Thanks to the researchers 2014

Research Thanks to the researchers 2014 Share January 31st, 2014 Each year, a number of researchers offer their assistance to help us tighten the security of our wide array of websites. We would like to take this opportunity to thank the researchers and testers of 2014 for their assistance in...

Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability

Document Title: =============== Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1028 View: http://www.youtube.com/watch?v=wcIIFB4Gx7g Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1026 Microsoft Securi...

Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability

Document Title: =============== Microsoft MSRC RSS ASPX - CS Cross Site Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=1028 View: http://www.youtube.com/watch?v=wcIIFB4Gx7g Advisory: http://www.vulnerability-lab.com/getcontent.php?id=1026 Microsoft Securi...

Dsl Router D-link BZ_1.06 Multiple Vulnerabilities

Exploit for hardware platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1...

Influence Design <= Remote (news.php) Based SQL Injection

Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...

Another Cyber attack Hit Regions Bank and SunTrust

As warned by Izz ad-Din al-Qassam Cyber Fighters They launched another distributed denial-of-service DDOS attack against the website of Regions Financial Corp regions.com and SunTrust. The computer attacks burden the bank websites with heavy traffic volume that causes slow service for the sites o...

Supreme Court of Pakistan website defaced by Zombie_Ksa

Supreme Court of Pakistan website defaced by ZombieKsa The official website of Pakistan's Supreme Court has been hacked.Visitors to the website found derogatory and abusive remarks about the court and Chief Justice Iftikhar Muhammad Chaudhry. Earlier the Supreme Court website was hacked by two bo...

Cross Site Scription Vulnerability in vBulletin 4.1.3, 4.1.4 and 4.1.5

Advisory Information Title: vBulletin Cross Site Scripting Vulnerability Vendors contacted: vBulletin team ---- Vulnerability Information Class: XSS flaw Vulnerable page: Admin Login Page admincp Remotely Exploitable: Yes ---- Vulnerability Description vBulletin is a community forum solution for ...

vBulletin 4.1.3pl3 / 4.1.4pl3 / 4.1.5pl1 Cross Site Scripting

Advisory Information Title: vBulletin Cross Site Scripting Vulnerability Date published: 02-08-2011 Vendors contacted: vBulletin team Vulnerability Information Class: XSS flaw Vulnerable page: Admin Login Page admincp Remotely Exploitable: Yes Locally Exploitable: No Vulnerability Description...

2Point Solutions - 'cmspages.php' SQL Injection

============================================= 2Point Solutions SQL Injection Vulnerability ============================================= + Exploit Title : 2Point Solutions cmspages.php SQL Injection Vulnerability + Author : NewbieCampuz + Published: 2011-06-24 : 02.54 WIB + Test On : Windows XP S...

Facebook Founder, Mark Zuckerberg's Facebook Fan Page Hacked !

It turns out even if you own the Internet, you're still susceptible to malicious hackers. Facebook CEO Mark Zuckerberg had to change Web addresses for his Facebook fan page late Tuesday night after a hacker appeared to gain access to the page and had the ability to write status messages on behalf...

Concept E-Commerce SQL Injection

Concept E-commerce SQL Injection Vulnerability Vendor : http://www.conceptinternetltd.com/ecommerce.php http://www.conceptinternetltd.com/brochure.php Software : ubuntu 10.04 Date : 31/07/2010 by : gendenk Site : http://jatimcrew.org Dork intext : "Website by conceptinternetltd" Exploit :...

K9 Kreativity Design - 'pages.php' SQL Injection

========================================================== K9 Kreativity Design pages.php SQL Injection Vulnerability ========================================================== + K9 Kreativity Design pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-06-02 Pukul 21.00 WIB +...

Cosmos Solutions CMS - 'id=' / 'page=' SQL Injection

Cosmos Solutions cms SQL Injection Vulnerability Vendor:http://www.cosmossolutions.net/ Discovered by : gendenk Site : http://jatimcrew.org Dork : "Webdesign Cosmos Solutions" Exploit : site/pinf.php?page=SQL Injection Exploit : site/index.php?id=SQL Injection Demo:...

Multi Vendor Mall - 'pages.php' SQL Injection

============================================================ Multi Vendor Mall pages.php SQL Injection Vulnerability ============================================================ + Multi Vendor Mall pages.php SQL Injection Vulnerability + By NewbieCampuz + Published: 2010-05-24 Pukul 22.00 WIB +...

HIOX Random Ad 1.3 - Remote File Inclusion

HIOX Random Ad 1.3 - Remote File Inclusion HIOX Random Ad 1.3 hioxRandomAd.php hm RFI Vulnerability Ghost Hacker , R-h Team , Real Hack We Will Be Back Soon : Found by : Ghost Hacker - R-H Team - |, .-. .-. ,| My Blog : http://gh0st10.wordpress.com | o/ \o | My Email : [email protected] |/ /...

CrystalPlayer 1.98 - '.mls' Local Buffer Overflow

!/usr/bin/perl Crystal Player 1.98 Playlist.mls File Local Buffer Overflow Exploit Source:: http://www.crystalplayer.com/CrystalPro.exe Credit To Timq For The Vulnerability POC By Arham Muhammad While Debugging EIP And EBP Successfully Gets Overwritten! Upon Successful Exploitation, DOS Occurs An...

jafcms-xss.txt

JAF CMS - 4.0 Cross Site Scripting Vulnerability Source: http://sourceforge.net/projects/jaf-cms/ Author: Arham Muhammad POC: http://site/path/index.php?show="alert/xss/; There Is No Sign Of Filteration In Jaf-Cms, Making It Prune To Xss And Session Hijacking!...

rezervi27-rfi.txt

------=Part10021926781377.1177148481272 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline App: Rezervi Availability 2.7 Source: http://www.rezervi.com/www/german/download/rezerviV27.zip Author: Arham Muhammad Vulnerable File:...

digioz-rfi.txt

DigiOz Guestbook 1.7.1 --------------------------- App: DigiOz Guestbook 1.7.1 Source: http://www.digioz.com/guestbook/guestbook.zip Author: Arham Muhammad Dork: "Powered by DigiOz Guestbook Version 1.7.1" Vulnerable File: /admin/deleteprocess.php Vulnerable Code: $id = $GET'id'; This Vulnerabili...