8800 matches found
Google Android - 'content://' URI Multiple Information Disclosure Vulnerabilities
Android Data Stealing Web PageClick: Malicious Link"; // Stage 1: Redirect to Stage 2 which will force a download of the HTML/JS payload, then a few seconds later redirect // to the payload. We lo...
Cacti Unspecified SQL Injection and Cross Site Scripting Vulnerabilities
Cacti is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user- supplied data. Exploiting these issues could allow an attacker to steal cookie- based authentication credentials, compromise the application, access or modify...
New Mac Malware Variants Found in Trojaned Apps Are Stealing Data
Researchers have discovered a series of variants of the DevilRobber Mac OS X Trojan that have a menu of different capabilities, depending upon the strain, and can not only mine Bitcoins using the infected machine’s processing power, but also steals files, installs a Web proxy and may steal the...
Mac OS X Trojan Goes Bitcoin Mining, Steals Files
A new Trojan targeting Mac OS X users is not only after data, but Bitcoins as well. The malware is being detected by Sophos as Miner-D, but is also known as DevilRobber. According to Sophos, the Trojan is hiding inside pirated versions of the Mac OS X image editing application GraphicConverter...
Online Subtitles Workshop - Cross-Site Scripting
Online Subtitles Workshop - Cross-Site Scripting =================================================================================== Online Subtitles Workshop XSS vulnerabilities =================================================================================== Exploit Title: Online Subtitles...
Online Subtitles Workshop - Cross-Site Scripting
=================================================================================== Online Subtitles Workshop XSS vulnerabilities =================================================================================== Exploit Title: Online Subtitles Workshop XSS vulnerabilities Author: M.Jock3R...
Virus Experts Warn of Stuxnet Variant "Duqu"
Virus researchers at Symantec Corp. have discovered a variant of the Stuxnet worm, dubbed Duqu, that is designed to steal information about industrial control systems. Symantec said the malware, which has turned up on more than one customers’ network, could be used to gather data for a future...
Star outer order is submitted at the filter is not strict lead to XSS-vulnerability warning-the black bar safety net
google or baidu search inurl:user/order. asp? type=virtual host Temporarily onlyXSSto steal the cookie Can be added to the account can be backstage hanging horse, etc., etc. own use. XXS steal the cookie code scriptdocument. write'img src="" width=0 height=0 border=0 /';/script news. asp code: %...
SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !
SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...
SpyEye Trojan stole $3.2 million from US victims,Android users will be next target !
SpyEye Trojan stole $3.2 million from US victims,Android users will be next target ! A Russian cybergang headed by a mysterious ringleader called 'Soldier' were able to steal $3.2 million £2 million from US citizens earlier this year using the SpyEye-Zeus data-stealing Trojan, security company...
TWSL2011-008: Focus Stealing Vulnerability in Android
Trustwave's SpiderLabs Security Advisory TWSL2011-008: Focus Stealing Vulnerability in Android https://www.trustwave.com/spiderlabs/advisories/TWSL2011-008.txt Published: 2011-08-06 Version: 1.0 Vendor: Google http://www.android.com/ Product: Android Versions affected: Tested on 2.1 - 2.3 Other...
Symantec: Boot Sector Malware In Vogue
HED: Symantec: Boot Sector Malware Back In Style DEK: Malware writers are turning to boot record malware to infect systems – a throwback to earlier forms of malware. What’s old is new again. This time it’s boot sector malware – fashionable around the turn of the Millenium – that’s making a...
OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities
OpenEMR 4.0 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/49090/info OpenEMR is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker may leverage these issues to execute arbitra...
Phisher-On-Phisher Crime Surfaces Via Trojaned Auto-Whaler Tool
It’s a sad day when attackers turn on each other, cannibalizing one another for cheap thrills and easy profits. But that’s the situation now, as phishers have begun going after the weakest among their kind: the lazy, unmotivated wannabe phisher with no skills. Researchers at GFI Labs have stumble...
Cross Site Scripting - Dokumentation, Analyse & Techniken
Document Title: =============== Cross Site Scripting - Dokumentation, Analyse & Techniken References: =========== https://www.vulnerability-lab.com/resources/documents/198.pdf https://de.wikipedia.org/wiki/Cross-SiteScriptingWeblinks ; Release Date: ============= 2011-07-19 Vulnerability Laborato...
Metasploit Framework 3.7.2 Released - Download
Metasploit Framework 3.7.2 Released - Download Metasploit Framework 3.7.2 includes 698 exploit modules, 358 auxiliary modules, and 54 post modules, 11 new exploits, 1 new auxiliary module, and 15 new post modules.This release addresses several issues with updating the framework, adds 11 exploit /...
Bitweaver 2.5.0 (list_blogs.php) Cookie Stealing/LFI Vulnerability
Exploit for php platform in category web applications 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 +...
Mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2011-12 Miscellaneous memory safety hazards MFSA 2011-13 Multiple dangling pointer vulnerabilities MFSA 2011-14 Information stealing via form history MFSA 2011-15 Escalation of privilege through Java Embedding Plugin MFSA 2011-16 Directory traversal in resource:...
Adobe Flash 0-day
No description provided by source. exploit.html: ---------------------------------- html head script type="text/javascript" function getCookieValoffset var endstr = document.cookie.indexOf";", offset; if endstr == -1 endstr = document.cookie.length; return unescapedocument.cookie.substringoffset,...
Istgah CMS Cross Site Scripting / SQL Injection
=========================================================================== Istgah Cms Multiple Vulnerability =========================================================================== Name: Istgah Cms Multiple Vulnerability Vendor: http://www.iran-team.com/agahi1.html Price: $40 Date: 2011-04-1...