8287 matches found
Who Is At Fault: Banks or Local Gov Security?
A supervisor for the town of Poughkeepsie, New York lashed out at a local bank after someone siphoned $378,000 out of municipal coffers and transferred it abroad. Let the finger pointing begin. Read the full article. The Register...
Winamp v5.572 whatsnew.txt Stack Overflow PoC
Exploit for unknown platform in category dos / poc ============================================= Winamp v5.572 whatsnew.txt Stack Overflow PoC ============================================= Version: 5.572 Tested on: Windows xpsp2 !/usr/bin/perl Replace whatsnew.txt , open Winamp click Help-about...
Command line under a new account method-vulnerability warning-the black bar safety net
Today research about the user control panel file nusrmgr. cpl, the discovery call is to the Shell. Users to add users, it also simultaneously calls the wscript. shell, Shell. Application, Shell. LocalMachine these three components. But added to the user while this one Shell. Users is sufficient. ...
User Logins At New York Bank Hacked
Hackers have stolen the login credentials for more than 8,300 customers of New York’s Suffolk County National Bank after breaching its security and accessing a server that hosted its online banking system. Read the full article. The Register...
PCI DSS In Full Effect in Nevada and NH
On January 1, 2010, two important state data security and privacy laws took effect in Nevada and New Hampshire that create new obligations for most companies that do business in Nevada and for health care providers and business associates in New Hampshire. Read the full article. Hunton & Williams...
SNadd Beta Cross Site Request Forgery
Discovered by : Septemb0x + Script Name : SNadd Beta + Download Script : http://www.phpexplorer.com/goster/1191 + Bug Description : New article can be added Exploit Codes : Baþlýk: Yazý: " name="ekle" + Greetz : BARCOD3 - Bhdr - Phreaker - Nizam-ul Mülk - Türkeþhan - SenqRonize... All Friends...
VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)
No description provided by source. /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ includestdio.h includewindows.h includestring.h includegetopt.h includeunistd.h /----prototypes---/ int...
VirtualDJ Trial 6.0.6 NYE Exploit
/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...
VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow
VirtualDJ Trial 6.0.6 New Year Edition - .m3u Local Overflow /VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatecha...
VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit (0day)
Exploit for unknown platform in category dos / poc ============================================================ VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day ============================================================ Title: VirtualDJ Trial v6.0.6 "New Year Edition" m3u Exploit 0day...
VirtualDJ Trial 6.0.6 'New Year Edition' - '.m3u' Local Overflow
/VirtualDJ Trial v6.0.6 "New Year Edition" PC 0day This is a poc for the latest VJ by fl0 fl0w Author: fl0 fl0w Tested on: Windows xp sp2 Code : exploit code/ include include include include include /----prototypes---/ int fileCreatechar; int bufferWrite; int cpychar,char; char path;...
DEBIAN-CVE-2009-4459
Redmine 0.8.7 and earlier uses the title tag before defining the character encoding in a meta tag, which allows remote attackers to conduct cross-site scripting XSS attacks and inject arbitrary script via UTF-7 encoded values in the title parameter to a new issue page, which may be interpreted as...
vBulletin ads_saed 1.5 (bnnr.php) SQL Injection Vulnerability
No description provided by source. vBulletin adssaed 1.5 bnnr.php SQL Injection Vulnerability Author: Hussin X Home : www.IQ-TY.comhttp://www.IQ-TY.com Mail : [email protected]:[email protected] script name : adssaed d0rk : inurl:"vb/bnnr.php" Example : Go to url :...
Wing FTP Server v3.2.4 CSRF Vulnerability
No description provided by source. Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF Author: Ams Contact: mail: ax330d at gmail dot com site: http://www.0x416d73.name/ 1. About software "Wing FTP server is not only a FTP server. It's...
Cisco switch password-cracking-vulnerability warning-the black bar safety net
Use the console cable is connected toswitch, through HyperTerminal or Secure CRT connection to switch; 2. Press and hold down the switch on the front panel MODE button, plug in the switch power supply; 3. About 4 0 seconds after the release of the Mod 1. Use the console cable is connected...
Golden FTP Server 'DELE' Command Directory Traversal Vulnerability
This host is running Golden FTP Server and is prone to Directory Traversal vulnerability. OpenVAS Vulnerability Test $Id: gbgoldenftpserverdirtravvuln.nasl 6515 2017-07-04 11:54:15Z cfischer $ Golden FTP Server 'DELE' Command Directory Traversal Vulnerability Authors: Antu Sanadi Copyright:...
Cross site request forgery (csrf)
Cross-site request forgery CSRF vulnerability in CutePHP CuteNews 1.4.6 and UTF-8 CuteNews before 8b allows remote attackers to hijack the authentication of administrators for requests that create new users, including a new administrator, via an adduser action in the editusers module in index.php...
Sql injection
SQL injection vulnerability in rating.php in New 5 star Rating 1.0 allows remote attackers to execute arbitrary SQL commands via the det parameter...
