1944 matches found
JVN#43386477: WeblyGo vulnerable to cross-site scripting
WeblyGo is a groupware provided by KAWAI BUSINESS SOFTWARE CO., LTD. KBS. WeblyGo contains a cross-site scripting vulnerability. Impact An arbitrary script may be executed on the user's web browser. Solution Update the software Update to the latest version according to the information provided by...
AlgoPars Software Co SQL Injection
||------------------------------------------------------------------|| ||Software..............AlgoPars Software Co ||Vulnerability.........Sql Injection ||Threat Level..........High ||Vender................www.algopars.ir ||Author................Bl4ck.Viper Turkish Hacker...
Rajasthan State marketing site infected with malicious code
India's Rajasthan State Co-operative Marketing Federation Ltd https://rajfed.gov.in/ has been infected with a malicious script tag. This government site promotes the objectives of procuring agricultural produce from farmers through the member societies on support prices declared by the Govt. of...
JVN#37878530: EC-CUBE vulnerable to cross-site request forgery
EC-CUBE provided by LOCKON CO.,LTD. is an open source system for creating shopping websites. EC-CUBE contains a cross-site request forgery vulnerability. Impact If a user views a malicious page while logged in, information stored within EC-CUBE may be altered. Solution Update the Software Apply t...
DodeCMS to create a website content management system upload vulnerability 0day-vulnerability warning-the black bar safety net
Program description: DodeCMS to create a website content management system by the Liaoning to create a network Technology Co., Ltd. based on Microsoft ASP, GM ACCESS database development is completed; Access modes using the dynamic mode, basically realized the system custom function, The code...
Mail & Guardian website down after hack attack !!
Cape Town - The Mail & Guardian website has been shut down over a hacking attack, the company announced on Wednesday. "The Mail & Guardian's website is under sustained attack by hackers. We are dealing with the problem, but to make absolutely sure that your security isn't compromised, we have...
UConn Co-op website hacked !
Storrs : A computer hacker accessed the customer database of HuskyDirect.com, a website that sells sports paraphernalia from the UConn Co-op, prompting the store to order the vendor that manages the site to take it down. The Co-op announced Tuesday that it has notified law enforcement of the...
KingView 6.5.3 SCADA HMI Heap Overflow PoC
Exploit for windows platform in category remote exploits Author: Dillon Beresford Software Link: http://download.kingview.com/software/kingview%20English%20Version/kingview6.53EN.rar Version: 6.53 English Tested on: Windows XP SP1 works on SP2 and SP3 will release new targets after CERT advisory ...
MP3 Workstation DLL Hijacking
=================================================== MP3 Workstation DLL Hijacking Exploit iacenc.dll =================================================== || || | || o,7 || . o7 || 4||| ow, : / / . 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0...
Audio Editor DLL Hijacking Exploit (iacenc.dll)
Exploit for windows platform in category local exploits =============================================== Audio Editor DLL Hijacking Exploit iacenc.dll =============================================== || || | || o,7 || . o7 || 4||| ow, : / /...
JVN#72541530: Active! mail 6 vulnerable to HTTP header injection
Active! mail 6 from TransWARE Co. is a web-based email software. Active! mail 6 contains a HTTP header injection vulnerability. Impact Falsified information may be displayed or an arbitrary script may be executed on the user's web browser. HTTP response splitting attacks are also possible. Soluti...
SiteEngine CMS 5.1.0 file upload vulnerability-vulnerability warning-the black bar safety net
Website engineSiteEngine,name: Boca website, the engine management system, The Beijing Boca vanguard Software Development Co., Ltd. in 2 0 0 2-year independent research and development, with intellectual property rights of a marketing type website construction management class software. At the sa...
ECMall 2.2 app/groupbuy.app.php delay injection vulnerability-vulnerability warning-the black bar safety net
ECMall community e-Commerce systemreferred to as ECMallis Shanghai commercial school network Technology Co., Ltd. following the ECShop after the launch of yet another e-Commerce sister product app\groupbuy. app. php:2 6: function index $id = empty$GET'id' ? 0 : $GET'id'; //id not filtered if !$ i...
Treasury Bank Robbed by Online Thieves
Organized cyber thieves stole more than $100,000 from a small credit union who serves U.S. Treasury employees in Salt Lake City last week, in a brazen online robbery that involved dozens of co-conspirators. Read the full article. KrebsonSecurity...
AVCON 4.6.8.7 Buffer Overflow
!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...
AVCON Buffer Overflow
Exploit for windows platform in category local exploits ===================== AVCON Buffer Overflow ===================== !/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE...
Making friends
When making friends, consider putting them into groups. You might organize them around privacy those who know about my family and those that do not or people who know each other. People can belong to more than one group if you want. Think about what kind of friends they are. Family? Co-worker?...
IT Consultancy Defrauded of $100K
A New Hampshire-based IT consultancy lost nearly $100,000 this month after thieves broke into the company’s bank accounts with the help of 10 co-conspirators across the United States. Read the full article. KrebsonSecruity...
Intertech 1.0 SQL Injection
------------------------------------------------------ ./SEC-R1Z / / / / /\ \ |/ / \ \ / / / / | | / | | / / \ / / / / | || / | | / / \ \ \ \2010 | \ | | / / / \ /\ / ||\ \ ||/ \ R.I.P MichaelJackson !!!!! ------------------------------------------------------ ? Note : happy valentine day...
