phpmoneybooks 1.03 Stored XSS

Exploit for php platform in category web applications Exploit Title: phpmoneybooks 1.03 Stored XSS Date: Jun 28, 2012 Exploit Author: chap0 - chap0.blogspot.com - @chap0 Vendor Homepage: http://phpmoneybooks.com/ Software Link:...

Threat Outbreak Alert: Fake DHL Express Tracking Notification Email Messages on February 3, 2014

Medium Alert ID: 26262 First Published: 2012 June 27 20:46 GMT Last Updated: 2014 February 4 13:56 GMT Version: 26 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a DHL Express tracking notification for the recipient. The text in the...

Threat Outbreak Alert: Fake Portuguese Pornographic Video Email Messages on April 22, 2014

Medium Alert ID: 26252 First Published: 2012 June 26 21:46 GMT Last Updated: 2014 April 23 14:15 GMT Version: 3 Summary Cisco Security has detected significant activity related to Portuguese-language spam email messages that claim to contain an attachment to a pornographic video file for the...

骑士cms注入，后台拿shell

简要描述： 0x1 任意用户登录 0x2 盲注 0x3 后台拿shell 0x4 随机函数问题 详细说明： 0x1 任意用户登录 user/login.php elseifempty$SESSION'uid' || empty$SESSION'username' || empty$SESSION'utype' && $COOKIE'QS''username' && $COOKIE'QS''password' && $COOKIE'QS''uid' ifcheckcookie$COOKIE'QS''username',$COOKIE'QS''password'...

How The Flame Malware Stayed Hidden For So Long

The past week has brought to light more revelations about the mysterious Flame or sKyWIper worm that was first identified at the end of May. Among them: the eye-popping admission from Microsoft that the malware’s authors found a way to use that company’s Windows Update feature to distribute the...

FreeBSD Ports: rt40

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: rt40

The remote host is missing an update to the system as announced in the referenced advisory. VID e0a969e4-a512-11e1-90b4-e0cb4e266481 OpenVAS Vulnerability Test $ Description: Auto generated from VID e0a969e4-a512-11e1-90b4-e0cb4e266481 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Micro Login System v 1.0 Read password

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 蒸...

Belkin N150 Wireless Router - Password Disclosure

Belkin N150 Wireless Router - Password Disclosure ============================================ Belkin N150 Wireless MD5 Password Disclosure ============================================ Firmware Version : 1.00.22 Aug 31 2010 14:36:01 Boot Version : 1.20 Hardware : F7D1301 v1 01A Author : Avinash...

Belkin N150 Wireless Router - Password Disclosure

============================================ Belkin N150 Wireless MD5 Password Disclosure ============================================ Firmware Version : 1.00.22 Aug 31 2010 14:36:01 Boot Version : 1.20 Hardware : F7D1301 v1 01A Author : Avinash Tangirala ====================== Vulnerability...

Threat Outbreak Alert: Fake Product Order Quotation Email Messages on July 5, 2015.

Low Alert ID: 25838 First Published: 2012 May 7 17:05 GMT Last Updated: 2015 July 15 12:27 GMT Version: 91 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a product order quotation for the recipient. The text in the email message...

oclHashcat-plus v0.08 Released - fastest password Cracker

oclHashcat-plus v0.08 Released - fastest password Cracker oclHashcat-plus is Worlds first and only GPGPU based rule engine and Worlds fastest md5crypt, phpass, mscash2 and WPA / WPA2 cracker. Features Free Multi-GPU up to 16 gpus Multi-Hash up to 24 million hashes Multi-OS Linux & Windows native...

Google Sent Hacked Notification Messages to Millions of Webmasters

Google Sent Hacked Notification Messages to Millions of Webmasters Google's head of the webspam team, Matt Cutts, announced on Twitter that they have sent out new message notifications to 20,000 web sites that are hacked. Specifically, Google sent these messages to sites doing "weird redirects."...

Simple Help Desk Remote Upload Vulnerability

Exploit for php platform in category web applications Author : L3b-r1'z Title : Simple Help Desk Remote Upload Vulnerability Email : email protected Site : Sec4Leb.Com Download : http://simplehelpdesk.com/helpdeskfinal.zip Dork : allintitle: "Help Desk - Log In" Upload Vuln + P0c : First Register...

http-virustotal NSE Script

Checks whether a file has been determined as malware by Virustotal. Virustotal is a service that provides the capability to scan a file or check a checksum against a number of the major antivirus vendors. The script uses the public API which requires a valid API key and has a limit on 4 queries p...

MongoDB Login Utility

This module attempts to brute force authentication credentials for MongoDB. Note that, by default, MongoDB does not require authentication. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Mongo...

Irongeek's Shared hosting MD5 Change Detection Script

Irongeek's Shared hosting MD5 Change Detection Script Adrian Crenshaw aka Irongeek just release another great tool for web admins that will monitor the files on a website, and report any changed via email. Actually "irongeek.com" was hacked few days back which is hosted on a shared hosting. There...

Threat Outbreak Alert: Fake UPS Payment Document Attachment Email Messages on January 21, 2014

Low Alert ID: 25171 First Published: 2012 February 13 15:22 GMT Last Updated: 2014 January 22 15:06 GMT Version: 53 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a payment document from the United Parcel Service UPS for the recipient...

Fedora 15 : BackupPC-3.2.1-7.fc15 (2012-0826)

change %%sharedstatedir to %%localstatedir/lib as these expand differently on EL bz 767719 - fix XSS vulnerability bz 749846, bz 749847, bz 749848 CVE-2011-3361 - additional documentation about enabling correct channels in RHEL to resolve all dependencies bz 749627 - fix bug with missing...

Zulu - Zscaler Malware Scanning Service

Zulu - Zscaler Malware Scanning Service Zscaler has launched a new freE online service called Zulu that can assess the security risk associated with URLs by analyzing the content they point to, as well as the reputation of their corresponding domain names and IP addresses. Zulu allows security...