Tunisian Islamist Website Hacked by Anonymous

Tunisian Islamist Website Hacked by Anonymous The Facebook page of Hizb Ettahrir, an Islamist political party that is legally unrecognized in Tunisia, was hacked last night by a Tunisian group claiming affiliation with the international cyber activist collective Anonymous. "We are fighting you...

Iberianestates.com Cross Site Scripting

Exploit Title: iberianestates.com Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.iberianestates.com Date : 03.03.2012 Platform : Php Demos Site : http://www.iberianestates.com/details.php?id="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce...

09so Cross Site Scripting

Exploit Title: 09so Cross Site Scripting Author: Th4 MasK Contact to ; th4maskatwindowslive.com Software Link: http://www.09so.com Date : 02.03.2012 Platform : Php Demos Site : http://www.09so.com/s.php?key="alert"DarkDevilZ.iN / Th4 MasK" Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

Zerecords SQL Injection

Exploit Title: ZERECORDS SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website:http://www.zerecords.com/new/ Date : 24.02.2012 Platform : Php Demos Site : http://www.zerecords.com/onlineshop/items.php?id=1SQL Virüslerden Önce Akil Var. Ne Kadar Efendi Olursan Ol Hay...

dns-client-subnet-scan NSE Script

Performs a domain lookup using the edns-client-subnet option which allows clients to specify the subnet that queries supposedly originate from. The script uses this option to supply a number of geographically distributed locations in an attempt to enumerate as many different address records as...

SICT SQL Injection

Exploit Title: SICT SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.sict.gov.bd/ Date : 19.02.2012 Platform : Php Demos Site : http://www.mocat.gov.bd/personnel.php?id=1'27a Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Bazi seyler...

WebTriad SQL Injection

Exploit Title: WebTriad SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://www.webtriad.com.br/ Date : 19.02.2012 Platform : Php Demo Site : http://revistafocus.com/municipios.php?id=44SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Bazi...

TOIPKRO SQL Injection

Exploit Title: TOIPKRO SQL Injection Author: Th4 MasK Contact to ; [email protected] Software Website: http://edu.tomsk.ru/ Date : 14.02.2012 Platform : Php Demos Site : http://edu.tomsk.ru/works/works.php?id=11138SQL Virüslerden Önce Akil Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir. Baz...

SibexSystems SQL Injection

Exploit Title: SibexSystems SQL Injection Author: Th4 MasK Contact to ; [email protected] Vendor : http://sibexsystems.com/ Date : 17.02.2012 Platform : Php Demo Site : http://www.kashifhafeez.com/reply.php?id=1772 SQL Virüslerden Önce Akýl Var. Bilinmezlik DiyarinDan Olmassa Olmazimdir Baz...

Brand PHP SQL Injection

Exploit Title: Brand PHP SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: brand.php?id= Demo Site : http://www.mirabell.com.hk/brand.php?id=2SQL http://www.seikocan.com/brand.php?id=51SQL http://www.vmax-services.com/brand.php?id=11SQL...

MaDVideO SQL Injection

Exploit Title: MaDVideO SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 19.01.2012 Platform : Php Dork: vismadvideo.php?id= Demo Site : http://www.maduniverset.dk/vismadvideo.php?id=59 SQL Bilinmezlik Diyari Olmassa Olmazýmdýr. Bazi seyler. Email:[email protected]...

Logement Laval SQL Injection

Exploit Title: Logement Laval SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 04.01.2012 Platform : Php Google Dork: logementlavallocation.php?id= Demo Site : hhttp://www.meduane-habitat.fr/logementlavallocation.php?id=131SQL Panel = http://localhost/admin ÞÝfre Ve Ad =...

Moderate: Red Hat Security Advisory: dhcp security update

Updated dhcp packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Faculte SQL Injection

Exploit Title: Faculte SQL Injection Author: Th4 MasK Contact to ; [email protected] Date : 13.12.2011 Platform : Php Google Dork: facultymem.php?id= Demos Site : http://tarc.med.unc.edu/facultymem.php?id=9SQL http://www.uncioa.org/uncaging/person.asp?personID=25' Bilinmezlik Diyarý Olmassa...

Immobili SQL Injection

Exploit Title: Ýmmobili SQL Injection Google Dork: inurl:"immobilidettaglio.php?id=" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://www.simimmobiliare.it/ita/immobilidettaglio.php?contratto=0%27a...

View Article Blind SQL Injection

Exploit Title: View Article Blind SQL Injection Google Dork: inurl:"viewarticle.php?id" Author: Th4 MasK Date : 10.12.2011 Platform : Php Demos Site : http://alcazarmountain.com/viewarticle.php?id=1'a http://www.plwa.org/viewarticle.php?id=65'a http://www.uset.org/viewarticle.php?id=325'a Land of...

Ficha Blind SQL Injection

Exploit Title: Ficha Blind SQL Injection Google Dork: inurl:"ficha.php?id=" Author: Th4 MasK Tested on: Apache/2.3.3 Date :09.12.2011 Platform : Php Demos Site : http://www.nibbledpencil.com/ficha.php?id=336'a http://www.eurozinco.com/en/ficha.php?id=11'a...

#OccupyLondon : The Night of Thousand Masks on 5th November

OccupyLondon : The Night of Thousand Masks on 5th November Anonymous Mask = "A symbol that unites them behind one universal message " . Activists plan to protest on 5th November ,2011 at Saint Pauls Cathedral London 9:00pm - 11:00pm. This going to be "The Night of Thousand Masks ". Message By...

NGS00054 Technical Advisory: : Lumension Device Control (formerly Sanctuary) remote memory corruption

======= Summary ======= Name: Lumension Device Control formerly Sanctuary remote memory corruption Release Date: 24 August 2011 Reference: NGS00054 Discoverer: Andy Davis [email protected] Vendor: Lumension Vendor Reference: Systems Affected: Lumension Device Control v4.4 SR6 Risk: High...

Tinyproxy 'conf.c'整数溢出安全绕过漏洞

Bugtraq ID: 47715 CVE ID：CVE-2011-1499 Tinyproxy是一个小型的基于GPL的HTTP/SSL代理程序。 Tinyproxy在子网掩码生成实现上存在一个错误，当配置允许网络段时如"Allow 192.168.0.0/24"相对与默认的"Allow 127.0.0.1"，会允许任意IP地址连接，使其成为一个开放代理。如果配置使用一个或多个使用IP段的Allow语句，就会发生这种情况。 Banu Systems Private Limited Tinyproxy 1.8.2 厂商解决方案 Tinyproxy 1.8.3已经修复此漏洞，建议用户下载使用...