Chipmunk Newsletter XSRF

------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009. -------------------------------------------------------------------------------------------------...

Piwigo 2.0.6 - Multiple Vulnerabilities

Piwigo v2.0.6 Multiple Vulnerabilities Found By: mrme Download: http://piwigo.org/ Tested On: Windows Vista Note: For educational purposes only Vulnerabilities: XSS, CSRF, SQL Injection Author contact date: 13/12/09 Note: There is possibly many other vulnerabilities but I need to sleep! XSS...

Chipmunk Newsletter CSRF Vulnerabilities

No description provided by source. ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Chipmunk NewsLetter - Cross-Site Request Forgery

Chipmunk NewsLetter - Cross-Site Request Forgery ------------------------------------------------------------------------------------------------- Title: Chipmunk Newsletter CSRF Vulnerabilities Author: Milos Zivanovic Date: 11. December 2009...

Billwerx RC v3.1 Multiple Vulnerabilities

No description provided by source. Billwerx RC v3.1 Multiple Vulnerabilities Found By: mrme Download: http://www.billwerx.com/download.php Tested On: Windows Vista Note: For educational purposes only XSS POC: A regular employee can embed javascript code that could be executed within the context o...

Twitter Domain API Back in Malware Fray

Malware writers have revamped code that uses a popular Twitter command to generate hard-to-predict domain names, a technique that brings stealth to their drive-by exploits. Read the full article. The Register...

Cisco Defines Cybercrime ROI

The Cisco Cybercrime Return on Investment Matrix identifies the innovative and lucrative banking Trojan Zeus, as well as successful Web exploits that have dominated cybercrime as “rising stars.” Read the full article. TechTarget...

CVE-2009-4571

creationtimestamp| type| source ---|---|--- 2009-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10324 2013-01-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/24108...

UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== UBB.threads 7.5.4 2 Multiple File Inclusion Vulnerabilities =========================================================== UBBCentral: http://www.ubbcentral.com/ UBB.threads is prone...

CVE-2009-4231

creationtimestamp| type| source ---|---|--- 2009-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10246...

CVE-2009-4120

creationtimestamp| type| source ---|---|--- 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10224 2009-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33375...

CVE-2009-3576

creationtimestamp| type| source ---|---|--- 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10211 2009-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33273...

CVE-2009-4032

creationtimestamp| type| source ---|---|--- 2009-11-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33374 2009-11-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10234...

CVE-2009-3840

creationtimestamp| type| source ---|---|--- 2009-11-17 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10176 2009-11-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10377...

CVE-2009-4047

creationtimestamp| type| source ---|---|--- 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33355 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33354 2009-11-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33356 2009-11-16...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

Online Ad Site Hacked, Rigged to Serve Exploits

A high-profile online advertising Web site has been hacked and rigged to serve multiple exploits to Microsoft Windows users surfing the net with unpatched third party desktop software. According to a warning issued by Websense Security Labs, the malicious code was found on media-servers.net, whic...

CuteNews 1.4.6 - result Cross-Site Scripting

CuteNews 1.4.6 - result Cross-Site Scripting source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and security-bypass issues. Note...

phpMyAdmin table parameter SQL injection vulnerability-vulnerability warning-the black bar safety net

Affected version: phpMyAdmin phpMyAdmin 3. x phpMyAdmin phpMyAdmin 2.11. x vulnerability describes:BUGTRAQ ID: 3 2 7 2 0 phpMyAdmin is PHP written tool used by the WEB Management of MySQL. phpMyAdmin./ phpmyadmin/libraries/dbtableexists. lib. php file does not properly filter table parameters:...

CuteNews 1.4.6 - index.php Multiple Cross-Site Scripting Vulnerabilities

CuteNews 1.4.6 - index.php Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/36971/info CuteNews and UTF-8 CuteNews are prone to multiple vulnerabilities, including cross-site scripting, HTML-injection, information-disclosure, arbitrary-script-injection, and...