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injecti...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =============================================== Elvin BTS 1.2.0 Multiple Remote Vulnerabilities =============================================== + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod - Script Homepage :...

Elvin BTS 1.2.0 Multiple Remote Vulnerabilities

No description provided by source. + Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Loc...

elvin bts 1.2.0 - Multiple Vulnerabilities

Elvin BTS 1.2.0 Multiple Remote VUlnerabilities + Discovered By SirGod + www.mortal-team.org - Script Homepage : http://www.elvinbts.org/ - Google Dork : Powered by Elvin Bug Tracking Server. Elvin BTS suffers from a lot of vunerabilities 1 SQL Injection 2 Local File Inclusion 3 SQL Injection...

[Backports-security-announce] Security Update for ejabberd

Gerfried Fuchs uploaded new packages for ejabberd which fixed the following security problems: CVE-2009-0934, Debian BTS 520852 Cross-site scripting XSS vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and M...

[Backports-security-announce] Security Update for mediawiki

Gerfried Fuchs uploaded new packages for mediawiki which fixed the following security problems: CVE-2008-5249, Debian BTS 508868 Cross-site scripting XSS vulnerability in MediaWiki 1.13.0 through 1.13.2 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...