Internet Explorer 9 Address Bar Spoof

IE9 Address Bar Spoof: For a quick demo, please visit http://keyloggeronline.com/misc/temp/about.htm Thanks. Spoof function myOpen var mywin=open'about:blank',"mywindow",'location=1,scrollbars=0,width=300,height=290';...

How easy it is to hack AMC's sites !

An 'ethical' hacker demonstrates how one can break into the civic corporation's e-governance site and I P Gautam's official domain to access confidential info. The state government's websites are under threat of being hacked. A BCA student, who calls himself an 'ethical' hacker, demonstrated how ...

PHP Art Info SQL Injection

=============================================== PHP Art Info SQL Injection Vulnerability =============================================== +Title : PHP Art Info SQL Injection Vulnerability +Software : Art Info +Vendor : NN +Download : NN +Author : josalijoe +Contact : josalijoeathotmaildotcom +Web ...

Researcher Demonstrates Stuxnet At Work

We know Stuxnet has caused some major disruptions in nations like Iran and India. But how, exactly, does it work? In this video, Symantec researcher Liam O’Murchu demonstrates how a Stuxnet infected programmable logic controller PLC by Siemens can instruct a piece of machinery to run out of...

ATM Makers Release Fixes for 'Jackpotting' Flaw

Two ATM manufacturers have released software updates to address the remotely exploitable vulnerabilities in their machines’ firmware that IOActive researcher Barnaby Jack demonstrated line on stage at the Black Hat conference last month. In response to the demonstration, in which Jack was able to...

Android Rootkit Demonstrated at DEFCON

IT security researchers Nicholas Percoco and Christian Papathanasiou demonstrated what they claim is the first rootkit for Android. Their aim was to show how slight the obstacles to the development of a such a rootkit are and how powerful the result can be. Read the full article. The H Security...

SHOPEX Cross Station and CSRF vulnerabilities-vulnerability warning-the black bar safety net

Cross-site request forgerycross-site request forgeryis usually abbreviated as CSRF/XSRF, the literal translation for cross-site request forgery, i.e. an attacker by invoking third-party web site the malicious script or use the program to forge a request, of course, not need to the user end disgui...

rapidCMS 2.0 - Authentication Bypass

Exploit Title: rapidCMS V2 Authentication Bypass Date: 18/07/2010 Author: Mahjong Software Link: www.rapidcms.de Version: V2 Tested on: Linux Found by: Mahjong E-Mail: [email protected] Greetings: Puddy, Ancolon ---------------------------------------------------------- Exploit Authentication Bypas...

Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection

Joomla! Component PaymentsPlus 2.1.5 - Blind SQL Injection Critical Level : HIGH Vendor Url : http://paymentsplus.com.au/ Author : Sid3^effects aKa HaRi special thanks to : r0073r inj3ct0r.com,L0rd CruSad3r,MaYur,MA1201,KeDar,Sonic,gunslinger greetz to :www.topsecure.net ,All ICW members and my...

waibrasil Remote / Local File Inclusion

Exploit for php platform in category web applications ======================================= waibrasil Remote / Local File Inclusion ======================================= Author: eXeSoul Vendor: www.waibrasil.com.br category: Remote Version: Web Application Tested on: Apcahe/Unix Code : exploi...

SoftBizScripts Hosting Script SQL Injection

Exploit Title: SoftBizScripts Hosting Script SQL Injection Vunerability Date: 29-4-2010 Author: 41.w4r10r Vendor Link : http://softbizscripts.com/ Version: Web Application Tested on: Apcahe/Unix CVE : if exists Dork : inurl:"browsecats.php?cid=" Code :...

MovieLibrary 1.4.401 - '.dmv' Local Denial of Service

Exploit Title: MovieLibrary Local Dos .dmv file Date: April 14, 2010 Software Link: http://wensoftware.com/ Version: v1.4.401 Tested on: Windows XP SP3 Author: anonymous Site: www.setfreesecurity.com At the top: Click - New - Open Open the newly created dmv file Click File - Import Database Progr...

post Card ( catid ) Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ====================================================== post Card catid Remote SQL Injection Vulnerability ====================================================== post Card catid Remote SQL Injection Vulnerability Author: Hussin X Home :...

Crimson Editor 3.70 SEH Overwrite

!/usr/bin/python Exploit Title : Crimson Editor r3.70 SEH Overwrite Vulnerability PoC exploit Date : 21/03/2010 Author : mrme Bug found by : sharpe Version : 3.70 Release Tested on : XP SP3 En Reference : http://www.exploit-db.com/exploits/11803 Greetz to : Corelan Security Team & sharpe...

Arab Cart 1.0.2.0 Insecure Cooking Handling

======================================================================================== | Title : Arab Cart Version 1.0.2.0 Insecure Cookie Handling Vulnerability | Author : indoushka | email : [email protected] | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | Web Sit...

The recent discovery of a windows overflow 0day demo-vulnerability warning-the black bar safety net

by Langouster Windows overflow vulnerability 1. This vulnerability for Windows somewhere on the design defect cause, should be early Windows legacy issues, the details will not say 2. Affected by this vulnerability the code quite a bit, have Microsoft The there are also third party; The...

phpunity.newsmanager LFI Vulnerability

Exploit for unknown platform in category web applications ====================================== phpunity.newsmanager LFI Vulnerability ====================================== Software Information + Vendor : http://www.perlunity.de/ + Download :...

YPOPS! v0.9.7.3 Buffer Overflow (SEH)

No description provided by source. Version:0.9.7.3 Tested on: Windows XP SP3 !/usr/bin/python All modules are SafeSEH protected in service pack 3. import socket, sys print "\n ========================================" print " YPOPS! v 0.9.7.3 Buffer Overflow SEH" print " Proof of Concept by Blake...

phpPowerCards 2.0 Cross Site Scripting

======================================================================================== | Title : phpPowerCards 2.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID : ...

Squito Gallery 1.0 Cross Site Scripting

======================================================================================== | Title : Squito Gallery v.1.0 Cross Site Scripting Vulnerability | | Author : indoushka | | email : [email protected] | | Home : Souk Naamane - 04325 - Oum El Bouaghi - Algeria -00213771818860 | | EDB-ID...