ClipSharePro 4.1 Local File Inclusion

Exploit Title : ClipSharePro 0 $configfile = $GET'configfile'; else showAlertMessage"ERROR: Failed to find configfile parameter", 1; else $configfile = $DEFAULTCONFIG; // Load config file require $configfile; //including arbitrary file $GET'configfile' echo $configfile; The vulnerability can be...

ClipSharePro 4.1 - Local File Inclusion

Exploit Title : ClipSharePro 0 $configfile = $GET'configfile'; else showAlertMessage"ERROR: Failed to find configfile parameter", 1; else $configfile = $DEFAULTCONFIG; // Load config file require $configfile; //including arbitrary file $GET'configfile' echo $configfile; The vulnerability can be...

iScripts MultiCart 2.4 - Persistent Cross-Site Scripting / Cross-Site Request Forgery / Cross-Site Scripting / Cross-Site Request Forgery / Mass Accounts Takeover

Exploit Title : iScripts MultiCart same product id for which you submited the review. Cross-site request forgery input type...

FBI offering $100,000 reward for information on Most Wanted Cyber Criminals

The US Federal Bureau of Investigation has added five new hackers to its Cyber most wanted list and is seeking information from the public regarding their whereabouts. The men are wanted in connection with hacking and fraud crimes both within the US as well as internationally. Rewards ranging fro...

Major VBulletin based websites are vulnerable to Hackers; Pakistani forums defaced by Indian Hackers

vBulletin is a publishing suite that allows users to create and publish a variety of content, including: forums, blogs, and polls. If you currently use an older version of vBulletin on your website, you might be opening up your site to an attack as some serious security vulnerabilities, which...

Major VBulletin based websites are vulnerable to Hackers; Pakistani forums defaced by Indian Hackers

vBulletin is a publishing suite that allows users to create and publish a variety of content, including: forums, blogs, and polls. If you currently use an older version of vBulletin on your website, you might be opening up your site to an attack as some serious security vulnerabilities, which...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

Thousands of Israeli websites hacked by Pakistani hackers for Palestine supports

A cyber attack campaign is ongoing and targeting thousands of Israeli websites by Pakistani hackers, in support of Palestine people. They had already infiltrated reportedly 650 Israel websites listen on Pastebin and upload their page with custom messages on servers. The hacker claimed and told 'T...

Pakistani hackers hit Indian Eastern Railways Website just before Independence day

Just four days before the Independence day, The Pakistani hacker known as 'MindCracker' from Pakistan Cyber Army team hacked into the Indian Eastern Railways website and deface some internal pages, as shown in the screenshot taken by us few hours before. At the time of reporting, website...

Pakistani hackers hit Indian Eastern Railways Website just before Independence day

Just four days before the Independence day, The Pakistani hacker known as 'MindCracker' from Pakistan Cyber Army team hacked into the Indian Eastern Railways website and deface some internal pages, as shown in the screenshot taken by us few hours before. At the time of reporting, website...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

Pakistan Army site and Facebook pages compromised by Indian hacker Godzilla

Pakistan Army site pakistanarmy.gov.pk and Three Facebook pages hacked by an Indian hacker 'Godzilla'. Hacker told 'The Hacker News' that, using a CMS vulnerability they got access into the Pakistan army website using credentials i.e. Username: magadmin password: $%modern! . Then they left a...

Web Cookbook - Multiple SQL Injection Vulnerabilities

Exploit for php platform in category web applications Exploit Title: Web Cookbook Multiple SQL Injection Date: 2013/3/12 Exploit Author: Saadat Ullah ， email protected Software Link: http://sourceforge.net/projects/webcookbook/ Author HomePage: http://security-geeks.blogspot.com/ Tested on: Serve...

Pakistan Government servers messed up after security breach

Today a cyber attack on Pakistan Government servers crash many Government departments's official websites including Ministry of Information Technology, Ministry of Railways, Ministry of Economic Affairs & Statistics, Ministry of Interior, Ministry of Religious Affairs, Ministry of Science and...

Nconf 1.3 - Multiple SQL Injections

Exploit Title: nconf handleitem.php，Modifyattr.php etc Multiple Sql injection Date: 2013/3/4 Exploit Author: Saadat Ullah，[email protected] Software Link: http://sourceforge.net/projects/nconf/files/nconf/ Vendors: http://www.nconf.org/ Author HomePage: http://security-geeks.blogspot.com/...

Pakistan Domain Registrar PKNIC Hacked

PKNIC, The Pakistan domain registrar of .com.pk, .pk, org.pk and others domains has been reportedly hacked again yesterday. A hackers group named PakBugs has claimed that they have successfully penetrated PKNIC servers and gained control of around 23,000 domains which included some of the most...

Hacker leaks Bangladesh Intelligence classified Emails

Indian hacker, Godzilla once again hit Bangladesh government server. Hacker told us about his latest cyber attack on Directorate General of Forces Intelligence Bangladesh DGFI - www.dgfi.gov.bd server . He claimed to back up all confidential mails in the server and list of all their agents around...

Israeli Bing, MSN, Skype, Live and other Defaced by Pakistani hackers

Where Anonymous declared war on the Israeli websites , today another Pakistani hacking group also came forward in support of GAZA by taking down multiple big Israeli sites and deface all Microsoft related Israeli domains including Bing, MSN, Skype, Live and other. Hacker start with "The Notorious...

Pakistani hackers deface Indian Southern Railways website

Website of the Southern Railways www.southernrailway.gov.in has been defaced apparently by Pakistani hackers. The hacker group that calls itself 'Pak Cyber Pyrates' replaced the home page of the website with a page with content that denounces India's role in Kashmir. Indian and Pakistani hacking...

North Las Vegas Police Department hacked by ZHC

North Las Vegas Police Department hacked by ZHC The official website of North Las Vegas Police Department NLVPD - defaced today by ZHC BlackOne HaXor - ZCompany Hacking Crew - ZHC and above shown black deface page with message displayed on Homepage. Page indicates the cause of Hack "Stop Nato...