Android Malware that can DDoS Attacks from your smartphone

The Russian anti-virus vendor Doctor Web has found a new malicious program for Android which allows hacker groups to carry out mobile denial of service attacks. While it's not entirely clear how the Trojan is spread, researchers suspect that the attackers use social engineering tactics since the...

City Directory Review and Rating Script SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: City Directory Review and Rating Script SQL Injection Vulnerability Date: 22.12.2012 Author: 3spi0n Script Vendor or Software Link: http://b-scripts.com/en/18-city-reviewer-yelp-clone.html Category: WebApps Type: SQL Injection...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

CVE-2011-5190

Social Book Facebook Clone 2010 has XSS vulnerabilities via PATH_INFO in multiple PHP scripts (signup.php, lostpass.php, login.php, index.php, help_tos.php, help_contact.php, help.php). The description states remote attackers can inject arbitrary web script or HTML, indicating an input sanitizati...

CVE-2011-5190

Multiple cross-site scripting XSS vulnerabilities in Social Book Facebook Clone 2010 allow remote attackers to inject arbitrary web script or HTML via the PATHINFO parameter to 1 signup.php, 2 lostpass.php, 3 login.php, 4 index.php, 5 helptos.php, 6 helpcontact.php, or 7 help.php...

Pinterest Clone Script - Multiple Vulnerabilities

Exploit Title: Pinterestclones Multiple Vulnerabilities Author: DaOne Price: $199.99 Software Link: http://www.pinterestclones.com/ Google Dork: N/A Persistent XSS How to exploit: 1-go to : http://site.com/createusernamen/ 2-Put anything in the other field Password & E-mail etc... 3-Go to: Add...

Clipbucket 2.5 - Blind SQL Injection

Clipbucket 2.5 - Blind SQL Injection Author: loneferret of Offensive Security Product: ClipBucket Version: 2.5 and maybe older versions Vendor Site: http://clip-bucket.com/ Software Download: http://sourceforge.net/projects/clipbucket/ Software description: ClipBucket is an OpenSource Multimedia...

CVE-2012-1119

MantisBT before 1.2.9 does not audit when users copy or clone a bug report, which makes it easier for remote attackers to copy bug reports without detection...

UBUNTU-CVE-2012-2127

fs/proc/root.c in the procfs implementation in the Linux kernel before 3.2 does not properly interact with CLONENEWPID clone system calls, which allows remote attackers to cause a denial of service reference leak and memory consumption by making many connections to a daemon that uses PID namespac...

PT-2012-3823 · Linux +1 · Linux Kernel +1

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.2 Description: The issue is related to the procfs implementation in the Linux kernel, where it does not properly interact with CLONE NEWPID clone system calls. This allows remote attackers to cause a denial of...

Permanent Reverse TCP Backdoor for IPhone and IPad

Security Expert from Coresec explains the use of a Permanent Reverse TCP Backdoor "sbd-1.36" for IPhone and IPad developed by Michel Blomgren. sbd is a Netcat-clone, designed to be portable and offer strong encryption. It runs on Unix-like operating systems and on Microsoft Win32. sbd features...

kernel: block: CLONE_IO io_context refcounting issues

The I/O implementation for block devices in the Linux kernel before 2.6.33 does not properly handle the CLONEIO feature, which allows local users to cause a denial of service I/O instability by starting multiple processes that share an I/O context...

PT-2012-1030 · Debian +4 · Debian +4

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.33 Description: The issue is related to the I/O implementation for block devices in the Linux kernel, which does not properly handle the CLONE IO feature. This can be exploited by local users to cause a deni...

Ubuntu Update for linux-mvl-dove USN-1415-1

Ubuntu Update for Linux kernel vulnerabilities USN-1415-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14151.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-mvl-dove USN-1415-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.n...

Ubuntu Update for linux-mvl-dove USN-1415-1

Ubuntu Update for Linux kernel vulnerabilities USN-1415-1 SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu 10.10 : linux-mvl-dove vulnerability (USN-1415-1)

Louis Rilling discovered a flaw in Linux kernel's clone command when CLONEIO is specified. An unprivileged local user could exploit this to cause a denial of service. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Ubuntu Security Notice...

Ubuntu Update for linux USN-1411-1

Ubuntu Update for Linux kernel vulnerabilities USN-1411-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14111.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux USN-1411-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Ubuntu Update for linux-ec2 USN-1410-1

Ubuntu Update for Linux kernel vulnerabilities USN-1410-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN14101.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for linux-ec2 USN-1410-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net Th...

Ubuntu: Security Advisory (USN-1411-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...