Discuz! X3.1 刷积分漏洞

简要描述： X3.1 利用特殊主题进行刷分 详细说明： 首先论坛需开启悬赏贴，如不开启，则无任何的影响。 具体步骤： 1，使用主号发布悬赏贴，其他号进行回帖。 2，主号打开2个窗口，1个窗口为采纳最佳答案的帖子，另1个窗口打开帖子的编辑。 然后，先采纳答案，然后把编辑的窗口，保存。 此处会发现帖子会变成未采纳，还可以继续采纳，但是主号的金币并没有在扣除。 漏洞证明：...

XSS vulnerability in 'Share a link' blueprint

Open the Create dialog - Select "Share a Link" article - In the 'Topics' field, enter an attack string such as: alert"hello" =The script will be executed...

XSS vulnerability in 'Share a link' blueprint

Open the Create dialog - Select "Share a Link" article - In the 'Topics' field, enter an attack string such as: alert"hello" =The script will be executed...

XSS vulnerability in 'Share a link' blueprint

Open the Create dialog - Select "Share a Link" article - In the 'Topics' field, enter an attack string such as: alert"hello" =The script will be executed...

Делимся ссылками на презентации/заметки/посты в блогах и обсуждаем их.

Тема предназначена для выкладывания ссылок по тематике форума на презентации и просто интересные посты в интернете, которые сложно пристроить в другие темы. Предполагаемый формат: Линк - небольшое описание Обсуждение ссылок, показавшихся интересными, приветствуется, и если окажется обширным и...

Topics viewer <= 2.3 Authentication Bypass & SQL Injection

Exploit for php platform in category web applications +-------------------------------------------------------------+ | Topics viewer = 2.3 Authentication Bypass & SQL Injection | +-------------------------------------------------------------+ author.............: ahwak2000 mail...............:...

Topics Viewer 2.3 Local File Inclusion / SQL Injection

Exploit Title: Topics viewer v 2.3 Multiple Vulnerabilities Software Link: http://nilehoster.com/default/topicsviewer Author: n4ss1m Date: 19-05-2012 Tested on: win/linux Home : www.Sec4ever.com Local File Inclusion footer.php "; @include "themes/$sitetheme/templates/footerhead.html"; "; ...etc...

Nilehoster Topics Viewer 2.3 - Multiple SQL Injections Local File Inclusion

Nilehoster Topics Viewer 2.3 - Multiple SQL Injections Local File Inclusion source: https://www.securityfocus.com/bid/53708/info Nilehoster Topics Viewer is prone to multiple SQL-injection vulnerabilities and a local file-include vulnerability because it fails to sufficiently sanitize user-suppli...

Topics viewer v 2.3 csrf (Add Admin) / XSS Vulnerabilites

Exploit for php platform in category web applications !/usr/bin/env python Title : Topics viewer v 2.3 csrf Add Admin and XSS Author : Cyber-Crystal Version : 2.3 Homepage : http://nilehoster.com/default/topicsviewer Dork : "Programmed by : Nilehoster.com" Tested on: Win/7 Based on POC :...

Traidnt Topics Viewer 2.0 - 'main.php' Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/52224/info Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain unauthorized access to the affected application, or delete certain...

Traidnt Topics Viewer 2.0 - main.php Cross-Site Request Forgery

Traidnt Topics Viewer 2.0 - main.php Cross-Site Request Forgery source: https://www.securityfocus.com/bid/52224/info Traidnt Topics Viewer is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain administrative actions, gain...

Topics Viewer Cross Site Request Forgery

Exploit Title: Topics viewer CSRF Add Admin Google Dork: allintext: Topics viewer v 2.0 BETA 1 Date: 28-02-2012 Author: The Green Hornet [email protected] Software Link: http://www.traidnt.net/Portal/Sites/Scripts/topics-viewer-v2.0-beta-1-traidnt.net.html Version:2.0 BETA 1...

HITB2011KUL - Mobile Malware Analysis

Document Title: =============== HITB2011KUL - Mobile Malware Analysis References: =========== Download: http://www.vulnerability-lab.com/resources/videos/424.wmv View: http://www.youtube.com/watch?v=nVAuZ7jf7Sk Release Date: ============= 2012-02-05 Vulnerability Laboratory ID VL-ID:...

DEF-CON Chennai 4 (DC602028) Call for Paper [January Meet]

DEF-CON Chennai 4 DC602028 Call for Paper January Meet The DC602028 aka DEF-CON Chennai Group is a group located at Chennai in India. The DC group was created on December 2010 from then DEF-CON Chennai had been the platform for Internet and Mobile security.DEF-CON Chennai is for everyone,we don't...

Call for Articles - The Hacker News Magazine | December Edition

Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...

URGE (Universal Rapid Gamma Emitter) Hijacking Twitter Trends Released by Anonymous

URGE Universal Rapid Gamma Emitter Hijacking Twitter Trends Released by Anonymous Anonymous have created something called Universal Rapid Gamma Emitter, or more simply URGE, which hijacks Twitter trending topics, allowing Anonymous members and supporters to subvert the topic with their own embedd...

Call for Papers from DefCon Chennai (DC602028)

Call for Papers from DefCon ChennaiDC602028 Background: We are the Official DEF-CON Chennai Group DC602028 The Event is taking place on 11th September 2011 at a resort in ECR Road Chennai,India. We will be having a Private conference room for the meet. Regarding Paper Submission We require...

Call for DEFCON Chennai (DC602028) 2011 meet on 14th August

Call for DEFCON Chennai DC602028 2011 meet on 14th August Welcome to DC602028 aka DEF-CON Chennai DEFCON Chennai DC602028 inviting all the like minded heads for the August 2011 meet In Chennai. Get Ready for Next Generation DefCon Meet.. -Where it 's taking place? Dazzle restaurant, Neelankarai...

WLAN Security Megaprimer DVD Released - 10+ hours of Wi-Fi Hacking and Pwnage !

WLAN Security Megaprimer DVD Released - 10+ hours of Wi-Fi Hacking and Pwnage ! With over 40+ HD videos containing 12+ hours of Wireless Ownage, this DVD weighs in at around 4.2 Gigabytes! SecurityTube.net just released a 4.2 GB DVD containing over 40+ HD quality videos of their WLAN Security...

MyBB 1.6.2 Stored XSS Vulnerability

Exploit for php platform in category web applications MyBB Recent Topics Stored XSS Vulnerability Version: MyBB 1.6.2 Plugin Page: http://mods.mybb.com/view/recent-topics-on-index-page Found by: Xinapse Site: http://www.iexploit.org Risk: Medium/High Description: By creating a thread with your XS...