Tradingeye E-Commerce Shopping Cart - Multiple Vulnerabilities

Exploit Title: Tradingeye Multiple Vulnerabilities Vendor: www.tradingeye.com Date: 12th july,2011 Author: $4d0//r007k17 a.k.a Raghavendra Karthik D http://www.shadowrootkit.wordpress.com Google Dork: Powered by Tradingeye. 2009 Tradingeye v6 demo BREIF DESCRIPTION Tradingeye is a fully-featured...

New iOS Jail Break Stokes Fears of Drive By Attacks

The clock is ticking for Apple to issue a patch for the iOS operating system that powers iPhones, iPods and iPads following the release of a remote exploit that uses specially crafted PDF files to defeat iOS’s content protection mechanisms and “jailbreak” mobile devices like the iPhone and iPad...

Dangerous Whitespaces

By Marta Janus A few days ago, I blogged about a PHP/JS malware targeting the osCommerce platform, which used an interesting new technique to obfuscate the malicious code. It so happens, that today I came across even more advanced sample of a PHP infector, also in the context of a vulnerable...

PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability

Exploit for php platform in category web applications +Exploit Title: PEEL Open e-commerce systems Sensitive Database Disclosure Vulnerability +Author : ^Xecuti0n3r + E-mail : xecuti0n3ryahoo.com + dork : inurl:"lire/index.php?rubid=" + Category : Web Apps SQli...

frame-oshop SQL injection vulnerability and fix-vulnerability warning-the black bar safety net

frame-oshop is a e-Commerce system, the frame-oshop in the presence ofSQL injectionvulnerabilities that could lead to sensitive information disclosure. +info: frame-oshop SQL Injection Vulnerability product: frame-oshop vendor: http://www.sdaxx.de/ date: 15.05.2011 status: 0day version: i dunno...

Leading Edge Technology Solutions SQL Injection

========================================================================= Leading Edge Technology Solutions L.E.T.S SQL-i Vulnerability ========================================================================== +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+=...

Leading Edge Technology Solutions (L.E.T.S) SQL-i Vulnerability

Exploit for php platform in category web applications +=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+=+= +=+=+= +=+=+= +=+=+= /\ | | | | +=+=+= +=+=+= / \ | || | / / | \ | |\ \ / \ / / +=+=+= +=+=+= / /\ | || | // | | | | / | | \ / / / +=+=+= +=+=+= / \ | | | | | | ...

EZ-Shop 1.02 - Lateral SQL Injection

EZ-Shop 1.02 - Lateral SQL Injection Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com...

EZ-Shop 1.02 - Lateral SQL Injection

Security Advisory Details: 14/04/2011 Script EZ-Shop 1.02 Location http://www.fcsoftware.co.uk/index.php?page=opensource Vulnerability SQL Injection Original Adv http://y-osirys.com/security/exploits/id28 Author Giovanni Buzzin, "Osirys" Site y-osirys.com Contact osirysatautisticidotorg Greets to...

QNet confirmed that e-commerce portal was down due to DDoS attack

QNet confirmed that E-commerce portal was down due to DDoS attack QNet has confirmed that its e-commerce portal was recently the target of a Distributed Denial of Service DDoS attack. This caused its main website to be offline for over 36 hours. QI Group IT Director, TG Kintanar said, "As a globa...

PrestaShop Open-Source E-commerce SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: PrestaShop Open-Source E-commerce SQL Injection Vulnerability Author: Daniel Godoy Author Mail: DanielGodoyatGobiernoFederaldotcom Author Web: www.delincuentedigital.com.ar Script: http://www.prestashopcom Dork: allinurl:...

Online Store PHP Script By Goran Cross Site Scripting

f0und by: kurdish hackers team group: kurd-team c0ntact: [email protected] site: www.kurdteam.org ================================= ==============script=============== ================================= script: Online Store d0rk:Copyrights © 2009 - Online Store. All rights reserved. Powered by:...

Online Store PHP Script By Goran SQL Injection

f0und by: kurdish hackers team group: kurd-team c0ntact: [email protected] site: www.kurdteam.org ================================= ==============script=============== ================================= script: Online Store d0rk:Copyrights © 2009 - Online Store. All rights reserved. Powered by:...

35,000 Chinese websites hacked in 2010 !

A total of 35,000 websites on the Chinese mainland were attacked by hackers in 2010, including 4,635 government websites, according to the Internet security report released by the National Computer Network Emergency Response Technical Team/Coordination Center of China CNCERT/CC on March 9. The...

Attackers Find Point-of-Sale Software an Easy Target

While most consumers worry about their credit card or debit card numbers or other valuable data being stolen from their home computers or leaked via a data breach at their banks, a new report shows that the vast majority of attacks that harvest this sensitive data actually target weak software on...

Texas Man admits hacking into e-commerce servers of NASA !

A Texas man has admitted hacking into servers owned by an e-commerce company and making off with about $275,000. Jeremey Parker of Houston also copped to charges of breaking into servers maintained by NASA's Goddard Space Flight Center in Maryland and causing some $43,000 of damage. The hacking...

Peel E-Commerce / Shopping SQL Injection

!/usr/bin/python This was written for educational purpose and pentest only. Use it at your own risk. Author will be not responsible for any damage! !!! Special greetz for my friend sinner01 !!! Toolname : peelinject.py Coder : baltazar a.k.a b4ltazar Version : 0.1 greetz for d3hydr8, rsauron,...

US Enhancing Online Security !

U.S. Commerce Secretary Gary Locke and White House Cybersecurity Coordinator Howard Schmidt announced this month plans to create a National Program Office to help foster an environment in which sensitive online transactions can be carried out with greater levels of trust. The announcement was mad...

IPN Development Handler 2.0 SQL Injection / Cross Site Request Forgery

IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ === Exploit === IPN Development Handler...

IPN Development Handler 2.0 - Multiple Vulnerabilities

IPN Development Handler v2.0 CSRF Change Admin Account ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Script : http://scripts.filehungry.com/product/php/e-commerce/paypal/ipndevelopmenthandler/ === Exploit === IPN Development Handler...