1026 matches found
Joomla joomgalaxy 1.2.0.4 multiple defects and repair-vulnerability warning-the black bar safety net
Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites Author: Daniel Barragan "D4NB4R" Developer: http://www.joomgalaxy.com/ Affected version: 1.2.0.4 last update on Jul 2 7, 2 0 1 2 Test platform: Linuxbt5-Windows7ultimate Description Joomgalaxy is a rich, comprehensive directory component...
Trojan Dropper Uses Valid Certificate Issued For Swiss Company
A pair of trojan droppers affiliated with a pay-per-click scam are using valid digital signatures from a certificate that was issued for a Swiss company, according to a report on Securelist. Between December 2011 and March 7, 2012, the Kaspersky Security Network has detected around 5,000 instance...
Wordpress plugin Pay With a Tweet <= 1.1 a plurality of defect and repair-vulnerability warning-the black bar safety net
Title: Wordpress Pay With Tweet plugin = 1.1 Multiple Vulnerabilities Author: Gianluca Brindisi gATbrindi. si @gbrindisi http://brindi.si/g/ Download address: http://downloads.wordpress.org/plugin/pay-with-tweet.1.1.zip Affect version: 1.1 1 Blind SQL Injection in shortcode: Short code parameter...
WordPress Pay With Tweet Cross Site Scripting / SQL Injection
Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities
Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC: pay.php?link=%22alertdocument.cookie&title=alertdocument.cookie&dl=http://brindi.si%27"alertdocument.cookie...
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities
WordPress Plugin Pay with Tweet 1.1 - Multiple Vulnerabilities Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...
WordPress Pay with Tweet Plugin <= 1.1 - Multiple Vulnerabilities
WordPress Pay with Tweet plugin is prone to a blind SQL injection and XSS vulnerabilities. Solution Update the plugin...
Wordpress Pay With Tweet Plugin <= 1.1 Multiple Vulnerabilities
Exploit for php platform in category web applications Exploit Title: Wordpress Pay With Tweet plugin XSS After submitting the tweet: ?title=XSS&dl=REDIRECT-TO-URL%27"XSS The final download link will be replaced with REDIRECT-TO-URL POC:...
Sql injection
SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
CVE-2010-4846
CVE-2010-4846: A SQL injection vulnerability exists in view_item.php of MH Products Pay Pal Shop Digital, allowing remote attackers to execute arbitrary SQL commands through the ItemID parameter. The vulnerability affects the web application by inserting unvalidated input into a SQL query, enabli...
CVE-2010-4846
SQL injection vulnerability in viewitem.php in MH Products Pay Pal Shop Digital allows remote attackers to execute arbitrary SQL commands via the ItemID parameter...
Harnig Botnet Returns, But Without Rustock
The takedown of the Rustock botnet earlier this year has had ripple effects throughout the malware and spam ecosystems, with some large reductions in spam levels and attacks. However, some of the components of the malware machine driven by Rustock are beginning to come back online now. Researcher...
Elizabeth Taylor's Death Triggers Spam Campaign
Yesterday we learned that Elizabeth Taylor, an American icon for some seven decades, died of congestive heart failure at 79. Today, Kaspersky Lab expert Dmitry Bestuzhev informs us that the news of her death is being exploited via social engineering scams on Twitter. The scam uses a shortened,...
Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass
Exploit for asp platform in category web applications ===================================================================== Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass =====================================================================...
Comriesoftware Pay Roll Time Sheet And Punch Card SQL Injection
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title: Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com...
Comrie Software Pay Roll Time Sheet Punch Card - Authentication Bypass
Comrie Software Pay Roll Time Sheet Punch Card - Authentication Bypass Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor...
Comrie Software Pay Roll Time Sheet & Punch Card - Authentication Bypass
Author: L0rd CrusAd3r aka VSN [email protected] Exploit Title:Comriesoftware Pay Roll Time Sheet & Punch Card Authentication Bypass Vulnerability Version:1.0 Price:50$ Vendor url:http://www.comriesoftware.net/codewidgets/product.aspx?key=123 Published: 2010-11-02 Thanx to:r0073r inj3ct0r.com,...
SA-CONTRIB-2010-077 - Sage Pay (former Protx) Direct Payment Gateway for Ubercart - Information Disclosure
The Sage Pay Direct Payment Gateway for Ubercart ucprotxvspdirect processes credit card transactions in Ubercart stores using the Sage Pay Direct service. The module may show remote 3-D Secure pages to the user in an iframe when their bank supports the Verified by Visa or MasterCard SecureCode...
CVE-2010-2256
Multiple cross-site scripting XSS vulnerabilities in Pay Per Minute Video Chat Script 2.0 and 2.1 allow remote attackers to inject arbitrary web script or HTML via the 1 id parameter to admin/memberviewdetails.php and the 2 model parameter to videos.php...