Gauss Malware Detection Tool released by Iranian CERT

Iranian National Computer Emergency Response Team releases a tool for Gauss malware detection. Cyber surveillance virus has been found in the Middle East that can spy on banking transactions and steal login and passwords, according Kaspersky Lab, a leading computer security firm. Gauss primarily...

Shadow infosystem CMS SQL Injection

Exploit Title: Shadow infosystem CMS sql injection Google Dork: "Powerd by Shadow infosystem" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.shadowinfosystem.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu ...

US Creations Web Services CMS Cross Site Scripting

Exploit Title: US Creations Web Services CMS Cross Site Scripting Google Dork: "Powered By: US Creations Web Services" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.us-creations.com/ Version: All Version Category:: webapps Tested...

Synthetix CMS SQL Injection

Exploit Title: Synthetix CMS products.php SQL Injection Vulnerability Google Dork: "Website design & hosting by Synthetix" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.synthetix.com/ Version: All Version Category:: webapps Tested...

EasyWebTime V.2007 CMS SQL Injection

Exploit Title: EasyWebTime V.2007 CMS sql injection Google Dork: "Powered by EasyWebTime V.2007" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.bizpotential.com/main.php?filename=easywebtime Version: All Version Category:: webapps...

Sichkg CMS SQL Injection

Exploit Title: sichkg CMS SQL Injection Vulnerability Google Dork: "Powered by sichkg.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.sichkg.com Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Serv...

Detna CMS SQL Injection

Exploit Title: Detna CMS sql injection Google Dork: "Powerd by Detna" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.detna.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - win7...

Jajitech IT Solutions CMS SQL Injection

Exploit Title: Jajitech IT Solutions CMS sql injection Google Dork: "Powered by Jajitech IT Solutions" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu...

TAGWORX.CMS SQL Injection

Exploit Title: TAGWORX.CMS CMS gallery.php sql injection Google Dork: "Powered by " Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.jajitech.net/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server -...

Mediachurch CMS SQL Injection

Exploit Title: mediachurch CMS sql injection Google Dork: " Powered by MediaChurch & Calvary Episcopal Church" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://mediachurch.com/ Version: All Version Category:: webapps Tested on: GNU/Linux...

Keralainfotech CMS SQL Injection

Exploit Title: Keralainfotech CMS sql injection Google Dork: "Powered by Keralainfotech.com" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://keralainfotech.com/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windo...

Globi CMS SQL Injection

Exploit Title: globi CMS SQL Injection Vulnerability Google Dork: "Powered by globi" Date: 9/7/2012 Author: Ajax Security Team Discovered By: Crim3R Home: WwW.AjaxTm.CoM Vendor Software: http://www.globi.ca/ Version: All Version Category:: webapps Tested on: GNU/Linux Ubuntu - Windows Server - wi...

Two Microsoft Security Updates Await In Advance of Certificate Key Length Changes

Microsoft is promising a light load of security updates for next Tuesday’s monthly patch release in an attempt to give Windows administrators and security teams time to prepare for an October change to certificate key length requirements. Angela Gunn of Microsoft’s Security Response Team announce...

CT Web Design SQL Injection

010101010101010101010101010101010101010101010101010101010 0 0 1 Iranian Datacoders Security Team 1 0 0 1 www.DataCoderS.Org 1 010101010101010101010101010101010101010101010101010101010 ++ Exploit Title : CT Web Design Sql Injection Vulnerability Author : Iranian Datacoders Security Team Site : Htt...

PBW CMS SQL Injection

---------------IN THE NAME OF ALLAH----------------- Title: PBW CMS SQL Injection Vulnerability Discovered By : Ashiyane Digital Security Team Author : Ashiyane Digital Security Team Dork : intext:Powered by Point B Web CMS inurl:eventdetail.php?eventid= Exploit :...

Cutenews 1.5 Cross Site Scripting

Exploit Title: Cutenews 1.5 Cross site Scripting Vulnerability Google Dork: Intext:"Content Management Powered by CuteNews" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Site : Http://AjaxTm.com/ Vendor Home OR download link: http://cutephp.com/click.php?cutenewslatest Tested on: all...

ExtCalendar 2 SQL Injection / Cross Site Scripting

---------------IN THE NAME OF ALLAH----------------- Title: ExtCalendar 2 Multipe Vulnerabilities Discovered By : Ashiyane Digital Security Team Author : Ashiyane Digital Security Team Dork : intext:Powered by ExtCalendar 2 Exploit : localhost/calendar.php?mode=view&id=SQL...

WebActive CMS Cross Site Scripting

Exploit Title: WebActive CMS Cross site Scripting Vulnerability Google Dork: Intext:"powered by: WebActive" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.webactive.nl/ Tested on: all ================================== + zoeken parametr...

SA-CONTRIB-2012-137 - Heartbeat - Cross Site Request Forgery (CSRF) in heartbeat_comments

This module enables you to display activity for events on a site. The sub-modules heartbeatcomments and shouts don't sufficiently check the heartbeat comment post values making it possible for an attacker to cause a user to unknowingly make comments. CVE: Requested Versions affected...

Cm3 CMS Cross Site Scripting

Exploit Title: cm3 cms Cross site Scripting Vulnerability Google Dork: Intext:"Powered by cm3" Date: 09/04/2012 Author: Crim3R & Ajax Security Team Home : Http://WwW.AjaxTm.com/ Vendor Home : http://www.cm3cms.com Tested on: all ================================== + keywords $ strSearchPhrase...