MTV.com Cross Site Scripting

Exploit Title: MTV XSS Date: 29.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ http://www.mtv.com/global/mobile/widgets/mobileweb.jhtml?url=XSS http://m.mtv.com&css="alert"TayfunBasoglu"...

ZDI-12-152 : Oracle Outside In Excel MergeCells Record Parsing Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-152 : Oracle Outside In Excel MergeCells Record Parsing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-152 August 22, 2012 - -- CVE ID: - -- CVSS: 10, AV:N/AC:L/Au:N/C:C/I:C/A:C - -- Affected Vendors:...

ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ZDI-12-158 : Microsoft Internet Explorer MSADO CacheSize Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-12-158 August 22, 2012 - -- CVE ID: CVE-2012-1891 - -- CVSS: 7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P - -- Affected...

Formspring.me Cross Site Scripting

Exploit Title: formspring.me xss Date: 24.08.2012 Author: TayfunBasoglu Tested: BackTrack 5 Platform: Php ------------------------------------------------------------------ formspring.me header search box image1 : http://3.bp.blogspot.com/-tu8ROsEvSWo/UDdoQsB1vI/AAAAAAAAADY/yih1B1w67wY/s1600/1.PN...

Twitter to Update API to Require Authentication

In order to limit malicious use, Twitter is closing ranks around its API and requiring application developers use authentication in its upcoming new release. The company announced Thursday afternoon in a blog post that it was introducing new restrictions in v1.1 to create a “more consistent Twitt...

OpFake, FakeInst Android Malware Variants Continue to Resist Detection

Android devices have remained a constant target of attacks over the last quarter thanks in part to new variants from the FakeInst and OpFake families of malware. According to the latest version of the F-Secure Mobile Threat Report, the firm found 5033 malicious Android application packages APKs, ...

New Study Shows Surge in Fake Twitter Users

Dealers–Twitter scammers who create fake profiles on the social media site and sell their sets of followers–are adapting their workflow just enough to stay under the social media site’s radar, according to security firm Barracuda Labs, who recently wrapped up a 75 day study analyzing the buying a...

Fake Syria News Posted from Hacked Reuters blog and Twitter account

On Friday, Reuters blog platform was hacked with false posts and on Saturday, the @ReutersTech account on Twitter was taken over and renamed @TechMe. False tweets were sent before it was taken down. The first attack came Friday after Syrian hackers loyal to President Bashar al-Assad allegedly...

YT-Videos Script SQL Injection

Exploit Title; YT-Videos Script SQL Injection Vulnerability Date ; 6/8/12 Author ; 3spi0n Script Vendor or Software Link ; http://www.hotscripts.com/listing/yt-videos-script/ - http://www.webtoolsin.com/products-3-yt-videos-script.html Category ; Webapps Type ; SQL Injection MySQLi Tested on ;...

Joomla Joomgalaxy 1.2.0.4 Shell Upload / SQL Injection

Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...

Joomla! Component com_joomgalaxy 1.2.0.4 - Multiple Vulnerabilities

Exploit Title: Joomla joomgalaxy 1.2.0.4 Multiple Vulnerabilites dork: inurl:comjoomgalaxy Date: 01-08-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R site: http://poisonsecurity.wordpress.com/ Vendor: http://www.joomgalaxy.com/ Version: 1.2.0.4 last update on Jul 27, 2012 License:...

Gustavo Antunez SQL Injection

1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ \ ,/\ /\ \ 1 1 //\ \ /' \ /\ //\ Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 x Official Website: http://www.1337day.com 0 1 x...

There is No Reason to Take a Picture of Your Debit Card …Ever

It does not matter how cute it is, or how relieved you are to finally find it after having lost it, or how mad you are at those hacks over at your bank for misspelling your name. It cannot be stressed enough that it is always a terrible, terrible idea to post pictures of your credit or debit card...

Twitter Denies Hacktivists Behind Severe Outage

Twitter officials say it was a “cascading bug” and not the handiwork of hacktivists that brought down the microblogging site today in two separate outages. “This wasn’t due to a hack or our new office or Euro 2012 or GIF avatars, as some have speculated today,” Mazen Rawashdeh, the company’s vice...

Face.com Fixes Flaw to Prevent Facebook and Twitter Hijacks

A significant flaw in the Face.com mobile application KLIK has been fixed to prevent Facebook and Twitter users from having their accounts hijacked. KLIK is a camera app that uses face recognition to tag friends in Facebook photos in real time. It also apparently granted access to KLIK users’...

PHP Decoda 3.3.1 - Local File Inclusion

PHP Decoda 3.3.1 - Local File Inclusion Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 1...

Simple Document Management System 1.1.5 / 2.0 SQL Injection

Simple Document Management System 1.1.5 / 2.0 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS twitter: @JossGongora contact: sys-projectathotmaildotcom website: http://www.hack0wn.com/ download: http://mirror.us.cc.com.au/pub/cafuego/sdms ----------- version 2.0...

Simple Document Management System 1.1.5 / 2.0 SQL Injection Vulnerability

Exploit for php platform in category web applications Simple Document Management System 1.1.5 / 2.0 Multiple Vulnerabilities bug found by Jose Luis Gongora Fernandez a.k.a JosS twitter: @JossGongora contact: sys-projectathotmaildotcom website: http://www.hack0wn.com/ download:...

PHP Decoda 3.3.1 - Local File Inclusion

Exploit Title: php-decoda local file inclusion Date: 16/06/2012 Author: Number 7 Software Link: http://milesj.me/code/php/decoda Version: 3.3.1 Tested on: linux Exp: http://localhost/milesj-php-decoda/index.php?view=../../../../../../../etc/passwd%00 Line 111 in Index.php: Blogpot:...

Anonabees 'SpexSecurity' Appear, Leak Data On Thousands, Disappear

A new Anonymous-styled hacktivist group, SpexSecurity, has surfaced and then vanished, but not before allegedly siphoning the personal information of over 100,000 residents of a Tennessee town, including individuals’ e-mail passwords, social security numbers and birth dates. Details of the hack...