Maks Publication And Media Services Cross Site Scripting / SQL Injection

Exploit Title: Maks Publications & Media Services Multiple Vulnerability Date: 06.12.2011 - 17:55 Author: 3spi0n Software Website: Not Sites - Not E-mail Because Working With Ghana Assembly : Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Dorks: "Maks Publications & media services"...

Ilyas.info Design Cross Site Scripting

Exploit Title: Ilyas.info Design Cross Site Scripting Vulnerability WordPress Themes Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://ilyas.info/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: ?s= $ Dorks: "Theme by Dizayn ilyas.info" $ Demo Sites:...

Mevin Productions SQL Injection

Exploit Title: mevin productions Sql Injection Vulnerability Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://www.mevin.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php $ Dorks: "Powered by: mevin productions" inurl:/event.php?id= $ Demo Sites...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...

WebSkinz SQL Injection

Exploit Title: WebSkinz Sql Injection Vulnerability Date: 24.10.2011 - 23:30 Author: 3spi0n Software Website: http://www.webskinz.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Review.php $ Dorks: "DESIGNED & PROGRAMMED WEBSKINZ" $ Demo Sites:...

Design/Logic Flaw

Opera before 11.11 does not properly handle destruction of a Silverlight instance, which allows remote attackers to cause a denial of service application crash via a web page, as demonstrated by vod.onet.pl...

apr-util: high memory consumption in apr_brigade_split_line()

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

apr-util: high memory consumption in apr_brigade_split_line()

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

Tastes Like Chicken: Industrial Shredder Eats PCs, Peripherals

Data leaked from lost, stolen or recycled IT equipment is a major, major issue. News reports about the reams of data that can be retrieved from the hard drives and memory of second hand PCs are nothing new. Organizations like the IEEE have been calling attention to the insecure storage of data fo...

The inside story of the HBGary hack by Anonymous Hackers !

It has been an embarrassing week for security firm HBGary and its HBGary Federal offshoot. HBGary Federal CEO Aaron Barr thought he had unmasked the hacker hordes of Anonymous and was preparing to name and shame those responsible for co-ordinating the group's actions, including the...

FBI Uses Facebook to Catch Baltimore Terrorist

Gathering evidence on Facebook has become a standard legal practice, so a social sting operation was inevitable. This method led the Federal Bureau of Investigation FBI to apprehend a would-be terrorist in Baltimore. An FBI informant initially contacted 21-year-old Antonio Martinez after he...

Be Alert : "Postcard" computer virus is Out ~~ !!

WARNINGS have been issued this weekend about a highly destructive computer virus which has been released under the guise of a postcard greeting. It is strongly advised that computer users should not open any message with an attachment entitled "Postcard" or "Postcard from Hallmark", regardless of...

CVE-2010-1623

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

DEBIAN-CVE-2010-1623

Memory leak in the aprbrigadesplitline function in buckets/aprbrigade.c in the Apache Portable Runtime Utility library aka APR-util before 1.3.10, as used in the modreqtimeout module in the Apache HTTP Server and other software, allows remote attackers to cause a denial of service memory...

Fedora 12 : maniadrive-1.2-22.fc12 / php-5.3.3-1.fc12 / php-eaccelerator-0.9.6.1-2.fc12 (2010-11428)

Update to PHP 5.3.3 Security Enhancements and Fixes in PHP 5.3.3: Rewrote varexport to use smartstr rather than output buffering, prevents data disclosure if a fatal error occurs CVE-2010-2531. Fixed a possible resource destruction issues in shmputvar. Fixed a possible information leak because of...

PHP < 5.2.14 / 5.3.x < 5.3.3 Multiple Vulnerabilities

Binary data 5616.prm...

PHP < 5.3.3 / 5.2.14 Multiple Vulnerabilities

Binary data 801070.prm...

Task Freak 0.6.2 SQL Injection

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CVE-2010-1583 Vendor notified and product update released. Details of this report are also available at http://www.madirish.net/?article=456 Description of Vulnerability: - ------------------------------ The Tirzen Framework http://www.tirzen.net/tzn/...

TaskFreak 0.6.2 - SQL Injection

TaskFreak 0.6.2 - SQL Injection CVE-2010-1583 Vendor notified and product update released. Details of this report are also available at http://www.madirish.net/?article=456 Description of Vulnerability: - ------------------------------ The Tirzen Framework http://www.tirzen.net/tzn/ is a supporti...

TaskFreak 0.6.2 SQL Injection Vulnerability

Exploit for php platform in category web applications =========================================== TaskFreak 0.6.2 SQL Injection Vulnerability =========================================== Description of Vulnerability: - ------------------------------ The Tirzen Framework http://www.tirzen.net/tzn/ ...