98 matches found
cPanel 11.25 - Cross-Site Request Forgery (Add User PHP Script)
cPanel 11.25 - Cross-Site Request Forgery Add User PHP Script Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens...
cPanel < 11.25 CSRF - Add User php Script
Exploit for php platform in category web applications Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and...
cPanel Cross Site Request Forgery
Exploit Title: cPanel " Afterwards simply check for ninjashell.php in the directory. III. Counter-measures All cPanel versions starting from 11.25 and above have two in-built security features to prevent such attacks - security tokens and referrer security check. This means that if you are a cpan...
Adelaide Hacker Infects 2,370 Computers in Global Cyber Attack
An Adelaide hacker infected over 2,000 computers in Australia and overseas with a program designed to capture banking details, a court has heard. Anthony Scott Harrison, 20, learned hacking and programming skills online and launched his attack in 2009. He was caught when suspicious web activity w...
Microsoft Help Files (.CHM): 'Locked File' Feature Bypass
No description provided by source. Changes made with Windows XP introduced additional origin validation for files downloaded from the Internet when saved to an NTFS volume. This 'feature' is present in Windows XP, Vista and 7. When a user downloads a .CHM file using Internet Explorer or another...
HauntmAx CMS Haunted House Directory Listing SQL Injection
No description provided by source. Name : HauntmAx CMS SQLi Vulnerability Date : june, 9 2010 Vendor url :http://www.hauntmax.com/ Platform: Linux,Windows Price: $200 Author : Sid3^effects aKa HaRi shellc99atyahoo.com special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,gunslinger greetz t...
The Penetration Testing Marketplace in 2010
By Nick Selby Managing Director, Trident Risk Management Vulnerability assessment vendor Rapid7 has announced the first of a series of steps to integrate its penetration testing and vulnerability assessment scanning products. The first step is a module that allows users of the Metasploit Framewor...
TLS / SSLv3 vulnerability explained (DRAFT)
Dear List, This paper explains the vulnerability for a broader audience and summarizes the information that is currently available. The document is prone to updates and is believed to be accurate by the time of writing. Post: http://blog.g-sec.lu/2009/11/tls-sslv3-renegotiation-vulnerability.html...
How to Protect Your Resume From Identity Theft
“Job candidates are willing in this market to give any information they can that would help them get a job,” said Ellen B. Vance, an HR consultant and auditor who advises companies on how to safeguard applicant and employee information. The instinct is natural, but it can leave you vulnerable to...
Pwning Nokia phones (and other Symbian based smartphones)
Hello, I'll just leave this here ; https://www.sec-consult.com/files/SECConsultVulnerabilityLabPwningSymbianV1.03PUBLIC.pdf Abstract: 1. Perform static analysis of XIP ROM images dumping, restoring import and export tables, searching for unsafe function calls 2. Enable run mode debugging of syste...
Our security model is broken
This Google TechTalk features Rik Farrow, a longtime security consultant and author, discussing the fundamental flaws in the current security model on the Internet and the desktop...
How to break Web software
In this Google Tech Talk, Mike Andrews, a security consultant from Foundstone, discusses common techniques for exploiting weak spots in Web applications. Running time: 1:26...
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service
Acunetix WVS 4.0 20060717 - HTTP Sniffer Component Remote Denial of Service !/usr/bin/perl -w Acunetix Web Vulnerability Scanner 4.0 = Build 20060717 HTTP Sniffer component Remote Denial of Service Explaination: I found a DoS in Acunetix WVS doing a little bit of fuzzing. The flaw is triggered wh...
PHP-Nuke Book Catalog Module Upload.PHP任意文件上传漏洞
PHP-Nuke Book Catalog Module是一款PHP的图书目录模块。 PHP-Nuke Book Catalog Module不正确过滤用户提交的数据，远程攻击者可以利用漏洞上传任意文件，并以WEB进程执行。 'BookCatalog/upload.php'对用户提交的图象文件缺少正确过滤，可直接提交PHP文件而导致以WEB权限执行。 SAP Basis Community Book Catalog Module 1.0 目前没有解决方案提供,请关注以下链接： http://www.basisconsultant.com/index.php...
xmame-sploits.txt
The following proof-of-concept demonstrates the existence of the local vulnerability found in xmame 0.102. It uses the brute-force technique. The RET address interval works on Intel Debian GNU/Linux. To test for the vulnerability, run "gcc exploit-c -o exploit" and then "perl fb.pl". exploit.c:...
planetBackdoor.txt
Hello all, Today i discovered a pseudo backdoor thru a default password while trying to reset the password on a Planet Technology Corp FGSW2402RS switch. Allthough i dont consider this to be a real problem since the only access seems to be thru the serial port, i would like to share this with the...
Enterasys XSR Security Routers DoS
Description: Enterasys XSR Security Routers crash when passing a packet with the option record route. System Vulnerable: This vulnerability was found in XSR-1800 series. firmware 7.0.0.0 Proof-of-concept: I've used Hping http://www.hping.org/ to perform this example: hping3 -1 -G www.uol.com.br...
Shiva Access Manager 5.0.0 Plaintext LDAP root password.
In testing Intel's Shiva Access Manager RADIUS/Tacacs+ product, i recently came across an important security hole in the LDAP connectivity on the Solaris platform version of this product. When you configure the S.A.M. to store all of it's information in an LDAP directory, it asks that you give it...