CVE-2014-6023

The s-peek credit rating report aka com.rhomobile.speek application 2.1.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

IP Board 3.x CSRF Token Theft

Title: IP Board 3.x CSRF - Token hjiacking Date: 03.09.14 Version: = 3.4.6 Vendor: invisionpower.com Author: Piotr S. Video-PoC: https://www.youtube.com/watch?v=G5P21TA4DjY 1 Introduction Latest and propabbly previous IPB verions suffers on vulnerability, which allows attacker to steal CSRF token...

Ubuntu: Security Advisory (USN-2328-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GnuPG - Complete and free implementation of the OpenPGP

GnuPG is a complete and free implementation of the OpenPGP standard as defined by RFC4880 also known as PGP. GnuPG allows to encrypt and sign your data and communication, features a versatile key management system as well as access modules for all kinds of public key directories. GnuPG, also know...

Debian: Security Advisory (DSA-2999-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS 7 : kernel (CESA-2014:1023)

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

Important: Red Hat Security Advisory: kernel security and bug fix update

Updated kernel packages that fix multiple security issues and several bugs are now available for Red Hat Enterprise Linux 7. The Red Hat Security Response Team has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed...

SimpleDark 1.2.10 - 's' Parameter Cross Site Scripting

The SimpleDark WordPress theme was affected by a 's' Parameter Cross Site Scripting security vulnerability...

WordPress Simple Balance Theme <= 2.2.1 - Cross Site Scripting

This vulnerability allows remote attackers to inject arbitrary script or HTML via "index.php" file, "s" parameter. Solution Update the theme...

Kolibri Web Server 2.0 - GET (SEH)

Kolibri Web Server 2.0 - GET SEH !/usr/bin/python Exploit Title : Kolibri WebServer 2.0 Get Request SEH Exploit Exploit Author : Revin Hadi S Date : 14/07/2014 Vendor : http://www.senkas.com Version : 2.0 Tested on : Windows XP SP2 Eng, Windows Server 2003 Eng, Win 7 SP1 Eng import socket, sys he...

Ubuntu: Security Advisory (USN-2266-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 19 Update: gnupg2-2.0.24-1.fc19

GnuPG is GNU's tool for secure communication and data storage. It can be used to encrypt data and to create digital signatures. It includes an advanced key management facility and is compliant with the proposed OpenPGP Internet standard as described in RFC2440 and the S/MIME standard as described...

Joomla Component d3000 1.0.0 - Remote SQL Injection Vulnerability

No description provided by source. Powered by Download 3000 AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 BLOG : http://my.opera.com/SQL-Injection/blog/ MAiL : [email protected] DORK 1 : Powered by Download 3000 DORK 2 : allinurl: comd3000 EXPLOiT :...

Mambo MGM Component <= 0.95r2 Remote Inclusion Vulnerability

No description provided by source. ---------------------------------------------------- Mambo Gallery Manager v095.r3 Remote File Inclusion Vulnerabilities ---------------------------------------------------- Discovered By A-S-T TEAM WE ARE CrAsHoVeRrIdE & BLACK-CODE & MR-HCR...

Winamp 5.572 - Local Crash PoC (0day)

No description provided by source. !\C:\Perl\bin In The Name Of Allah The Mercifull Title : WiNamP V5.572 0day suffer from local CRASH PoC Tested : Windows xp sp3 AUThoR: R3d-D3v!L Credits to : XP10HACKER XP10.ME print qq WiNamP V5.572 0day SWF local CRASH PoC Credits : XP10.ME XP10HACKER Author ...

Calendar Express 2.0 - SQL Injection Vulnerability

No description provided by source. Calendar Express 2.0 Vulnerability Calendar Express 2.0 Powered by Phplite.com Download:http://script.wareseeker.com/download/calendar-express-2.rar/11517 Author: Baybora Site: www.1923turk.bizhttp://www.1923turk.biz Exploit: POST...

S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...

Joomla Component Alberghi <= 2.1.3 (id) SQL Injection Vulnerability

No description provided by source. Mambo Component comalberghi SQL Injection AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] TODAY MY BİRTDAY SOO I WROTE 5 BUGS ALL FOR HACKERS 5 EXPLOİTS HAVE 100.000 MAMBO-JOOMLA WEBPAGES OR MUCH MORE DONT FORGET...

Joomla Component rapidrecipe <= 1.6.5 - SQL Injection Vulnerability

No description provided by source. joomla SQL Injectioncomrapidrecipe AUTHOR : S@BUN HOME : http://www.hackturkiye.com MAİL : [email protected] DORK 1 : allinurl: comrapidrecipeuserid DORK 2 : allinurl: comrapidrecipe categoryid EXPLOIT : after userid or catogryid add exploit...

S-CMS <= 2.0b3 (username) Blind SQL Injection Exploit

No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...