TeaMp0isoN releases list of vulnerable police web sites

TeaMp0isoN releases list of vulnerable police web sites TeaMp0isoN group of hackers published a list of vulnerable law enforcement authorities websites that can be hacked using MSAccess SQL injection attacks. Member from TeaMp0isoN with codename "f0rsaken" create a pastebin note with following...

zFtp Server <= 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability

zFtp Server = 2011-04-13 | "STAT,CWD" Remote Denial of Service Vulnerability 1. OVERVIEW The zFTP server is found to be vulnerable to denial of service in handling multiple STAT and CWD command requests. 2. BACKGROUND The zFTP server is a Windows based FTP server with focus on clever Active...

zFTPServer - 'cwd/stat' Remote Denial of Service

!/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server version 2011-04-13 08:59' title = ' "cwd" Remote...

zFTPServer - cwdstat Remote Denial of Service

zFTPServer - cwdstat Remote Denial of Service !/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Server...

zFTP Server "cwd/stat" Remote Denial-of-Service

Exploit for windows platform in category dos / poc !/usr/bin/python Exploit Title: zFTP Server "cwd" Remote Denial-of-Service Date: 2011-10-24 Author: Myo Soe Version: 2011-04-13 08:59 Tested on: Windows XP, 2K3 import socket import sys import time author = 'c Myo Soe ' server server = 'zFTP Serv...

More than 10,000 Facebook account hacked by TeamSwaSTika

More than 10,000 Facebook account hacked by TeamSwaSTika Another group of Hackers, self titled Team Swastika, have caused panic amongst Facebook users after releasing the details of 10,000 accounts onto popular text sharing site, Pastebin. Pastebin, usually used to share source code, has frequent...

vTiger CRM 5.2.1 Blind SQL Injection

vTiger CRM 5.2.x = Blind SQL Injection Vulnerability 1. OVERVIEW The vTiger CRM 5.2.1 and lower versions are vulnerable to Blind SQL Injection. No fixed version has been released as of 2011-10-05. 2. BACKGROUND vtiger CRM is a free, full-featured, 100% Open Source CRM software ideal for small and...

Joomla! 1.7.0 | Multiple Cross Site Scripting (XSS) Vulnerabilities

No description provided by source. 1. OVERVIEW Joomla! 1.7.0 stable version is vulnerable to multiple Cross Site Scripting issues. 2. BACKGROUND Joomla is a free and open source content management system CMS for publishing content on the World Wide Web and intranets. It comprises a...

Pro-Syrian 'Electronic Army' Hacks Harvard University Site

Hackers from the Syrian Electronic Army SEA vandalized Harvard University’s website Monday morning, presenting visitors to the Ivy League university’s homepage with an image of Syrian president Bashar al-Assad dressed posed in front of the nation’s flag in full army regalia. The image was...

Mobile APP Network Forum Hacked, 15000 user accounts leaked

Mobile APP Network Forum Hacked, 15000 user accounts leaked Mobile APP Network Forum is Hacked by "Why So Serious?" hacker. He also hacked VBTeam.info and EA Game - Battlefield Heroes some days before. He leaked over 15.000 accounts of the community Forum on Pastebin in two parts. Part 1 Part 2...

################################ IRANIAN THE BEST HACKERS IN THE WORLD ################## #################### #################### ## ## Remote SQL injection Vulnerability ## ## Dataminas (noticias.php?categoria_id) (galeria.php?galeria

IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability Simply Media Web archivio.asp?categoriaid AuTh0r : EhsanHp200 H0ME : www.ehsanhp.blogsky.com Email : [email protected] Vendor : http://www.simplymediaweb.it/ Persian Gulf 4 Ever! Dork : "Powered by Simply Media Web"...

Jcow CMS 4.2 Cross Site Scripting

Jcow CMS 4.2...

Windows Gather AutoLogin User Credential Extractor

This module extracts the plain-text Windows user login password in Registry. It exploits a Windows feature that Windows 2000 to 2008 R2 allows a user or third-party Windows Utility tools to configure User AutoLogin via plain-text password insertion in AltDefaultPassword field in the registry...

Elgg 1.7.10 <= | Multiple Vulnerabilities

OVERVIEW The Elgg 1.7.10 and lower versions are vulnerable to Cross Site Scripting and SQL Injection. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities and associations to create their own fully-featured...

Elgg 1.7.10 Cross Site Scripting / SQL Injection

OVERVIEW The Elgg 1.7.10 and lower versions are vulnerable to Cross Site Scripting and SQL Injection. 2. BACKGROUND Elgg is an award-winning social networking engine, delivering the building blocks that enable businesses, schools, universities and associations to create their own fully-featured...

Elgg 1.7.10 - Multiple Vulnerabilities

Elgg 1.7.10 - Multiple Vulnerabilities Exploit Title: Elgg 1.7.10 Software Link: http://elgg.org/getelgg.php?forward=elgg-1.7.10.zip Version: 1.7.10 = 1. XSS...

Elgg 1.7.10 - Multiple Vulnerabilities

Exploit Title: Elgg 1.7.10 Software Link: http://elgg.org/getelgg.php?forward=elgg-1.7.10.zip Version: 1.7.10 = 1. XSS...

WebsiteBaker 2.8.1 <= Cross Site Request Forgery (CSRF) Vulnerability

OVERVIEW WebsiteBaker 2.8.1 and lower versions are vulnerable to Cross Site Request Forgery CSRF. 2. BACKGROUND WebsiteBaker is a PHP-based Content Management System CMS designed with one goal in mind: to enable its users to produce websites with ease. 3. VULNERABILITY DESCRIPTION WebsiteBaker...

HP JetDirect PJL - Query Execution (Metasploit)

Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...

HP JetDirect Printer PJL Query Execution

Exploit Title: HP JetDirect PJL Query Execution Date: Aug 7, 2011 Author: Myo Soe Software Link: http://www.hp.com Version: All Tested on: HP LaserJet Pxxxx Series $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the...