328 matches found
SQL Injection Vulnerability in the Goodsid Parameter in the Add.aspx Page of the Office Automation System of Shanghai Shuang Yang Computer Hi-Tech Development Co.
Shanghai Shuang Yang Computer Hi-Tech Development Company Shuang Yang for short is a high-tech enterprise mainly engaged in application software development and system integration. The product /DSOATY/goods/GoodsAdd.aspx?goodsid=1&flag=2 at the existence of SQL injection vulnerability, the...
WSTMall apps/home/model/goodsmodel.class.php c1Id参数等6处SQL注入
No description provided by source...
Etsy: Handmade & Vintage Goods - Dangerous filesystem permissions, Exported ContentProvider, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Etsy: Handmade & Vintage Goods published at the 'play' market has multiple vulnerabilities...
Dangerous Goods Manual - ContentProvider mode not defined, Corrupted files, Dynamic Code Loading vulnerabilities
HackApp vulnerability scanner discovered that application Dangerous Goods Manual published at the 'play' market has multiple vulnerabilities...
双杨OA系统 /DSOA_TY/Office_Supplies/Goods_In.aspx SQL注入漏洞
No description provided by source...
ECShop 2.6 /goods_script.php SQL注入
No description provided by source...
Silk Road Reloaded Switches from Tor to I2P Anonymous Network
Multiple successors of the original Silk Road have come and all have been taken offline in recent years, but aside from selling illegal goods and services, they all have had one thing in common – they've all relied on the Tor network. A new version of the anonymous online black market Silk Road,...
More than 400 Underground Sites seized by FBI in 'Operation Onymous'
The joint operation by authorities of the U.S. Federal Bureau of Investigation FBI and European law enforcement seized Silk Road 2.0, an alternative to the notorious online illegal-drug marketplace last week, and arrested 26-year-old operator Blake Benthall, but that wasn't the end. US and Europe...
Ecommercemax Solutions Digital Goods Seller SQL Injection
No description provided by source. Author: R4dc0re Exploit Title:Ecommercemax Solutions Digital good seller Sql Injection Vulnerablity Date: 05-12-2010 Vendor or Software Link:http://www.ecommercemax.com/ Category:WebApp Version:1.5 Price:60$ Contact: [email protected] Website: www.1337db.com...
Thinksaas SQL注入漏洞
简要描述： Thinksaas SQL注入5 详细说明： Thinksaas SQL注入5 积分兑换——物品编辑处，sql注入。 第一处：/app/redeem/action/edit.php case "do": $goodsid = intval$POST'goodsid'; $cateid = intval$POST'cateid'; $title = trim$POST'title';//问题在这里 $content = trim$POST'content';//问题在这里 $nums = intval$POST'nums'; $scores =...
ecshop最新版本前台二次注入系列(2)
简要描述： 二次注入第二枚，这个点的注入内容至少进出数据库6次才最终到达了注入结果页面，当然全程可控。 详细说明： 先上注入结果图： SQL注入流程： 1.插入注入代码goodsattr至订单商品/wholesale.php可以插入,即商品批发页面，这里的goodsattr和 WooYun: ecshop最新版本前台二次注入系列1 里goodsattrid是不同的，之前的漏洞即正常在商品页面加入购物车是不能控制goodsattr的，当时goodsattr从数据库商品属性表读取。 2.将1生成的订单在用户中心订单查看页执行“放回购物车”操作。 3.查看购物车页面，注入代码执行 代码分析：...
ZeroClipboard Wordpress plugin XSS / FPD Vulnerabilities
Cross-Site Scripting vulnerabilities in multiple plugins for WordPress with ZeroClipboard.swf. These are Cross-Site Scripting vulnerabilities in multiple plugins for WordPress with ZeroClipboard.swf. Earlier I've wrote about Cross-Site Scripting vulnerabilities in ZeroClipboard...
SHOPEX 4.8.5 SQLINJECTION injection as well as background get SHELL-vulnerability warning-the black bar safety net
Vulnerability is the core function \core\modelv5\trading\mdl.goods.php since zend decryption out of the specific line number is not posted 0 1 function getproducts $gid, $pid = 0 //injection injection injection injection injection injection injection injection injection injection injection...
The Pirate Bay Buys Greek Airspace for Launching Low Orbit Server Drones
The Pirate Bay Buys Greek Airspace for Launching Low Orbit Server Drones Few days back we reported that, One of the world's largest BitTorrent sites "The Pirate Bay" is going to put servers on GPS-controlled aircraft drones in order to evade authorities who are looking to shut the site down. Most...
2013 Federal Budget Includes Nearly $800M For Cybersecurity
President Obama is asking for $769 million to fund information security initiatives via the Department of Homeland Security in 2013. That amount is nearly twice what DHS asked for last year to fund its cybersecurity work. “The Administration proposes $769 million to support the operations of the...
Inside a Hacker Forum
Hacker forums function as a kind of combination training academy, social network and central bazaar for attackers looking for new tools, methods and techniques. They’re also often patrolled by law enforcement agents and security researchers, but it’s rare that any of the information that those...
An Inside Look at Criminal Shipping Operations
Cyber criminals are relying more than ever on mules to move fenced goods from the U.S. to foreign markets for resale, according to a report on krebsonsecurity.com. With online retailers cracking down on fraudulent purchases, criminal gangs are using networks of complicit or unwitting citizens to...
Student Charged With Posting Counterfeit Coupons to 4Chan
A student at New York’s Rochester Institute of Technology RIT has been arrested for producing hundreds of thousands of dollars worth of fake coupons and posting them to 4chan and other websites. Lucas Henderson, a 22-year old computer security student from Lubbock, Texas was charged with wire fra...
U.S. Government Shuts Down 84,000 Websites By Mistake !
The US Government has yet again shuttered several domain names this week. The Department of Justice and Homeland Security's ICE office proudly announced that they had seized domains related to counterfeit goods and child pornography. What they failed to mention, however, is that one of the target...
