WordPress JS Restaurant SQL Injection

Exploit Title : Wordpress JS Restaurant Plugin SQL Injection Vulnerability Author : Ashiyane Digital Security Team Security Risk : HIgh Google Dork : inurl:/wp-content/plugins/js-restaurant/popup.php?restuarantid= Location:site/path/wp-content/plugins/js-restaurant/popup.php?restuarantid=SQLi DEm...

Hacking DropBox account, Vulnerability allows hacker to bypass Two-Factor Authentication

Q-CERT team found a critical vulnerability that allows the attacker to bypass the two-factor authentication in the most popular file sharing service 'DropBox'. Two Factor Authentication is an extra layer of security that is known as "multi factor authentication" that requires not only a password...

MSN Hotmail - Password Reset (Session) Web Vulnerability

Document Title: =============== MSN Hotmail - Password Reset Session Web Vulnerability References: =========== http://www.vulnerability-lab.com/getcontent.php?id=994 Video: https://www.youtube.com/watch?v=INq6CirLgt0 Release Date: ============= 2013-06-29 Vulnerability Laboratory ID VL-ID:...

Memory corruption found using Address Sanitizer — Mozilla

Security researcher Abhishek Arya Inferno of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues in shipped software. Some of these issues are potentially exploitable, allowing for remote code execution...

ASC Timetables 2013 - Stack Buffer Overflow Vulnerability

Exploit for windows platform in category dos / poc !/usr/bin/python Title : ASC Timetables 2013 - Stack Buffer Overflow Vulnerability Researcher : Souhail Hammou Dark-Puzzle Research Team : http://itsecurity.ma Facebook : http://www.facebook.com/dark.puzzle.sec Date : 22/06/2013 Download Website ...

CentOS 5 : java-1.7.0-openjdk (CESA-2013:0958)

Updated java-1.7.0-openjdk packages that fix various security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

GLPI 0.83.8 - Multiple Vulnerabilities

GLPI 0.83.8 - Multiple Vulnerabilities GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities Vendor: INDEPNET Development Team Product web page: http://www.glpi-project.org Affected version: 0.83.7 and 0.83.8 Summary: GLPI, an initialism for Gestionnaire libre de parc informatique Free...

GLPI 0.83.8 SQL Injection

GLPI v0.83.8 Multiple Error-based SQL Injection Vulnerabilities Vendor: INDEPNET Development Team Product web page: http://www.glpi-project.org Affected version: 0.83.7 and 0.83.8 Summary: GLPI, an initialism for Gestionnaire libre de parc informatique Free Management of Computer Equipment, was...

GLPI 0.83.7 Parameter Traversal Arbitrary File Access Vulnerability

GLPI version 0.83.7 suffers from a parameter traversal vulnerability that allows for arbitrary file access. GLPI v0.83.7 itemtype Parameter Traversal Arbitrary File Access Exploit Vendor: INDEPNET Development Team Product web page: http://www.glpi-project.org Affected version: 0.83.7 Summary: GLP...

imacs CMS 0.3.0 - Unrestricted Arbitrary File Upload

imacs CMS 0.3.0 - Unrestricted Arbitrary File Upload ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit...

Joomla Rokdownloads Shell Upload

ISlamic Republic Of Iran Security Team Www.IrIsT.Ir Exploit Title : joomla comrokdownloads Components shell upload Vulnerability Author : IrIsT Security & Researcher Team Discovered By : Am!r Home : http://IrIsT.Ir - http://IrIsT.Ir/forum Facebook Page :...

imacs CMS 0.3.0 - Unrestricted File Upload Exploit

Restricted access to this script isn't properly realized Don't require authentication , so an attacker might be able to upload arbitrary files containing malicious PHP code due to uploaded file extension isn't properly checked. ?php VULNERABILITY: Unrestricted File Upload /src/assets/mng/mng.php...

imacs CMS 0.3.0 Shell Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : imacs CMS Unrestricted File Upload Exploit Date...

Bloofox CMS Unrestricted File Upload Exploit

Exploit for php platform in category web applications ?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit...

Fly-High CMS 2012-07-08 - Unrestricted Arbitrary File Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : Fly-High CMS Unrestricted File Upload Exploit...

Fly-High CMS 2012-07-08 Shell Upload

?php / ,--^----------,--------,-----,-------^--, | ||||||||| --------' | O .. CWH Underground Hacking Team .. +---------------------------^----------| ,-------, | / XXXXXX /| / / XXXXXX / \ / / XXXXXX /\ / XXXXXX / / XXXXXX / ------' Exploit Title : Fly-High CMS Unrestricted File Upload Exploit...

Sharetronix 3.0.1 Cross Site Scripting

Exploit Title : xss signup sharetronix Designed By : amir.av727 Author : Ashiyane Digital Security Team Home : http://ashiyane.org Software Link : http://sharetronix.com Security Risk : High - xss Version : sharetronix 3.0.1 Exploit : 1-site.com/signup 2 . Copy "alert/Hacked By amir.av727/ In the...

Vulnerability in Whatsapp messenger media server

If you own an iPhone or an Android device, then the chances are high that you're familiar with the extremely popular cross-platform messaging app, WhatsApp. According to a whitehat hacker Mohammed Saeed, Whatsapp media server media.whatsapp.com interface was vulnerable to Traversal local file...

Suit Filed Against NSA, Obama Over Surveillance Program

A group of people, including a former federal prosecutor and the parents of a Navy SEAL sniper killed in action, have filed a class-action law suit against the National Security Agency, Verizon and President Obama over the NSA’s collection of cell phone data. The suit says the order that enabled...

Elastix 2.4.0 Cross Site Scripting Vulnerability

Elastix version 2.4.0 suffers from a cross site scripting vulnerability Exploit Title: elastix 2.4.0 XSS Vulnerability Date: 28/05/2013 Exploit Author: cheki Vendor Homepage: elastix.org Software Link: http://www.elastix.org/index.php/en/downloads/main-distro.html Version: Elastix 2.4.0 Stable CV...