Google Attack Was Tip of the Iceberg

The recent disclosure by Google, Adobe and other companies that their networks had been thoroughly compromised by attackers who may have been after their source code has prompted a tremendous amount of discourse both in the security community and in the general public about the political and...

Opera 10.10 - Remote Code Execution Denial of Service

!/usr/bin/perl Title : Opera 10.10 Remote Code Execution DoS Exploit Tested : Windows xp sp2 Description : Opera Web Browser is vulnerable DoS within its javascript tags alert This issue can be exploited by using a large value in a alert tags to create an out-of-bounds memory access This have in...

[InterN0T] ShareTronix 1.0.4 - HTML Injection Vulnerability

ShareTronix - HTML Injection Vulnerability Version Affected: 1.0.4 newest Info: Sharetronix Opensource is a multimedia microblogging platform. It helps people in a community, company, or group to exchange short messages over the Web. Credits: MaXe from InterN0T patched the vulnerability & Reelix...

S.O.M.P.L. Player 1.0 Buffer Overflow

|------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

DataLife Engine 8.3 Remote File Inclusion

======================================================================================== | Title : DataLife Engine 8.3 RFI Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

VaroCMS Community Voting Web 2.0 XSS

Exploit Title: VaroCMS: Community Voting Web2.0 CMS XSS & Open Redirection Date: 22/12/2009 Author: cp77fk4r | Empty0pagEShift+2gmail.com Version: VaroCMS: Community Voting Web2.0 CMS Cross Site Scripting http://www.varocms.com/demo/search?q=XSS Open Redirection...

XSS Vulnerability in Drupal's Node Blocks contributed module (6.x-1.3 and 5.x-1.1)

XSS Vulnerability in Drupal's Node Blocks contributed module 6.x-1.3 and 5.x-1.1 Discovered by Martin Barbella [email protected] Description of Vulnerability: ----------------------------- Drupal is a free software package that allows an individual or a community of users to easily publish,...

Hacking tip: provide the right technical study _Discuz! Administrator a copy-and-vulnerability warning-the black bar safety net

Crossday Discuz! Board Forum systemDiscuz! Forumis the one using PHP and MySQL, and other various databases to build efficient forum to resolvethe programme. As a commercial software product, Discuz! In code quality, operational efficiency, load capacity, security level, functional control and...

HLstatsX Community Edition 1.6.5 SQL Injection

HLstatsX Community Edition 1.6.5 SQL Injection Vulnerability Plugin Home: http://www.hlxcommunity.com/ Author: Babora Site: www.1923turk.com Google Dork: "hlstats.php?mode=" Exploit: xxxxx.com/xxx/hlstats.php?mode=dailyawardinfo&award==SQL-inj...

AWCM 2.1 Backup Vulnerability

Subject:AWCM Date: 6/1/21010 Author: alnjm33 version:2.1 Tested on: version:2.1 download: http://awcm.sourceforge.net/ar/downpro.php?id=30 Home:sec-war.com :::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::::exploit::::::::::::::::::::::::::::::::::::::::::::::::::::::::::...

HLstatsX Community Edition 1.6.5 Cross Site Scripting

------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability Author: Sora Contact: vhr95zw at hotmail dot com Website: http://greyhathackers.wordpress.com/ DESCRIPTION: HLstatsX Community Edition suffers from a XSS vulnerability. PoC:...

Skype for Linux <= 2.1 Beta multiple strange behavior

Exploit for unknown platform in category remote exploits ==================================================== Skype for Linux = 2.1 Beta multiple strange behavior ==================================================== Title: Skype for Linux =2.1 Beta multiple strange behavior CVE-ID: OSVDB-ID:...

Smart Vision Script News SQL Injection

============================================ | Smart Vision Script News newsdetail SQL Injection Vulnerability ============================================ + Author: Err0R + Site : www.sa-hacker.com/vb + Email : [email protected] ===================================== dork : Come from home Script...

HLstatsX Community Edition 1.6.5 - Cross-Site Scripting

Exploit Title: HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability Date: January 1st, 2010 Author: Sora Version: 1.6.5 and lower versions Tested on: Windows Vista ------------------------------------------- HLstatsX CE 1.6.5 XSS Vulnerability Author: Sora Contact: vhr95zw at hotma...

HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability

Exploit for unknown platform in category web applications =================================================================== HLstatsX Community Edition 1.6.5 Cross Site Scripting Vulnerability =================================================================== Exploit Title: HLstatsX Community...

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities

No description provided by source. Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X. INDEX I. ABOUT THE APPLICATION I...

[SECURITY] Fedora 11 Update: rt3-3.8.2-12.fc11

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 10 Update: rt3-3.8.2-12.fc10

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

[SECURITY] Fedora 12 Update: rt3-3.8.4-7.fc12

RT is an enterprise-grade ticketing system which enables a group of people to intelligently and efficiently manage tasks, issues, and requests submitt ed by a community of users...

phpCollegeExchange 0.1.5c - Multiple SQL Injections

phpCollegeExchange 0.1.5c Multiple SQL Injection Vulnerabilities Name phpCollegeExchange Vendor http://phpcollegeex.sourceforge.net Versions Affected 0.1.5c Author Salvatore Fresta aka Drosophila Website http://www.salvatorefresta.net Contact salvatorefresta at gmail dot com Date 2009-12-11 X...