10 Indian Websites Hacked By Shak (Pak Cyber Army)

10 Indian Websites Hacked By Shak Pak Cyber Army Hacked sites : https://zone-h.org/mirror/id/13185121 https://creativeholidaysindia.com/ https://zone-h.org/mirror/id/13185121 https://oils-fats-technology.com/ https://zone-h.org/mirror/id/13185126 https://zone-h.org/mirror/id/13185139...

Pidgin < 2.7.10 Information Disclosure

The version of Pidgin installed on the remote host is earlier than 2.7.10. Such versions are potentially affected by an information disclosure vulnerability because the application does not properly clear certain data structures used in 'libpurple/cipher.c' prior to freeing. An attacker, exploiti...

Уязвимости в Adobe ColdFusion

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL DB Structure Extraction, Full path disclosure и Cross-Site Scripting уязвимостях в Adobe ColdFusion. Они имеют место на странице детального сообщения об ошибке. 16.11.2010 я приватно сообщил об этом Adobe, но они проигнорировали моё сообщение...

Adobe ColdFusion Cross Site Scripting / Disclosure

Hello list! I want to warn you about SQL DB Structure Extraction, Full path disclosure and Cross-Site Scripting vulnerabilities in Adobe ColdFusion. The vulnerabilities exist at detailed error report page. At 16.11.2010 I privately informed Adobe about it, but they ignored my letter...

W-Agora 4.2.1 Cross Site Scripting / Denial Of Service / SQL Injection

Hello Packet Storm! I want to warn you about Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection and Denial of Service vulnerabilities in W-Agora. SecurityVulns ID: 11324. ------------------------- Affected products: ------------------------- Vulnerable are W-Agora 4.2.1 and previous...

Samyak Tejawat found vulnerability in this Italian government site !

Samyak Tejawat 13 year old found vulnerability in this Italian government site ! Whole database can be extracted. Mr. Samyak Tejawat inform the admins of site about this venerability, Hope it will be fixed soon : SQLi vuln. link =...

Fedora 14 : maniadrive-1.2-23.fc14 / php-5.3.4-1.fc14.1 / php-eaccelerator-0.9.6.1-3.fc14 (2010-18976)

Security Enhancements and Fixes in PHP 5.3.4 : - Fixed crash in zip extract method possible CWE-170. - Paths with NULL in them foo\0bar.txt are now considered as invalid CVE-2006-7243. - Fixed a possible double free in imap extension Identified by Mateusz Kocielski. CVE-2010-4150. - Fixed NULL...

Django admin list filter data extraction / leakage

ADVISORY INFORMATION: Advisory ID: NGENUITY-2010-009 Date discovered: 8.28.2010 Date published: 12.22.2010 SOFTWARE AFFECTED: “Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.” 1 The admin interface of the Django web framework can be abuse...

Многочисленные уязвимости в W-Agora

Здравствуйте 3APA3A! Сообщаю вам о найденных мною многочисленных Cross-Site Scripting, SQL DB Structure Extraction, SQL Injection и Denial of Service уязвимостях в W-Agora. XSS WASC-08:...

Team Injector (1337db) Hack Into Exploit-db Website !

Team Injector Hack Into Exploit-db Website ! ================================ Data Extracted From Exploit-db's Server ! ================================ $ uname -a Linux www 2.6.32-25-server 45-Ubuntu SMP Sat Oct 16 20:06:58 UTC 2010 x8664 GNU/Linux $ id uid=33www-data gid=33www-data...

Новые уязвимости в Cetera eCommerce

Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Cross-Site Scripting и SQL DB Structure Extraction уязвимостях в Cetera eCommerce. XSS WASC-08: http://site/cms/templates/banner.php?bannerId=3Cscript3Ealertdocument.cookie3C/script3E SQL DB Structure Extraction WASC-13:...

Xplico v0.6.1 - Network Forensic Analysis Tool (NFAT)

"The goal of Xplico is extract from an internet traffic capture the applications data contained. For example, from a pcap file Xplico extracts each email POP, IMAP, and SMTP protocols, all HTTP contents, each VoIP call SIP, FTP, TFTP, and so on. Xplico isn't a network protocol analyzer. Xplico is...

Fedora Update for cabextract FEDORA-2010-14135

Check for the Version of cabextract OpenVAS Vulnerability Test Fedora Update for cabextract FEDORA-2010-14135 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...

Pandora Fms 3.1 - SQL Injection

Introduction Pandora FMS for Pandora Flexible Monitoring System is a software solution for monitoring computer networks. It allows monitoring in a visual way the status and performance of several parameters from different operating systems, servers, applications and hardware systems such as...

FOCA v2.5.6 - Latest Version download

A newer and improved version of FOCA version 2.5.6 is out for the grabs! "FOCA, which stands for "Fingerprinting Organization with Collected Archives" is an automated tool for downloading documents published in websites, extracting metadata and analyzing data." This is the change log: Log Filter...

E-Xoopport 3.1 - 'display.php?katid' SQL Injection

= 5 this may take some minutes.. / EXPLOIT / errorreporting0; iniset"defaultsockettimeout",30; settimelimit0; function httpsend$host, $packet $sock = fsockopen$host, 80; $c = 0; while !$sock if $c++ == 10 die; print "\n- No response from ".$host.":80 Trying again..."; $sock = fsockopen$host,80;...

WeBID Detection

Detection of WeBid. The script sends a connection request to the server and attempts to extract the version number from the reply. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

SqlInjector : A MS SQL Server Blind Injector !

SqlInjector was originally called as BlindSQLInjector. SqlInjector is an application to perform completely blind SQL injection, that currently supports only MS SQL Server. It uses time based inference to determine true or false conditions to extract data. The key feature is that it uses a binary...

Mozilla Firefox - Simplified Memory Corruption (PoC)

Mozilla Firefox - Simplified Memory Corruption PoC Hi there, For those who still do not know .. The proof of concept that I have extracted for CVE-2010-3765 is the following: function Gstr var cobj=document.createElementstr; document.body.appendChildcobj; cobj.scrollWidth; function crashme...

MSSQL SQL Injection

Вывод ошибок. http://site.com/script.asp?id=5's Код: Microsoft OLE DB Provider for SQL Server error '80040e14' MicrosoftODBC SQL Server DriverSQL ServerUnclosed quotation mark after the character string '5's'. /file.asp, line 1000 Ошибки могут быть разные, в зависимости на чем обрабатывается mssq...