Meet the Creator of North Korea’s Favorite Crypto Privacy Service

The world’s most prolific crypto thieves have used Sinbad.io to launder tens of millions. Its creator, “Mehdi,” answers WIRED’s questions...

Invoice - Moderately Critical - Multiple vulnerabilities - SA-CONTRIB-2015-085

Invoice module allows you to create invoices in Drupal. The module doesn't sufficiently sanitize user supplied text in some pages, thereby exposing a Cross Site Scripting vulnerability. Additionally, some URLs were not protected against CSRF. A malicious user can cause another user to create,...

WordPress ShortCode Plugin 1.1 - Local File Inclusion Vulnerability

Exploit for php platform in category web applications Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 1.1 Plugin Name : Download...

WordPress ShortCode 0.2.3 Local File Inclusion

Title : WordPress ShortCode Plugin - Local File Inclusion Vulnerability Severity : High+/Critical Reporters : Mehdi Karout & Christian Galeone Google Dork : inurl:wp/wp-content/force-download.php Plugin Version : 0.2.3 Plugin Name : Download ShortCode Vendor Home : http://werdswords.com/ Date :...

Xoops 2.5.6 Cross Site Scripting

Xoops 2.5.6 Multiple XSS vulnerabilities ------------------------------------------------------------ == Description == - Software link: http://xoops.org/ - Affected versions: version 2.5.6last version is vulnerable. Other versions might be affected as well. - Vulnerability discovered by: Mehdi...

PHP Melody 1.9 CSRF Vulnerabilities

An attacker may force the users of a web application to execute actions of the attacker's choosing. A successful CSRF exploit can compromise end user data and operation in case of normal user. If the targeted end user is the administrator account, this can compromise the entire web application. P...

phpBB 3.0.11 CSRF Vulnerability

An attacker may force the users of a web application to execute actions of the attacker's choosing. A successful CSRF exploit can compromise end user data and operation in case of normal user. If the targeted end user is the administrator account, this can compromise the entire web application...

PHP Melody 1.0 Cross Site Request Forgery

PHP Melody 1.9 CSRF vulnerabilitie ------------------------------------------------------------ == Description == - Software link: http://www.dl.seven7soft.net/script/PHPMELODY1.9.zip - Affected versions: version 1.9 .other versions might be affected as well. - Vulnerability discovered by: Mehdi...

IntelliTamper 2.07 / 2.08 Buffer Overflow

IntelliTamper 2.07/2.08 deferRemote Buffer Overflow Poc By Mehdi 0uH4dd0u SkuLL-HacKeR H0m3 : S3curity-art.com & Google.com M4!L : [email protected] & [email protected] usage : perl xpl.pl xpl.html my $IntelliTamperhtml ='SkuLL-HackeR Home World' . '' . ""; print $IntelliTamperhtml; Windows Live...

CVE-2006-4861

The CVE-2006-4861 entry describes a SQL injection vulnerability in loginprocess.asp of Mohammed Mehdi Panjwani Complain Center 1. The flaw allows remote attackers to execute arbitrary SQL via the TxtUser (Username) and TxtPass (Password) parameters in login.asp. The NVD metrics assign a base scor...