MyAuth3 Blind SQL Injection

Exploit Title: MyAuth3 Blind SQL Injection / Root Shell Access 0day exploit Google Dork: allinurl:1881/?console=panel Date: 09/06/2011 Author: Marcio Almeida marcioatalligatorteamdotorg | @marcioalm Version: 3.0 Tested on: Linux EDB-Note: apparently no true exploit is needed to dump system pwd...

Et-Chat Rank SQL Injection

Exploit Title : Et-Chat Rank SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://et-chat.ir/ Security Risk : High - SQL Injection Version : All Version Dork : inurl : ÓíÓÊã ÇãÊíÇÒ Ïåí Exploit : 1 . Search This...

Google Warning about New State Sponsored Attacks

"Warning: We believe state-sponsored attackers may be attempting to compromise your account or computer." From last 3 months Google users were surprised to see this unusual notification at the top of their Gmail inbox, Google home page or Chrome browser. These warnings are not being shown because...

SA-CONTRIB-2012-149 - Hostip - Cross Site Scripting (XSS)

Hostip enables you to query the http://www.hostip.info/ API to get the country / state information based on the user's IP address or a specific IP passed to it. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection...

MediaRocket Local File Inclusion

---------------------------------------------------------------- MediaRocket = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : MediaRocket = Local File Inclusion Vulnerability Author : Hack Center Security Team Discovered By :...

APlite Technologies Local File Inclusion

---------------------------------------------------------------- APlite Technologies = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : APlite Technologies = Local File Inclusion Vulnerability Author : Hack Center Security Team...

Deadcow Design Local File Inclusion

---------------------------------------------------------------- Deadcow Design = Local File Inclusion Vulnerability ---------------------------------------------------------------- Exploit Title : Deadcow Design = Local File Inclusion Vulnerability Author : Hack Center Security Team Discovered B...

SA-CONTRIB-2012-148 - OG - Access Bypass

OG Organic groups enables users to create and manage their own 'groups'. Each group can have subscribers, and maintains a group home page where subscribers communicate amongst themselves. A group membership can be given immediately upon subscribing, or be pending - waiting for a group administrat...

RedHat Update for spice-gtk RHSA-2012:1284-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

WEBBISH SQL Injection

---------------------------------------------------------------- WEBBISH SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : WEBBISH SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Sino Solutions Cross Site Scripting

---------------------------------------------------------------- Sino solutions search.php Cross Site Scripting Vulnerabilities ---------------------------------------------------------------- Exploit Title : Sino solutions search.php Cross Site Scripting Vulnerabilities Author : Hack Center...

2xl Cross Site Scripting / SQL Injection

---------------------------------------------------------------- 2xl XSS/SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : 2xl XSS/SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

Brother Bear SQL Injection

---------------------------------------------------------------- Brother Bear SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Brother Bear SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software...

Gazine2 Cross Site Scripting

---------------------------------------------------------------- Gozine2 alert/0/ www.gozineyejavan.ir/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ www.gozine2.co/modules.php?name=ResultCards&op=ResultCards&FieldID=&Year=alert/0/ GreetZ To : | Am!r | B3HZ4D |...

Tariq Rauf SQL Injection

---------------------------------------------------------------- Tariq Rauf SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Tariq Rauf SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link...

NW7Design SQL Injection

---------------------------------------------------------------- NW7Design SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : NW7Design SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Link :...

cgCraft LLC SQL Injection

---------------------------------------------------------------- cgCraft llc SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : cgCraft llc SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0lf Software Li...

SA-CONTRIB-2012-143 PRH Search - Cross Site Scripting (XSS)

PRH Search provides an interface to search for association information for Finnish association using the PRH Patentti- ja Rekisterihallitus database. The module fails to sanitize data retrieved from an untrusted third party source, thereby exposing an arbitrary script injection vulnerability XSS...

CentOS 6 : spice-gtk (CESA-2012:1284)

Updated spice-gtk packages that fix one security issue are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Cyber WebCreations SQL Injection

---------------------------------------------------------------- Cyber WebCreations SQL Injection Vulnerability ---------------------------------------------------------------- Exploit Title : Cyber WebCreations SQL Injection Vulnerability Author : Hack Center Security Team Discovered By : Net.W0...