How to avoid election related scams

With the US election campaigns at full throttle, scammers have taken a renewed interest in the ways this can be used to defraud people, often using the same tactics legitimate campaigns leverage for support emails, text messages, phone calls, and social media pleas. The lure that we have seen the...

CVE-2023-37362

Weintek Weincloud v0.13.6 could allow an attacker to abuse the registration functionality to login with testing credentials to the official website...

CVE-2020-16602

creationtimestamp| type| source ---|---|--- 2020-11-26 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/49106...

Burning Man Tickets for $225? Yep, Too Good to Be True

Burning Man aficionados anxious to get their tickets squared away for the 2020 “experience” should beware: Fake concert organizers are offering passes in what researchers say is a very convincing and sophisticated scam effort. Burning Man, which bills itself as a “vibrant participatory metropolis...

PwnAdventure3 - Game Open-World MMORPG Intentionally Vulnerable To Hacks

Pwnie Island is a limited-release, first-person, true open-world MMORPG set on a beautiful island where anything could happen. That's because this game is intentionally vulnerable to all kinds of silly hacks! Flying, endless cash, and more are all one client change or network proxy away. Are you...

Tor: Content spoofing on

Vulnerability description not provided...

Joomla! Component com_hdflvplayer 2.1.0.1 - SQL Injection

Joomla! Component comhdflvplayer 2.1.0.1 - SQL Injection !/usr/bin/python Exploit Title : Joomla HD FLV 2.1.0.1 and below SQL Injection Exploit Author : Claudio Viviani Vendor Homepage : http://www.hdflvplayer.net/ Software Link : http://www.hdflvplayer.net/downloadcount.php?pid=5 Dork google 1:...

Joomla Component com_ContentBlogList SQL Injection Vulnerability

No description provided by source. ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comContentBlogList SQL Injection Vulnerabilities LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON:...

maplab ms4w 2.2.1 - Remote File Inclusion Vulnerability

No description provided by source. Bug Found By ka0x D.O.M TEAM we are: anonyph;arp;ka0x;xarnuz Contact: [email protected] FROM SPAIN --- Script: MapLab Version: 2.2.1 Official Site: http://www.maptools.org Download: http://www.maptools.org/dl/ms4w/maplabms4w-2.2.1.zip -- Bug File: params.php Path...

SHOP-INET 4 (show_cat2.php grid) - SQL Injection Vulnerability

No description provided by source. SHOP-INET V.4 Exploit Author: FeDeReR Home : Hacking.ge & darkc0de.com Email : [email protected] Exploit : target.com/showcat2.php?grid=-1+union+select+concatwschar58,username,password+from+admin Example...

am4ss Support System 1.2 PHP Code Injection Exploit

Exploit for php platform in category web applications 10/2011 , Vulnerability discovered till now , i haven't reported the vendor , why!!! The idiot backdoored it by himself + the official site is fucked up ; 19/07/2012 , Public Disclosured C:\labphp am4ss.php localhost /lab/am4ss/...

Filmis 0.2 Beta - Multiple Vulnerabilities

=================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis - Version 0.2 Beta SQL Injection and XSS...

Filmis 0.2 Beta - Multiple Vulnerabilities

Filmis 0.2 Beta - Multiple Vulnerabilities =================================================================================== Filmis - Version 0.2 Beta SQL Injection and XSS Vulnerabilities =================================================================================== Exploit Title: Filmis ...

Joomla ContentBlogList SQL Injection

...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comContentBlogList SQL Injection Vulnerabilities LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT: bhunt3ratnospamgmaildotnospamcom TESTED ON: Demo Site and Official Site...

Joomla! Component com_ContentBlogList - SQL Injection

Joomla! Component comContentBlogList - SQL Injection ...BEGIN ADVISORY... !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! TITLE: Joomla comContentBlogList SQL Injection Vulnerabilities LANGUAGE: PHP DORK: N/A RESEARCHER: B-HUNT3|2 CONTACT:...

Paul McCartney's official site serving malware

From ZDNet Dancho Danchev The official web site of Paul McCartney paulmccartney.com has been compromised, and is serving live exploits to its visitors zdnet.com. According to Mary Landesman scansafe.com, the compromise might have occurred through stolen FTP accounting data, taking into...

SHOP-INET v4 (show_cat2.php grid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================= SHOP-INET v4 showcat2.php grid SQL Injection Vulnerability ============================================================= Exploit :...

Unfixed XSS vulnerability at www.official-site-hotel.com

Security researcher ironzorg, has submitted on 24/04/2008 a cross-site-scripting XSS vulnerability affecting www.official-site-hotel.com, which at the time of submission ranked 6779396 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/04/2008...

novus-sql.txt

Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2- anota.fepublicacion 3- anota.seccionid 4-...

Novus 1.0 (notas.asp nota_id) Remote SQL Injection Vulnerability

No description provided by source. Novus - Sistema de administracion y contenido. bug: Sql Inyection. official site: http://novus.com.mx d0rk: "Powered by Novus" free: no system: asp bug found by ka0x D.O.M TEAM we: ka0x, an0de, xarnuz, s0cratex ka0x01atgmail.com tables: 1- anota.notaid 2-...