Feather CMS SQL Injection

Exploit Title : Feather CMS SQL Injection Vulnerability Author : Secure-Land Security Team Discovered By : farbodmahini Home : Secure-Land.net Version : All Version Vendor : www.kpsy.net Contact : [email protected] , [email protected] Security Risk : High DorK : "Powered by: Feather Inc"...

The vulnerability exists in the standalone and also in the online demonstration enviroment.

It is possible to anonymously enumerate all usernames via the script at /rest/prototype/1/search/user.json?max-results=10&query=XX. The 'query' GET parameter should contain at least two charakters. It is possible to enumerate all usernames by performing a search from 'query' value 'aa' to 'zz'...

PHP Designer 2007 PE SQL Injection

In The Name Of GOD ============================================================================== PHP Designer 2007 PE Sql Injection Vulnerability ============================================================================== » Title : PHP Designer 2007 PE Sql Injection Vulnerability » Generator ...

SQL-Injection (Error-Patching) - Basic Lesson #1

Document Title: =============== SQL-Injection Error-Patching - Basic Lesson 1 References: =========== Download: http://www.vulnerability-lab.com/resources/videos/446.wmv View: http://www.youtube.com/watch?v=Yd6fu0X9epQ Release Date: ============= 2012-02-26 Vulnerability Laboratory ID VL-ID:...

glibc: __tzfile_read integer overflow to buffer overflow

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the way the glibc library read timezone files. If a carefully-crafted timezone file was loaded by an application linked against glibc, it could cause the application to crash or, potentially, execute arbitrary code wi...

Canopus IB FIVE Application - Auth Bypass Vulnerability

Document Title: =============== Canopus IB FIVE Application - Auth Bypass Vulnerability References: =========== Download: http://www.vulnerability-lab.com/resources/videos/380.wmv View: http://www.youtube.com/watch?v=Kh5Qd3mMIs Release Date: ============= 2012-01-13 Vulnerability Laboratory ID...

UBUNTU-CVE-2012-0045

The emsyscall function in arch/x86/kvm/emulate.c in the KVM implementation in the Linux kernel before 3.2.14 does not properly handle the 0f05 aka syscall opcode, which allows guest OS users to cause a denial of service guest OS crash via a crafted application, as demonstrated by an NASM file...

Priza Israel CMS 0.0.2 Cross Site Scripting / SQL Injection

Exploit Title: Priza Israel Cms SQL Injection / XSS Multiple Vulnerability Date: 2012-01-05 GMT +7 Author: BHG Security Center Software Link: http://www.priza.co.il/ Vendor Responses: They didn't respond to the emails. Dork: intext:"Powered by Priza" Version : 0.0.2 Tested on: ubuntu 11.04 CVE : ...

VanishCrypt – Virtual Encryption Tool by SecurityLabs [Video Demonstration]

VanishCrypt – Virtual Encryption Tool by SecurityLabs SecurityLabs Experts from India release a new Virtual Encryption Tool called "VanishCrypt". A Freeware Utility to Secure Your Data. It creates a virtual disk that contains your secret files. Data is protected with a Encrypted Password. The fil...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

Encipher It : Easiest Browser based Advanced Encryption Tools [Video Demonstration]

Encipher It : Easiest Browser based Advanced Encryption Tools Video Demonstration "Encipher It " One of the best and easiest AES Text encryptor for Google Mail or anything else. It Provide more secure PBKDF2 Password-Based Key Derivation Function key generation. It use Advanced Encryption Standar...

BruCON Agnitio workshop Slides and Video Demonstration - Download

BruCON Agnitio workshop Slides and Video Demonstration - Download Workshop by David Rook Security Ninja at BruCON 2011 in Belgium. You can Download Slide from here. Required for the Agnitio hands on demos: A 32bit Windows Operating System XP or 7 preferably – VM will be fine .NET framework 3.5...

Session Race Conditions and Session Puzzling – Now Simplified

Session Race Conditions and Session Puzzling – Now Simplified A few months ago Shay Chen, Senior Manager at Hacktics Advanced Security Center HASC published a paper about Session Puzzling, a new application level attack vector of critical severity and numerous uses, but for some bizarre reasons,...

DDOs Tracer - 1.0 Released by MaxPainCode

DDOs Tracer - 1.0 Released by MaxPainCode At most any time of the day, there's a distributed denial-of-service DDOS attack underway somewhere on the Internet. Yes, it's still true, despite reports that some ISPs have experienced fewer DDOS attacks overall during the last six months. It's a matter...

Vulnerability Master 1.0 Released By MaxPain

Vulnerability Master 1.0 Released By MaxPain Video Demostartion Download Vulnerability Master 1.0...

Shanghai Freemen SQL Injection

+Title : SHANGHAI FREEMEN Sql Injection +Vender : http://www.shanghai-freemen.com/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 01/07/2011 +Home : www.skote-vahshat.com Err0r 0n : hot.asp Exploit : http://target.com/products/hot.asp?id=SQL Demo :...

Lock Picking Basics - PadLocks & Urban Freestyle

Document Title: =============== Lock Picking Basics - PadLocks & Urban Freestyle References: =========== Download: http://www.vulnerability-lab.com/resources/videos/17.wmv View: http://www.youtube.com/watch?v=ULGsfZxcD4 Release Date: ============= 2011-06-17 Vulnerability Laboratory ID VL-ID:...

DNS Spoofing - Man in the Middle (Basic Attack)

Document Title: =============== DNS Spoofing - Man in the Middle Basic Attack References: =========== Download: http://www.vulnerability-lab.com/resources/videos/16.wmv View: http://www.youtube.com/watch?v=9HWvUgSk0Y Release Date: ============= 2011-06-12 Vulnerability Laboratory ID VL-ID:...

CVMH Solutions SQL Injection Vulnerability

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Gloves In A Bottle Local File Inclusion Vulnerability

Exploit for php platform in category web applications + Gloves In A Bottle Local File Inclusion + Google dork : Gloves In A Bottle, Inc. All rights reserved + Contact : email protected - d3c0der.blogspot.com + special tnx : attackerz.ir , phc.ir...