15749 matches found
ReciPHP 1.1 SQLi
SQL Injection vulnerability in ReciPHP Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
WikkaWiki 1.3.1 SQL Injection
SQL Injection vulnerability in WikkaWiki Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Classified Ultra ScriptsGenie XSS / SQL Injection Vulnerabilities
Classified Ultra ScriptsGenie suffers from cross site scripting and remote SQL injection vulnerabilities. Note that this finding houses site-specific data. Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link;...
Joomla Collector Shell Upload
Exploit Title:Joomla comcollecter shell upload Author: Red Dragonal Alb0zZ Team Home :HackForums.AL,alb0zz.in Date :19/01/2013 Category:: web apps Google dork: inurl:index.php?option=comcollector Tested on: Windows XP Download: http://www.steevo.fr/en/download Home Page: http://www.steevo.fr/...
Classified Ultra ScriptsGenie Cross Site Scripting / SQL Injection
Exploit Title; Classified Ultra ScriptsGenie Multiple Vulnerabilities Date; 20/1/13 Author; 3spi0n Script Vendor or Software Link; http://www.hotscripts.com/listing/classified-ultra-scriptsgenie/ Category; Webapps Type; SQL Injection MySQLi Tested on; Ubuntu 12.10 / Win7 / Backtrack 5 Demo...
Take down of fifth most widespread 'Virut Botnet'
NASK the domain registrar that operates the “.pl” Polish top-level domain registry has seized multiple domains used for cyber crime activities by spreading Waledac malware distributed by the Virut botnet. According to Poland’s Computer Emergency Response Team, Virut was first detected in 2006 and...
Joomla! Component com_collector - Arbitrary File Upload
Exploit Title:Joomla comcollecter shell upload Author: Red Dragonal Alb0zZ Team Home :HackForums.AL,alb0zz.in Date :19/01/2013 Category:: web apps Google dork: inurl:index.php?option=comcollector Tested on: Windows XP Download: http://www.steevo.fr/en/download Home Page: http://www.steevo.fr/...
Invision Gallery 2.0.5 SQL Injection
Exploit Title : Invision Gallery SQL Injection Exploit Author : Ashiyane Digital Security Team software Homepage: www.invisionpower.com/apps/gallery/ Home : ww.Ashiyane.org Security Risk : High - SQL Injection version : 2.0.5 Dork : Invision Gallery 2.0.5 © 2013 IPS, Inc. inurl:img= or Invision...
Invision Gallery 2.0.5 - SQL Injection
Exploit Title : Invision Gallery SQL Injection Exploit Author : Ashiyane Digital Security Team software Homepage: www.invisionpower.com/apps/gallery/ Home : ww.Ashiyane.org Security Risk : High - SQL Injection version : 2.0.5 Dork : Invision Gallery 2.0.5 © 2013 IPS, Inc. inurl:img= or Invision...
The Novel Practice of DevOps Stars in The Phoenix Project
After a long 2.5 years Gene Kim, Kevin Behr, George Spafford, the authors of the awesome Visible Ops series, have just launched their latest book, The Phoenix Project. I was fortunate enough to get to read some early drafts, so I am extra excited that it is finally shipping. When Gene first...
Malware Infects US Power Plants through USB Drives
The US Department of Homeland Security’s Cyber Emergency Response Team has released a report, which stated that two American electrical power plants were compromised late last year and has identified a number of glaring electronic vulnerabilities. Some unknown malware infected two power plants...
SA-CONTRIB-2013-003 - RESTful Web Services - Cross site request forgery (CSRF)
This module enables you to expose Drupal entities as RESTful web services. It provides a machine-readable interface to exchange resources in JSON, XML and RDF. The module doesn't sufficiently verify POST requests thereby exposing a Cross Site Request Forgery vulnerability. This vulnerability is...
CVE-2013-0371
Unspecified vulnerability in the Server component in Oracle MySQL 5.5.28 and earlier allows remote authenticated users to affect availability, related to MyISAM...
SA-CONTRIB-2013-005 - Mark Complete Module - Cross Site Request Forgery (CSRF)
This module enables you to update a date field on a node via an AJAX link on the node view page. The module doesn't sufficiently guard against Cross Site Request Forgery CSRF. CVE identifiers issued CVE-2013-0207 Versions affected Mark Complete 7.x-1.x versions prior to 7.x-1.1. Drupal core is no...
CVE-2012-0574
Unspecified vulnerability in the Server component in Oracle MySQL 5.1.66 and earlier, and 5.5.28 and earlier, allows remote authenticated users to affect availability via unknown vectors...
ManageEngine Security Manager Plus 5.5 File Disclosure
File disclosure vulnerability in ManageEngine Security Manager f parameter Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...
Business Wiki 2.5 File Upload
File upload vulnerability in Business Wiki Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Zabbix 2.0 SQL Injection
SQL Injection vulnerability in Zabbix itemid parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...