From Gimmiv to Conficker: MS08-067 Under The Microscope

GENEVA — The critical MS08-067 vulnerability used by the Conficker worm to build a powerful botnet continues to be a lucrative security hole for cybercriminals. During a presentation at the Virus Bulletin 2009 conference here, a trio of Microsoft researchers dissected the malware attacks linked t...

ViArt Helpdesk - 'product_details.php?category_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/42543/info ViArt Helpdesk is prone to multiple cross-site scripting vulnerabilities because it fails to properly sanitize user-supplied input. An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

ViArt CMS - 'forum.php?forum_id' Cross-Site Scripting

source: https://www.securityfocus.com/bid/36003/info ViArt CMS is prone to multiple cross site scripting vulnerabilities because the application fails to sufficiently sanitize user-supplied data. Attacker-supplied HTML or JavaScript code could run in the context of the affected site, potentially...

PHPEcho CMS 2.0-rc3 Cross Site Scripting

PHPEcho CMS 2.0-rc3 forum XSS Cookie Stealing / Blind Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=186100 XSS The forum allowed insert javascrip...

PHPEcho CMS 2.0-rc3 (forum) XSS Cookie Stealing / Blind Vulnerability

No description provided by source. PHPEcho CMS 2.0-rc3 forum XSS Cookie Stealing / Blind Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=186100 XSS...

PHPEcho CMS 2.0-rc3 (forum) XSS Cookie Stealing / Blind Vulnerability

Exploit for unknown platform in category web applications ===================================================================== PHPEcho CMS 2.0-rc3 forum XSS Cookie Stealing / Blind Vulnerability ===================================================================== PHPEcho CMS 2.0-rc3 forum XSS...

PHPEcho CMS 2.0-rc3 - forum Cross-Site Scripting Cookie Stealing Blind SQL Injection

PHPEcho CMS 2.0-rc3 - forum Cross-Site Scripting Cookie Stealing Blind SQL Injection PHPEcho CMS 2.0-rc3 forum XSS Cookie Stealing / Blind Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download:...

PHPEcho CMS 2.0-rc3 - 'forum' Cross-Site Scripting Cookie Stealing / Blind SQL Injection

PHPEcho CMS 2.0-rc3 forum XSS Cookie Stealing / Blind Vulnerability bug found by Jose Luis Gongora Fernandez a.k.a JosS contact: sys-projectathotmail.com website: http://www.hack0wn.com/ - download: http://sourceforge.net/project/showfiles.php?groupid=186100 XSS The forum allowed insert javascrip...

Immunity Canvas: SAFARI_FILE_STEALING2

Name| safarifilestealing2 ---|--- CVE| CVE-2009-1699 Exploit Pack| CANVAS Description| Safari 3.2 XSL File Stealing Notes| CVE Name: CVE-2009-1699 VENDOR: Apple Reference: http://scary.beasts.org/security/CESA-2009-006.html Arugments: After you have placed your single file in the correct...

Data-sniffing trojans hit Eastern European ATMs

From The Register Dan Goodin Security experts have discovered a family of data-stealing trojans that have burrowed into automatic teller machines in Eastern Europe over the past 18 months. The malware logs the magnetic-stripe data and personal identification number of cards used at an infected...

Small Pirates v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ------------------...

Small Pirate v-2.1 (XSS/SQL) Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ Small Pirate v-2.1 XSS/SQL Multiple Remote Vulnerabilities ============================================================...

MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-->

---------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-- ---------------------------------------------------------- CMS INFORMATION: --WEB: http://spirate.net/foro/ --DOWNLOAD: http://spirate.net/foro/ --DEMO:...

Small Pirates 2.1 SQL Injection

---------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES --Small Pirates v-2.1-- ---------------------------------------------------------- CMS INFORMATION: --WEB: http://spirate.net/foro/ --DOWNLOAD: http://spirate.net/foro/ --DEMO:...

MULTIPLE REMOTE VULNERABILITIES --MiniTwitter<=v0.3-Beta-->

------------------------------------------------------------ MULTIPLE REMOTE VULNERABILITIES --MiniTwitter=v0.3-Beta-- ------------------------------------------------------------ CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD: http://sourceforge.net/projects/minitt/ --DEMO:...

MiniTwitter 0.3 Beta SQL Injection

------------------------------------------------------------ MULTIPLE REMOTE VULNERABILITIES --MiniTwitter ------------------------------------------------------------ CMS INFORMATION: --WEB: http://mt.bioscriptsdb.com/ --DOWNLOAD: http://sourceforge.net/projects/minitt/ --DEMO:...

PhotoVideoTube 1.11 Multiple Remote Vulnerabilities

Exploit for unknown platform in category web applications =================================================== PhotoVideoTube 1.11 Multiple Remote Vulnerabilities =================================================== / | \ | | / \ \ | |/ /\ / // \ \ \ Y // | | / / / / / :: Egy Coders Team...

[DSECRG-09-034] Sun Glassfish Enterprise Server - Multiple Linked XSS vulnerabilies

Digital Security Research Group DSecRG Advisory DSECRG-09-034 Original advisory: http://dsecrg.com/pages/vul/show.php?id=134 Application: Sun Glassfish Enterprise Server Versions Affected: 2.1 Vendor URL: https://glassfish.dev.java.net/ Bug: Multiple Linked XSS vulnerabilities Exploits: YES...

MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4-->

-------------------------------------------------------- MULTIPLE REMOTE VULNERABILITIES--Leap CMS 0.1.4-- -------------------------------------------------------- CMS INFORMATION: --WEB: http://leap.gowondesigns.com/ --DEMO: http://php.opensourcecms.com/scripts/details.php?scriptid=161&name=Leap...

Attackers becoming an industry of their own

From Wired.com Kim Zetter Attackers are becoming more and more organized and efficient in their information-stealing efforts and are using tactics gleaned from security professionals to get better at what they do. In a panel discussion at the RSA Conference, Joe Stewart of SecureWorks said the th...