Two new Java zero-day vulnerabilities reported to Oracle

A Polish security firm 'Security Explorations' reported two new Java zero-day vulnerabilities, as “issue 54” and “issue 55,” with proof of concept code to Oracle. Oracle's security team is currently investigating the issue, but the status flaws not yet confirmed by Oracle. Less than a week after...

MindStorm CMS SQL Injection vulnerability

A simple MySQL=5 injection integer based. This CMS is only found on polish websites. Exploit Title: MindStorm CMS SQL Injection vulnerability Google Dork: inurl:indexbase.php Date: 24/02/2013 Exploit Author: Zyklon B - https://twitter.com/BZyklon Vendor Homepage: http://www.mindstorm.pl/ Software...

SkypeHide to Send secret messages into silence of Skype Calls

Polish Researchers have discovered a clever way to send secret messages during a phone call on Skype. We know that, by default skype calls use 256-bit advanced encryption, but researchers find that is not enough. So they find out this new way to communicate messages more secretly by using silence...

Lidosys CMS SQL Injection / Information Disclosure

Hello list! I'm presenting you the vulnerabilities in LIOOSYS CMS - Polish commercial CMS. These are SQL Injection and Information Leakage vulnerabilities. ------------------------- Affected products: ------------------------- Vulnerable are all versions of the system, except the last one, which...

PHP version 5.4.3 code execution exploit for Win32

No description provided by source. // Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polish...

PHP 5.4 Win32 Code Execution

Exploit for php platform in category remote exploits // Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polis...

PHP 5.4 Win32 Code Execution

// Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polish =================== offset-brute.html...

PHP 5.4.3 (Windows x86 Polish) - Code Execution

// Exploit Title: PHP 5.4 5.4.3 Code Execution 0day Win32 // Exploit author: 0in Maksymilian Motyl // Email: 0indotemailatgmail.com // Bug with Variant type parsing originally discovered by Condis // Tested on Windows XP SP3 fully patched Polish =================== offset-brute.html...

PHP 5.4.3 (Windows x86 Polish) - Code Execution

PHP 5.4.3 Windows x86 Polish - Code Execution...

MDVA-2009:262 : kde4-splash-mdv

This update improves the Polish translation used in KDE4 splash screens. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on 2012/09/06. C Tenable Network Security, Inc. This script was automatically generated from...

Apple Safari 4.0.5 parent.close() (memory corruption) 0day Code Execution Exploit

No description provided by source. !-- Apple Safari 4.0.5 parent.close memory corruption 0day Code Execution Exploit Bug discovered by Krystian Kloskowski h07 [email protected] Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be...

Apple Safari 4.0.5 - parent.close() Memory Corruption Code Execution

Apple Safari 4.0.5 - parent.close Memory Corruption Code Execution Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Apple Safari 4.0.5 - 'parent.close()' Memory Corruption Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

Platnik SQL Injection

Exploit Title: PLATNIK - SQL Injection Vulnerability Discovered by: podatnik386 Description: PLATNIK is the official Polish program to support documents for the Social Insurance Company pl. ZUS. The application includes several fields that are vulnerable to sql injection. Vulnerable version:...

Natychmiast CMS Cross Site Scripting / SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================== Natychmiast CMS Cross Site Scripting / SQL Injection Vulnerability ================================================================== SQL injection and XSS vulnerability in...

Natychmiast CMS Cross Site Scripting / SQL Injection

Title: SQL injection vulnerability in Natychmiast CMS Date: 03.03.2010 Author: Ariko-Security Software Link: http://www.natychmiast-cms.pl/ Version: ALL ============ Ariko-Security - Advisory 2/3/2010 ============= SQL injection and XSS vulnerability in NATYCHMIAST CMS Vendor's Description of...

B2B eCommerce SQL Injection

B2B ecommerce for small business factoring Url| http://www.example.com/buyoffers.php?pg=2&cid=sql injection Union Columns = 8 google : inurl:buyoffers.php? / hakerzy ze szkocji ; ------------------------------ ---- DUNDEE ----- POLISH ----- ------------------------------ MoJaCiPkA4 / majki --...

Robert Zimmerman PHP / MYSQL Bypass

--------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXAMPLE SITES : - illoz.com - illogator.com - Drawger.com - and more ... EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy...

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass

Robert Zimmerman PHP MySQL Scripts - Authentication Bypass --------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ;...

Robert Zimmerman PHP / MySQL Scripts - Authentication Bypass

--------------------------------------------------- - Robert Zimmerman PHP / MYSQL SCRIPTS ADMIN BYPASS - --------------------------------------------------- EXPLOIT : Login : '-' Pass : '-' And u Got admin acces ; / hakerzy ze szkocji ; ------------------------------ ---- DUNDEE ----- POLISH ---...