Pre Podcast Portal - Authentication Bypass

Exploit Title: PRE PODCAST PORTAL AUTH BYPASS Date: 16th july 2010 Author: D4rk357 Critical:high contact:d4rk357atyahoodotin Price : 125$ Software Link:http://preproject.com/podcast.asp Greetz to :b0nd, Fbih2s,Beenu,rockey killer,The empty, punter,eberly,prashant Shoutz to :...

TheHostingTool 1.2.2 Cross Site Request Forgery

Date: Mon 12 Jul 2010 01:19:52 PM EEST Vendor: http://thehostingtool.com/ Download: http://thehostingtool.googlecode.com/files/THT-v1.2.2.zip --- -= CSRF PoC 1 - Create Staff Account =- TheHostingTool 1.2.2 Multiple CSRF Vulnerabilities - Create Staff Account -= CSRF PoC 2 - Delete Staff Account ...

Cisco Live Attendee List Hacked

Someone hacked the list of attendees for the recent Cisco Live 2010 users’ conference, a security breach that led Cisco to notify the customers as well as a broader group who have dealings with the company. Read the full article. Network World...

AT&T Show How Not to Handle a Data Breach

There’s an ongoing argument in barrooms, pubs and wherever else soccer fans gather about who is the best player in the world. The general consensus right now is Lionel Messi, the Argentinian genius, but others can build a case for Wayne Rooney, Didier Drogba or even Cristiano Ronaldo. A similar...

AT&T iPad Hack May Be Worse Than Initially Thought

Researchers looking into the security of GSM phone networks are suggesting that the recent breach, which saw tens of thousands of e-mail addresses and ICC-IDs inadvertantly disclosed AT&T, could have far more significant implications than a bit of extra spam: attackers can use the information to...

Joomla! Component com_lead - SQL Injection

Joomla! Component comlead - SQL Injection TR Title: Joomla Component comlead SQL Injection TR Date: 03.06.2010 TR Author: ByEge TR Homepage: byege.blogspot.com TR Vendor: http://www.leadya.co.il/ TR ExploiT : TR index.php?option=comlead&task=display&archive=1&Itemid=65&leadstatus=1' TR column...

NYTimes Report: Attackers Hit Google's Password System

The New York Times is reporting that Google’s password system was compromised during a targeted attack last December. The system, called Gaia or Single Sign-On, controls access by millions of users worldwide to almost all of the company’s Web services, including e-mail and business applications...

School Management System Pro 6.0.0 Backup Disclosure

======================================================================================== | Title : School Management System Pro 6.0.0 Backup Dump Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com/vb | Web Site :...

Multi-Mirror - Arbitrary File Upload

======================================================================================== | Title : Multi-Mirror Remote Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iqs3cur1ty.com | Web Site : http://www.p30vel.ir/ | Tested on: windows SP2 Français V.Pnx2...

Yupi CMS 0.44 Remote File Inclusion

Yupi Cms 0.44 PhpDir . $filename; return $file;...

Online official is to be brush library-vulnerability warning-the black bar safety net

This and modify the score the same way. Today comparing the stuffy, just up ripped two sentences, with regard to the brush library on this thing The brush Gallery, is update money=1 0 0 0 0 0 0, a businessman used to call the brush points, sounds like a very NB, looks worship, in fact, also just...

VA Investigating Security Breach of Veterans' Medical Data

The Veteran Affairs Department’s inspector general has launched a criminal investigation into a physician assistant’s alleged downloading of veterans’ clinical data at its Atlanta medical center. The assistant allegedly recorded two sets of patient data on to a personal laptop for research...

Gallery Search Engine Cross-Site Scripting (CVE-2003-0614)

A Cross Site scripting XSS security breach is exploited by an attacker inserting specially crafted code to unfiltered input fields in web applications. Sourceforge's "Gallery" is prone to a cross site scripting vulnerability in the "serch.php" script. Depending on the script executed, the victim'...

Adobe Flash Player 10.1.51 - Local File Access Information Disclosure

Adobe Flash Player 10.1.51 - Local File Access Information Disclosure source: https://www.securityfocus.com/bid/38517/info Adobe Flash Player is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further...

Masa2el MusicCity SQL Injection

----------exploit Debut Remote SQL Injection Vulnerability ----------Script Info Moi : JIKO Site : No-exploit.Com Email : mm : Moghla9 Ferme Closed ----------Script Info Site:http : http://www.masa2el.com Download : http://www.masa2el.com/index.php?go=dl&type=d&id=4 ----------exploit Info |SQL...

Coupons Direct Access Bypass

======================================================================================== | Title : Coupons By Pass Admin Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com | Web Site : | Dork : Copyright 2007. Coupons and Deals Directory | Tested on: windows...

Joomla! 1.5.12 - Connect Back

!/usr/bin/php . TITLE: Joomla 1.5.12 connect back exploit AUTHOR: Nikola Petrov [email protected] VERSION: 1.0 LICENSE: GNU General Public License Platform: Joomla 1.5.12 Vulnerabilities discovery and implementation: Nikola Petrov [email protected] Date: 27.08.2009 Joomla 1.5.12 suffers from...

Tor Servers Hacked

Two of the seven directory authority servers that the Tor Project uses to run its anonymous browsing service have been compromised, along with a new server that the project uses to host metrics and graphs. The project’s organizers discovered the attack earlier this month and are advising users wh...

Soft Direct 1.05 - Multiple Vulnerabilities

Soft Direct 1.05 - Multiple Vulnerabilities ======================================================================================== | Title : Soft Direct v1.05 Multti Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home :...

Lincoln National: 'Breach May Affect 1.2 Mil Customers'

Lincoln National Corp. LNC last week disclosed a security vulnerability in its portfolio information system that could have compromised the account data of approximately 1.2 million customers. Read the full article. Dark Reading...