Nitol Botnet Shares Code with Other China-Based DDoS Malware

Microsoft has learned that much of the code used by the Nitol malware family is copied from free malware resources hosted on Chinese websites. Microsoft posted portions of the code online this week where similar lines used for denial of service attack functionality are present in Nitol and on the...

DEBIAN-CVE-2012-4427

The gnome-shell plugin 3.4.1 in GNOME allows remote attackers to force the download and installation of arbitrary extensions from extensions.gnome.org via a crafted web page...

CVE-2012-1582

Cross-site scripting XSS vulnerability in the wikitext parser in MediaWiki 1.17.x before 1.17.3 and 1.18.x before 1.18.2 allows remote attackers to inject arbitrary web script or HTML via a crafted page with "forged strip item markers," as demonstrated using the CharInsert extension...

Linux Kernel 2.4.4 < 2.4.37.4 / 2.6.0 < 2.6.30.4 - 'Sendpage' Local Privilege Escalation (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' require 'rex' require 'msf/core/post/common' require...

Espejo Design SQL Injection

== ABOUT ME: --- TAURUS OMAR --- INDEPENDENT SECURITY RESEARCHER --- ACCESOILEGAL.BLOGSPOT.COM --- @omartaurus --- omar-taurusatdragonsecuritydotorg --- omar-taurusatlivedotcom === INFO: Author : TAURUS OMAR Category : Webapps / 0day Title Exploit : Espejo Design - SQL Injection Vulnerability...

CVE-2012-2118

Format string vulnerability in the LogVHdrMessageVerb function in os/log.c in X.Org X11 1.11 allows attackers to cause a denial of service or possibly execute arbitrary code via format string specifiers in an input device name...

Unfixed XSS vulnerability at traffic.511.org

Security researcher aSUaBANG, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting traffic.511.org, which at the time of submission ranked 56717 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is current...

Unfixed XSS vulnerability at web4.lan.511.org

Security researcher aSUaBANG, has submitted on 14/02/2012 a cross-site-scripting XSS vulnerability affecting web4.lan.511.org, which at the time of submission ranked 56717 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is...

One million pages infected by Lilupophilupop SQL injection

One million pages infected by Lilupophilupop SQL injection ISC Internet Storm Center reported that lilupophilupop.com SQL injection attacks. There were about 80 pages infected according to Google searches few weeks back and now it raise to over 1 million . sites being injected with string :...

CVE-2011-4554

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via 1 " double quote and newline characters in an org name or 2 " double quote characters in an e-mail address, related to a "2nd Order SMTP Injection" issue...

Sql injection

One Click Orgs before 1.2.3 allows remote authenticated users to trigger crafted SMTP traffic via 1 " double quote and newline characters in an org name or 2 " double quote characters in an e-mail address, related to a "2nd Order SMTP Injection" issue...

LabStoRe <= 1.5.4 SQL Injection

Exploit for php platform in category web applications ------------------------------------------------------------------------ LabStoRe = 1.5.4 Sql Injection Vulnerabilities ------------------------------------------------------------------------ author............: muuratsalo Revshell.com...

Unfixed XSS vulnerability at www.hou2600.org

Security researcher nullbyt3, has submitted on 11/04/2011 a cross-site-scripting XSS vulnerability affecting www.hou2600.org, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/12/2011. It is currently...

XSS vulnerability in /admin/chooseBuildsToMove.action resource

We have identified and fixed a reflected cross-site scripting XSS vulnerability in the Bamboo chooseBuildsToMove resource. This issue is reported in our security advisory on this page: https://confluence.atlassian.com/x/rQP5FQ You can read more about XSS attacks at:...

Help Request System 1.1g Cross Site Request Forgery

Exploit Title: Help Request System 1.1g XSRF add admin Date: 08-23-2011 Google Dork: "powered by freehelpdesk.org" Author: G13 Software link: http://freehelpdesk.org/ Version: 1.1g Name: Login name: Pass: Pass confirm:...

Centralia SQL Injection

Exploit : Centralia Sql Injenction Date : 16 July 2011 Author : Netrondoank Version : n/a Googel DorK : inurl:showcat.asp?id= Home : www.indotek.or.id Email: [email protected] + Exploit 1 Centralia showcat.asp?/display.asp? Sql Injenction - http://site/showcat.asp?id=sqli -...

discuz! X1.5 Get Shell 0day

No description provided by source. ?php printr' +---------------------------------------------------------------------------+ Discuz! X1-1.5 notifycredit.php Blind SQL injection exploit by toby57 2010.11.05 mail: admin at bkey org team: http://www.bkey.org 说明:alibaba把后续getshell代码添加了下去...

WebsiteBaker 2.8.1 Path Disclosure / SQL Injection

=================================== Vulnerability ID: HTB22929 Reference: http://www.htbridge.ch/advisory/multiplepathdisclosureinwebsitebaker.html Product: WebsiteBaker Vendor: Website Baker Org http://www.websitebaker2.org/ Vulnerable Version: 2.8.1 Vendor Notification: 29 March 2011...

Unfixed XSS vulnerability at la2600.org

Security researcher Dave, has submitted on 17/03/2011 a cross-site-scripting XSS vulnerability affecting la2600.org, which at the time of submission ranked 5670120 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...

RuubikCMS < v1.0.3 Shell Upload Vulnerability

Exploit for php platform in category web applications Exploit Title : RuubikCMS v1.0.3 Shell Upload Vulnerability Google Dork : Powered by RuubikCMS Date : 2011-03-06 Author : Alexander Software Link : http://www.ruubikcms.com Version : v1.0.3 Test On : Linux/php CVE : Web Applications === Exploi...