WordPress WP Consultant Plugin <= 1.0 - XSS

Because of this vulnerability in admin/adminshowdialogs.php, the attackers can inject arbitrary web script or HTML via the "dialogid" parameter. Solution Update the plugin...

用友专业顾问管理平台源码泄露

简要描述： 上次用友私信说有礼物了，别让小弟失望！ 详细说明： 源码：http://yytals.yonyou.com/web.rar 漏洞证明： 如上...

WP Consultant <= 1.0 - XSS

Plugin is still affected and has been closed...

osCommerce 2.3.3.4 - geo_zones.php?zID SQL Injection

osCommerce 2.3.3.4 - geozones.php?zID SQL Injection Title: osCommerce v2.x SQL Injection Vulnerability Dork: Powered by osCommerce Author: Ahmed Aboul-Ela Contact: ahmed.aboul3laatgmaildotcom - http://twitter.com/secgeek Vendor : http://www.oscommerce.com Version: v2.3.3.4 current latest release...

Three Vulnerabilities Exist in HP's Insight Diagnostics

There are multiple vulnerabilities in HP’s Insight Diagnostics server management tool that could be exploited by an attacker to run code and let them take over an infected computer. There is currently no fix available for the problem. According to an alert from the CERT Coordination Center,...

WHMCS 4.x - invoicefunctions.php?id SQL Injection

WHMCS 4.x - invoicefunctions.php?id SQL Injection Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:"Powered by WHMCompleteSolution" OR inurl:"submitticket.php‎"‎ Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5....

WHMCS 4.5.2 SQL Injection

Title: WHMCS 4.x SQL Injection Vulnerability Google Dork: intext:"Powered by WHMCompleteSolution" OR inurl:"submitticket.php‎"‎ Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Date: 14/5/2013 Vendor: http://www.whmcs.com Version: 4.5.2 and perior versions should be affected too Teste...

Drupal Htmlarea 4.7.x-1.x Shell Upload

. \ \ | | | / | \ | | / | \ \ / | |/ / / / \ | | \ |/ \ | | / /\ | \ | /\ / / / / / /// .ORG + Info================================================================= Title: Drupal Htmlarea Modules 4.7.x-1.x / Arbitary File Upload Vulnerabilities Author: Net.Edit0r Contact:...

WordPress Wp-TopBar 4.02 CSRF / XSS

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...

WordPress Plugin wp-topbar 4.02 - Multiple Vulnerabilities

Exploit Title: WP-TopBar 4.02 CSRF Date: 2012-09-13 Author: Blake Entrekin Version: 4.02 Download Link: http://downloads.wordpress.org/plugin/wp-topbar.4.02.zip Vendor Link: http://wordpress.org/extend/plugins/wp-topbar/ ------------------- CSRF ------------------- The wp-topbar.php does not...

PHP 5.4.1 getimagesize() Denial of Service Memory leak

Exploit for php platform in category dos / poc PHP 5.4.1 getimagesize Denial of Service Memory leak Details: Getimagesize function is used to determine the size of an image. It recives one parameter as URI. Getimagesize doesn't implement any function to verify if the remote file that is been...

President Assad's hacked emails reveal isolation of Syria's leader

President Assad's hacked emails reveal isolation of Syria's leader Asad's personal email account was hacked by Anonymous hackers few hours ago and The Guardian then acquired over 3,000 documents from hacked email that according to opposition is the personal email of ruling couple Bashar and Asma...

Facebook distributing White Hat Debit Card to Bug Bounty Winners

Facebook distributing White Hat Debit Card to Bug Bounty Winners Polish IT security portal Niebezpiecznik.pl, which recently published an image of a bug bounty card given to Szymon Gruszecki, a Polish security researcher and penetration tester. Neal Poole, a junior at Brown University, has report...

Charlie Miller now working with DoD for Cyber Security

Charlie Miller is a former hacker who has become an information security consultant now working with Department of Defense DoD for helping out with cyber security. He was invited to the conference on cyber conflict held by the NATO Cooperative Cyber Defense Center of Excellence in Tallinn, where ...

Informant Says Hacks, Threats Followed Release Of Occupy Wall Street E-Mail

Thomas Ryan, the independent security consultant who released a trove of e-mail communications from the Occupy Wall Street protesters, said he has been the target of numerous hacks and has received death threats after revealing information on the protestors plans to authorities. In a conversation...

Colbert: U.S. Should 'Unleash' Kevin Mitnick As A Secret Weapon

We all know that the fake news shows like The Daily Show and Colbert Report are a lot smarter and more informative than the nightly “GlobalCarWreckStrangerAbductionSportsHighlight” montage that passes for the local news. Last night’s interview of famed hacker and security consultant Kevin Mitnick...

Richard Thieme Got Dark

Richard Thieme, the Obi-Wan Kenobi of the security community holds forth during his Black Hat talk: “Staring into the Abyss: The Dark Side of Security and Professional Intelligence.” Thieme, an IT security consultant and published author, had a tough message, telling them that the world is “grey...

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahc(lebanese hacker)

Iframe Injection & Blind SQL Injection vulnerability on Apple.com exposed by Idahclebanese hacker After Sony hacks, Idahclebanese hacker is back to strike Apple.com . He found two vulnerability on as listed below. Iframe Injection : Click here Blind SQL INjection: Click Here Examples of the...

Total Exposure - The Hacker News [THN] Magazine - June 2011 | Issue 03

Total Exposure - The Hacker News THN Magazine - June 2011 | Issue 03 The Hacker News ,June Month Magazine is Released Now ! GET YOUR COPY TODAY. Its our Issue 03 with theme "Total Exposure" . We hope this monthly magazine will keep you update in Cyber World. Content : - Total Exposure -...

Total Exposure - The Hacker News [THN] Magazine - June 2011 | Issue 03

Total Exposure - The Hacker News THN Magazine - June 2011 | Issue 03 The Hacker News ,June Month Magazine is Released Now ! GET YOUR COPY TODAY. Its our Issue 03 with theme "Total Exposure " . We hope this monthly magazine will keep you update in Cyber World. Content : - Total Exposure -...