CPA Site Solutions Remote File Upload Vulnerability

No description provided by source. |REMOTE FILE UPLOAD VULNERABILTY| .:|cpasitesolutions|::. AUTHOR : R3VANBASTARD SITE : www.sux0r.net PROVIDER: http://www.cpasitesolutions.com DORK : intext:Powered by CPA Site Solutions x EXPLOIT:...

Sulata iSoft (stream.php) Local File Disclosure Exploit

No description provided by source. ========================================================= Sulata iSoft stream.php Local File Disclosure Exploit ========================================================= Exploit Title : Sulata iSoft developer by Rizwan Azam you look site.com/about.php Date : 10...

Comersus Shopping Cart <= 6.0 - Remote User Pass Exploit

No description provided by source. Title : Comersus Shopping Cart = v6 Remote User Pass Exploit Author : ajann from Turkey Contact : : S.Page : http://www.comersus.com/ $$ : Free Dork : Powered by Comersus v6 Shopping Cart DorkEx :...

Jinzora <= 2.7 (include_path) Multiple Remote File Include Vulnerabilities

No description provided by source. +------------------------------------------------------------------------------------------- + Jinzora = 2.7 includepath Multiple Remote File Include Vulnerabilities +------------------------------------------------------------------------------------------- +...

XAMPP for Windows <= 1.6.0a mssql_connect() Remote BoF Exploit

No description provided by source. ?php printr' --------------------------------------------------------------------------- XAMPP for Windows = 1.6.0a adodb.php/mssqlconnect remote buffer overflow proof-of-concept exploit seh overwrite method / 2000 sp3 version mail: retrog at alice dot it site:...

Joomla Component com_category (catid) SQL Injection Vulnerability

No description provided by source. Joomla component 'comcategory' SQL injection vulnerability version: 1.0.12 dork:inurl:comcategory xploited by PrincePwn3r contact: [email protected] +++++++ greetz to all p0wnbox.com members !!! +++++++...

Barracuda Spam Firewall <= 3.3.03.053 Remote Code Execution (extra)

No description provided by source. Title: Barracuda Arbitrary File Disclosure + Command Execution Severity: High Sensitive Information Disclosure Date: 01 August 2006 Version Affected: Barracuda Spam Firewall version 3.3.01.001 to 3.3.03.053 Discovered by: Greg Sinclair Credits: Matthew Hall...

FiberHome Modem Router HG-110 - Authentication Bypass To Remote Change DNS Servers

No description provided by source. Exploit Title: Directory Path Traversal FiberHome Modem Router HG-110 / Remote Change DNS Servers Date: 22/09/2013 Exploit Author: Javier Perez - [email protected] - @thes41nt Vendor Homepage: http://hk.fiberhomegroup.com/ Version: HG110BHV1.6 PoC: Remote...

censura 1.16.04 (bsql/xss) Multiple Vulnerabilities

No description provided by source. ================================================================================================ Title : Blind SQL/XSS Multiple Remote Vulnerabilities Software : Censura v1.16.04 Vendor : http://www.censura.info/ Date : 12 July 2009 Indonesia Author : Vrs-hCk...

plexusCMS 0.5 - XSS Remote Shell Exploit & Credentials Leak

No description provided by source. Exploit Title: plexusCMS 0.5 XSS Remote Shell Exploit Google Dork: allinurl: plx-storage Date: 22.02.2013 Exploit Author: neglomaniac Vendor Homepage: http://plexus-cms.org/ Version: 0.5 --- FILES backdoor.php simple commend execute backdoor commands.txt list of...

VBulletin 1.0.1 lite/2.x/3.0 /admincp/css.php group Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/14874/info vBulletin is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage any of these issues t...

Tencent a certain activity a leak a large number of user address information-bug warning-the black bar safety net

Friends through QQ sent me to one of the activities:“there is no free lunch, but for Breakfast you can have! I was participating in yinlu good porridge road free good Breakfast apply for activities, the same address apply for the number up to 2 0 people, Homo habilis hand is a free good Breakfast...

Monsanto Suffers Data Breach at Precision Planting Unit

Monsanto, the massive international agricultural conglomerate, has disclosed a data breach that involved the personal information of customers and employees of its Precision Planting subsidiary. The breach included names, addresses, possibly Social Security numbers and some financial account...

Spotify Hacked, Urges Android Users to Upgrade app and Change Password

Today, the popular Music streaming service Spotify said the company has suffered a Data breach and warned users of its Android app to upgrade it in the wake of a potential data breach in their servers. Spotify is a commercial music streaming service launched in October 2008 by Swedish start-up...

Apple iCloud and Activation Lock Hacked; Allows Hackers to Unlock Stolen Devices

A Dutch-Moroccan team of hackers calling itself "Team DoulCi" have reportedly claimed to hack a protective feature on Apple’s iCloud system, that could leverage an attacker to remove security measures on lost or stolen iPhone devices. According to a report from Dutch news organization De Telegraa...

Odd guest stars of a certain sub-patch not getshell-a vulnerability warning-the black bar safety net

Problem site: wan.7k7k.com Nginx file parsing vulnerability 0x00:everything is beautiful to blame ! In the site to see a beauty player, to view the next image address, 发现url为http://wan.7k7k.com/uploadfiles/userfiles/image/%E7%A5%9E%E6%9B%B2/%E7%8E%A9%E5%AE%B62.jpg Try the url+/x. php can...

四川某大学老师帐号和密码泄漏，可以任意更改成绩

简要描述： 老师的密码是初始密码，未更改。 详细说明： 通过查询老师的工号，用初始密码123456即可登录，可随意更改成绩，危害极大。 google：inurl：/jwweb/ 有很多。 漏洞证明： 就拿我的学校来测试吧：http://jwc.scac.edu.cn/jwweb/ 通过课表查询老师的工号 可以...

Bitly Compromised, Users Urged to Change Passwords

Link shortening service Bitly informed its users Thursday that it believes user credentials – passwords, API keys and OAuth tokens – have been compromised. While the company claims there’s no real indication that any accounts were accessed without authorization, in a post on its blog the company...

Popular URL Shortener 'Bitly' User Accounts Reportedly Compromised

The famous URL shortening service is facing a data breach. The very popular URL shortening service Bitly, has issued an urgent security warning saying that its users’ account credentials may have been compromised, according to a blog post published yesterday. "We have reason to believe that Bitly...

Applink configuration data is exposed anonymously

panel:bgColor=e7f4fa NOTE: This bug report is for JIRA Cloud. Using JIRA Server? See the corresponding bug report|http://jira.atlassian.com/browse/JRASERVER-38225. panel If you make an anonymous GET request to /rest/issueLinkAppLink/1/appLink/info , the instance will tell you all the names, IDs a...