Feds Take Down 131 Counterfeiting Sites

It’s going to be considerably harder to get that sweet, knock-off Louis Vuitton bag you’ve been eyeing, and you can thank the US Immigrations and Customs Enforcement Agency ICE for that. The agency reportedly seized control of some 130 websites last week in advance of Black Friday and Cyber Monda...

EDJE Technologies SQL Injection

Exploit Title: EDJE Technologies Sql Injection Vulnerability Date: 24/11/2011 - 18:25 Author: 3spi0n Software Website: http://edje.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Note: Product.php %100 Mysql'i Vuln. File ! : $ Dorks: "Website Designed By EDJE Technologies" $ Demo Site...

YSD Web Design SQL Injection

Exploit Title: Ysd Web Design Sql Injection Vulnerability Date: 20/11/2011 - 03:18 Author: 3spi0n Software Website: http://www.ysd.hk/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by YSD" $ Demo Sites:...

BIND -- Remote DOS

The Internet Systems Consortium reports: Organizations across the Internet reported crashes interrupting service on BIND 9 nameservers performing recursive queries. Affected servers crashed after logging an error in query.c with the following message: "INSIST! dnsrdatasetisassociatedsigrdataset"...

TDSS Rootkit and DNSchanger: An Unholy Alliance

The TDSS rootkit has proven to be more pliable and adaptable than a campaigning politician, and attackers have used it in various forms for the last three or four years for all sorts of different attacks. It shows up in drive-by downloads, targeted attacks and just about everything in between, an...

TimThumb Cache Directory 'src' Parameter Arbitrary PHP File Upload

The version of TimThumb hosted on the remote web server allows an unauthenticated, remote attacker to upload arbitrary PHP files as specified by input to the 'src' parameter and retrieved from third- party sites to its cache directory. It's likely that these files can then be executed by requesti...

Admin Bot SQL Injection

Coder : baltazar a.k.a b4ltazar CMS name : Admin Bot Site : Flash2Web.com and carissimi.ch Dork : inurl:/news.php?wgo= Admin panel : http://www.site.com/admin Column number : 8 or 9 http://www.site.com/news.php?wgo=666+and+1=2+union+all+select+0,1,BALTAZAR,3,4,5,6,7,8-- Table : adminuser Columns ...

Joomla! Barter Sites 'com_listing' Component 'category_id' Parameter SQLi Vulnerability

Joomla! Barter Sites component is prone to an SQL injection SQLi vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Joomla! Barter Sites 'com_listing' Component 'category_id' Parameter SQL Injection Vulnerability

This host is running Joomla! Barter Sites component and is prone to SQL injection vulnerability. OpenVAS Vulnerability Test $Id: gbjoomlabartersitescategoryidparamsqlinjvuln.nasl 7015 2017-08-28 11:51:24Z teissa $ Joomla! Barter Sites 'comlisting' Component 'categoryid' Parameter SQL Injection...

CVE-2010-5037

SQL injection vulnerability in article.php in SenseSites CommonSense CMS allows remote attackers to execute arbitrary SQL commands via the articleid parameter...

Mac OS X Trojan Goes BitCoin Mining, Steals Files

A new Trojan targeting Mac OS X users is not only after data, but Bitcoins as well. The malware is being detected by Sophos as Miner-D, but is also known as DevilRobber. According to Sophos, the Trojan is hiding inside pirated versions of the Mac OS X image editing application GraphicConverter...

Attraction Website Design SQL Injection

Exploit Title: Attraction Website Design Sql Injection Vulnerability Date: 30/10/2011 - 22:45 Author: 3spi0n Software Website: http://www.attractweb.com/index.php Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php and other .php files. $ Dorks: "Site by Attraction...

Smbwebdemo SQL Injection

Exploit Title: Smbwebdemo Sql Injection Vulnerability Date: 30/10/2011 - 00:57 Author: 3spi0n Software Website: http://www.smbwebdemo.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Changer $ Dorks: "Designed by : Smbwebdemo" $ Demo Sites:...

360ideas SQL Injection

Exploit Title: 360ideas Sql Injection Vulnerability Date: 30/10/2011 - 22:40 Author: 3spi0n Software Website: http://www.360ideas.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php and other .php files. $ Dorks: "Site by 360ideas.com" $ Demo Sites:...

Mevin Productions SQL Injection

Exploit Title: mevin productions Sql Injection Vulnerability Date: 30/10/2011 - 23:00 Author: 3spi0n Software Website: http://www.mevin.com/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Event.php $ Dorks: "Powered by: mevin productions" inurl:/event.php?id= $ Demo Sites...

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type...

Joomla! Component Barter Sites 1.3 - Multiple Vulnerabilities

Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type. Commercial Price. $99 Attack Vector. Sql Injection & Persisten...

TeaMp0isoN releases list of vulnerable police web sites

TeaMp0isoN releases list of vulnerable police web sites TeaMp0isoN group of hackers published a list of vulnerable law enforcement authorities websites that can be hacked using MSAccess SQL injection attacks. Member from TeaMp0isoN with codename "f0rsaken" create a pastebin note with following...

Barter Sites 1.3 Joomla Component Multiple Vulnerabilities

Exploit for php platform in category web applications Barter Sites 1.3 Component Joomla SQL Injection & Persistent XSS vulnerabilities Release Date Bug. 28-Oct-2011 Date Added. 01-Oct-2011 Vendor Notification Date. Never Product. Barter Sites Platform. Joomla Affected versions. 1.3 Type. Commerci...

Art Dimension SQL Injection

Exploit Title: Art Dimension Sql Injection Vulnerability Date: 25.10.2011 - 01:03 Author: 3spi0n Software Website: http://www.artdimension.ca/ Tested On: BackTrack 5 - Win7 Ultimate Platform: Php $ Vulnerable File: Page.php / Pages.php $ Dorks: "Designed by Art Dimension" $ Demo Sites:...