Easy Travel Portal 2 - 'travelbycountry.asp' SQL Injection

TITLE: Easy Travel Portal "travelbycountry.asp" SQL Injection Vulnerability PRODUCT: Easy Travel Portal v2 PRODUCT URL: http://www.softwebsnepal.com/travelwebsiteprogammingportal.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ VULN:...

Ananda Real Estate 3.4 - 'list.asp' Multiple SQL Injections

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ BUGS:...

Ananda Real Estate 3.4 SQL Injection

TITLE: Ananda Real Estate "list.asp" Multiple SQL Injection Vulnerabilities PRODUCT: Ananda Real Estate 3.4 PRODUCT URL: http://www.softwebsnepal.com/websitedesignrealestate.htm RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ BUGS:...

Siberia Exploit Kit Offers Service to Evade Anti-Malware Software

Attackers have been using legitimate online services such as VirusTotal and others to check their new pieces of malware against various security suites for some time now, but that’s become less and less effective recently. Now, the creators of some exploit kits are beginning to include less...

MicroNetSoft RV Dealer Website SQL Injection

TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities PRODUCT: MicroNetSoft RV Dealer Website PRODUCT URL: http://www.micronetsoft.com/store/scripts/prodView.asp?idproduct=77 RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ SQL INJECTION...

MicroNetSoft RV Dealer Website SQL Injection Vulnerability

Exploit for asp platform in category web applications ========================================================== MicroNetSoft RV Dealer Website SQL Injection Vulnerability ========================================================== TITLE: MicroNetSoft RV Dealer Website Two SQL Injection...

Car Portal 2.0 Cross Site Scripting

alert1337"...

MicroNetSoft RV Dealer Website - 'search.asp' / showAlllistings.asp' SQL Injection

TITLE: MicroNetSoft RV Dealer Website Two SQL Injection Vulnerabilities PRODUCT: MicroNetSoft RV Dealer Website PRODUCT URL: http://www.micronetsoft.com/store/scripts/prodView.asp?idproduct=77 RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ SQL INJECTION...

Site2Nite Big Truck Broker SQL Injection

...

Site2Nite Big Truck Broker - 'txtSiteId' SQL Injection

...

jSchool Advanced Cross Site Scripting

TITLE: jSchool Advanced "action" Cross-Site Scripting PRODUCT: jSchool Advanced PRODUCT URL: http://jogjacamp.com/script4jSchoolAdvanced.html RESEARCHERS: underground-stockholm.com RESEARCHERS URL: http://underground-stockholm.com/ BUG: Input passed via the "action" parameter to index.php is not...

Anup Ghosh on PDF Exploits and Sandboxes

Dennis Fisher talks with Anup Ghosh, founder and chief scientist of Invincea, about the rise of browser and PDF exploits, the company’s new virtualized PDF security product and whether the Reader X sandbox will make a difference in preventing widespread PDF attacks. Podcast audio courtesy of...

Alex Hutton on the VERIS Community App and Data Breaches

Dennis Fisher talks with Alex Hutton of Verizon Business about the company’s release of the VERIS Community Application and the need for better data in the security community on attacks and incidents. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

Woltlab Burning Board Userlocator 2.5 - SQL Injection ----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board...

Cyber Criminal Underground: The Comics Edition

The criminal underworld is an insular community shrouded in secrecy. That’s helped lend an air of mystique to cyber crime. See also: Bruce Willis in “Die Hard 4: Live Free or Die Hard.”. But it turns out that, like so much else, real life cyber crime is… well… pretty dull. How dull? Comic artist...

Wanted: E-Mail Addresses

Spammers always need fresh lists of e-mail addresses, says Steve Santorelli of Team Cymru. Supplying them is a lucrative underground business in its own right. The easy availability of such lists and the commodity prices they fetch is a sign of how well developed the underground economy really is...

Adam Shostack on User-Centric Privacy and the Need for Smarter Regulation

Dennis Fisher talks with author Adam Shostack about the merits of the user-centric privacy model, why users don’t pay more attention to privacy and data collection and the need for smarter privacy regulations. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

dreamsoft SQL Injection Vulnerability

Exploit for php platform in category web applications ===================================== dreamsoft SQL Injection Vulnerability ===================================== Special to adhan a.k.a Cr4wL3R --- Dont Talk : My Last Exploit, I dont Like !!! :, We all, Big Family H4ckb0x Organization miss u...

Dino Dai Zovi on Return-Oriented Exploitation and Bug Bounties

Dennis Fisher talks with independent security researcher Dino Dai Zovi about his upcoming Black Hat talk on return-oriented exploitation, the value of exploit mitigations such as DEP and ASLR, the new crop of vendor bug bounties and why we don’t have any good data on zero-day attacks. Podcast aud...

Gridsphere - gridportlet User Enumeration

!/usr/bin/python Gridsphere - gridportlet remote user enumeration exploit Copyright IPSECS c 2010 http://ipsecs.com Thanks to underground people who gives idea about python and javascript You know who you are :- import sys,re,os from urllib2 import urlopen You need to install ClientForm from this...