Anonymous Hackers leaks video of Steubenville rape case

Two high school football players in Steubenville, Ohio are under arrest for the sexual assault of a 16-year-old girl. Newly leaked video sheds more light on what may have happened to a girl who told police she was raped by these high school football players in August. Trent Mays and Ma'lik...

Joomla Component com_spidercalendar Blind SQL Injection Vulnerability

Exploit for php platform in category web applications Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ?...

Joomla! Component Spider Calendar - date Blind SQL Injection

Joomla! Component Spider Calendar - date Blind SQL Injection Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================...

Joomla! Component Spider Calendar - 'date' Blind SQL Injection

Happy New year for all 3 Merry x-mas ! +===================================================================================+ ? Note : No One stay for a one : ! ============================================================================== ? Joomla Component comspidercalendar Blind SQL Injection...

Wireshark iSCSI解析器无限循环漏洞

CVECAN ID: CVE-2012-6060 Wireshark（前称Ethereal）是一款非常流行的开源网络流量分析软件。 Wireshark 1.6.0-1.6.11、1.8.0-1.8.3在iSCSI解析器的实现上存在安全漏洞，通过诱使受害者读取恶意报文，导致消耗大量CPU资源，iSCSI解析器进入无限循环。 0 Wireshark 1.x 厂商补丁： Wireshark --------- Wireshark已经为此发布了一个安全公告（wnpa-sec-2012-36）以及相应补丁: wnpa-sec-2012-36：Wireshark iSCSI dissector...

FirePass SSL VPN Unauthenticated Local File Inclusion Vulnerability

Exploit for multiple platform in category web applications ======================================================================= title: Unauthenticated local file inclusion product: F5 FirePass SSL VPN vulnerable version: = 7.0.0 HF-70-6 fixed version: 7.0.0 HF-70-7 impact: Critical homepage:...

SOL14046 - FirePass input validation vulnerability

Vulnerability Recommended Actions To eliminate this vulnerability, upgrade to a version that is listed in the Versions known to be not vulnerable column in the previous table. F5 strongly recommends that you install HF-70-7 for FirePass 7.0.0 to address this vulnerability. Acknowledgements F5 wou...

Report Details Coca-Cola Cyber Attack That Never was Disclosed

In an exclusive report, Bloomberg News outlines a month-long, systematic attack on Cola-Cola’s computer systems that may have influenced the failed $2.4 billion acquisition of a Chinese juice company. The FBI knew about it. Coca-Cola knew about it. But shareholders were kept in the dark. The Coke...

Unirgy uStoreLocator Magento Extension SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: SQL Injection product: Unirgy uStoreLocator - Magento extension vulnerable version: =2.0.1 impact: High homepage: http://www.unirgy.com/ found: 2012-06-18 by: K...

CVE-2012-5325

Multiple cross-site scripting XSS vulnerabilities in the scrdoredirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the 1 url or 2 sec attributes in a...

CVE-2012-5325: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the scrdoredirect function in scr.php in the Shortcode Redirect plugin 1.0.01 and earlier for WordPress allow remote authenticated users with certain permissions to inject arbitrary web script or HTML via the 1 url or 2 sec attributes in a...

PT-2012-5924

Name of the Vulnerable Software and Affected Versions Shortcode Redirect plugin versions 1.0.01 and earlier Description The issue concerns multiple cross-site scripting XSS vulnerabilities in the scr do redirect function. These vulnerabilities allow remote authenticated users with certain...

MIRcon 2012: Overall Themes for the Management Track

Mandiant will host its third annual MIRcon on October 17th and 18th in Washington, DC. I attended the previous two MIRcon conferences, first as Director of Incident Response for my previous employer, and last year as Mandiant's Chief Security Officer. Last year we decided to host both a technical...

7 Sepher SQL Injection

Exploit Title : 7sepehr SQL Injection Vulnerability Author : Tapco Security & Research Lab Discovered By : K0242 Home : sec-lab.ir Contact : research at sec-lab dot ir Portal Link : www.7sepehr.Com Security Risk : High DorK : "Powered by 7sepehr.com" Expl0iTs: www.target.com/contents.aspx?id=sqli...

Islamnt <= Remote Blind SQL Injection Exploit

Exploit for php platform in category web applications Query"select $val from styles where idstyle='$styledefault'"; FetchO$seltemp; $this-temp = $rowtemp-$val; $this-temp = stripslashes$this-temp; / print "\n+------------------------------------------------------------+"; print "\n| Islamnt =...

Am4ss 1.2 Cross Site Scripting

Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...

am4ss 1.2 - Multiple Vulnerabilities

am4ss 1.2 - Multiple Vulnerabilities Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...

am4ss 1.2 - Multiple Vulnerabilities

Exploit Title : am4ss 1.2 alert'Sec-w.com' ================================================= Gr34ts 4 : Sec-w.com Members...

Joomla Board All Version Sql Vulnerability

Exploit Title : Joomla Board All Version Sql Vulnerability Author : Iranian Security & Research Team Discovered By : Nafsh Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 22/1/2012 - 13:30 Software Link : www.joomla.org Security Risk : High...

Flogr V1.7 Xss Vulnerability

Exploit Title : Flogr V1.7 Xss Vulnerability Author : Iranian Security & Research Team Discovered By : Nafsh Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 23/1/2012 - 16:00 Source : www.flogr.googlecode.com...