238 matches found
Backupbuddy 2.2.4 Sensitive Data Exposure
Backupbuddy - sensitive data exposure in importbuddy.php "the premiere WordPress backup plugin to backup, restore and move WordPress" http://ithemes.com/purchase/backupbuddy/ known versions affected: v1.3.4, v2.1.4, v2.2.25, v2.2.28, v2.2.4, likely other versions also impact: access to wordpress...
Hacker breach President of Sri Lanka website
Official website of President of Sri Lanka president.gov.lk breached by hacker going by name "Broken-Security", using Blind Sql Injection vulnerability. Vulnerability also posted by hacker on a pastebin note with database dump including table and column names. Dump include the Username and...
Hacker dump database from US Government and Military websites
Internet Activist and collective hacker group "NullCrew" released a huge dump of 7,000 names-passwords database from US Government websites and 2000 names-passwords database from Military websites. Hacker claimed to hack into five websites, including Montana's Official State Website, United...
4XP Critical SQL Injection Vulnerability Exposed
zSecure team has recently discovered a critical SQL Injection Vulnerability in the web portal of 4XP, a leading online forex broker having more than 1 lakh customer base. Financial transactions are carried on the broker's paltform on daily basis including but not limited to Credit Card...
Seditio 165 Cross Site Request Forgery / Backup Disclosure
============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...
seditio165_CSRF_and_world_readble_db_dumpissuses
============================================= Vulnerable Software: Seditio v165 Downloaded from: http://seditio-eklenti.com/datas/users/1-seditio.165.rar This version is under development of Kaan $ md5sum 1-seditio.165.rar 2eebc8d80f7fcd4e9a0d0659ef193488 1-seditio.165.rar...
eToro Vulnerable to Database Dump
eToro Vulnerable to Database Dump Security Experts at Zsecure.net discover a serious Vulnerability in eToro,which is a financial trading company based in Cyprus and one of the top ranked Forex Trading Service Provider Worldwide. It provides personal online financial services in forex, commodities...
The Council on Governmental Ethics Laws (COGEL) hacked and complete database dumped
The Council on Governmental Ethics Laws COGEL hacked and complete database dumped Hacker With Name snc0pe claim to hack official website of The Council on Governmental Ethics Laws COGEL. He post a message on pastebin , along with the database download link 1.88MB...
Idea Cellular Web Portal Hacked, Customers Info may be exposed !
Idea Cellular Web Portal Hacked, Customers Info may be exposed ! Again a critical SQL Injection Vulnerability has been discovered by zSecure Team in a high profile web portal. This time it's Ideacellular web portal which compromises the entire site database. Any malicious smart black hats can...
Sify.com hacked with SQL Injection Vulnerability
Sify.com hacked with SQL Injection Vulnerability Sify's website contain SQL injection Vulnerability and Hackers are able to Database Access, Database Dump, Possibility of shell uploading. Sify is one of India's leading integrated Information Communications Technology companies. Sify was one of th...
Indishell.net forum Hacked by Pakistan hackers
Indishell.net forum Hacked by Pakistan hackers Indian Hackers forum, Indishell.net has been hacked by Pakistani hackers. This is not that orginal Indishell hackers group of India. The domain is somewhere similar to them. Paki Hackers Provide More details here https://pastebin.com/k0XYZQCW .They...
Hacker getting WordPress Database Dump with Google Query !
Hacker getting WordPress Database Dump with Google Query ! There appear to be multiple WordPress powered sites that are performing an DB-XML dumb of the articles and subsequent pages. The comments section includes originating IP address, datetime, E-Mail address, homepage, etc. These entities are...
vBulletin 3.5.2 - Cross-Site Scripting
vBulletin 3.5.2 - Cross-Site Scripting Title: vBulletin Version 3.5.2 - Introduction XSS scripting Author: Discovered by ROOTEGY Version: vBulletin Version 3.5.2 =============================================== WWW.sec-war.com =============================================== 3.5.2 - Introduction XS...
h2desk helpdesk path disclosure vulnerability
Heathco's h2desk helpdesk ticking system provides a ticketing solution for small and large organizations alike. Blah blah. On to the exploit. h2desk's session handling is custom and doesnt use the standard phpsession id handling. As a result, if you add a tic ' or any other invalid character to t...
[Full-disclosure] Papoo CMS 3.6 - Access Restriction Bypass
Papoo Content Management System Backend Access Restriction Bypass Jun 24 2007 Product Papoo Content Management System Vulnerable Versions Papoo 3.6 and maybe prior Vendor Status The Vendor was notified and the issue was fixed. A patch is available at...
E107 v.6.17d vuln.
SQL Injection Существует из-за того, что не проверяется значение $order, преданное в POST-запросе к /user.php В случае, если: злоумышленник знает полный путь к каталогу, в котором размещен контент; magicquotesgpc=off; пользователь, с чьими правами идет обращение к БД имеет права Filepriv; то, он...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
Exploit for unknown platform in category web applications ======================================================== Aztek Forum include include include include include include include include include define REQ1 "/myadmin.php?action=exportindex&login=" define REQ2 " HTTP/1.1\nHost: " define REQ3...
Aztek Forum <= 4.0 [myadmin.php] Database Dumper Exploit
No description provided by source. / Changed line 81 - Tested and working /str0ke / / LOTFREE Team presents : Forum-Aztek v4.0 4nd pr0b4bly inf3ri0r Database Dump Xpl0it 0day dUd3 X- ./aztek-sploit 127.0.0.1 admin forum HTTP/1.1 200 OK Date: Sat, 05 Mar 2005 22:18:13 GMT Server: Apache/2.0.50...