Mariposa: December, 2009

The takedown of the Mariposa botnet is an example of both the possibilities and complications facing law enforcement around the world as they work to stamp out botnets. A cyberlaw enforcement success story, the take down of Mariposa by Spanish authorities in December, 2009, followed months of wor...

Explorer 7.20 Cross Site Scripting

Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & XaV PoC :...

Explorer 7.20 - Cross-Site Scripting

Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & XaV PoC :...

Explorer V7.20 Cross Site Scripting Vulnerability

No description provided by source. Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & Xa...

Linkster - PHP/MySQL SQL Injection

o=====================================================================================o -:- Linkster - a PHP/MySQL link indexing script SQL Injection Vulnerability -:- Vendor : http://gliebster.com Author : Angela Zhang Contact : [email protected] Date : 15 - December - 2009...

LinkPal 1.0 - SQL Injection

LinkPal 1.0 - SQL Injection Tybe: Auth Bypass Remote SQL Injection Vulnerability Vendor:www.datachecknh.com ? ? Software:LinkPal v1.0 ? Price $$9.95 One-time fee ? author: R3d-D3v!L ? ? Date: 15.d3c.2009 ?T!ME: 08:14 p//\ ? Home: www.Xp10.Me ? ? E-MaiL : [email protected]...

DISA STIG SRR Still Vulnerable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After the issue in CVE-2009-4211 was made public, the Unix SRR script was removed from http://iase.disa.mil/stigs/SRR/unix.html with a note saying: ?Due to a recently identified security issue, please do not run any version of the UNIX SRR scripts unt...