ES CmS 0.1 - SQL Injection

ES CmS 0.1 - SQL Injection Exploit Title: ES CmS 0.1 Sql Injection Vulnerability Google Dork: inurl:/page.php?id= Date: 2012 Exploit Author: MR.XpR Software Link: http://es-cms.com , http://sourceforge.net/projects/escms/files/esCMS Alpha/0.1/escmsalphav01.zip Version: v.0.1 Tested on: BT , 7 Poc...

Friends in War The FAQ Manager - question SQL Injection

Friends in War The FAQ Manager - question SQL Injection source: https://www.securityfocus.com/bid/56576/info Friends in War The FAQ Manager is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. A successful exploit...

New OSX/Imuler Variant Targeting Tibetan Activists

Researchers over at Intego have recently discovered a new variant of OSX/Imuler the data-stealing Mac malware, detected as OSX/Imuler.E which is believed to be targeting Tibetan rights activists. "This backdoor Trojan family was first discovered in September 2011 as a Mac PDF Trojan horse and has...

SAP /sap/bc/soap/rfc SOAP Service BAPI_USER_CREATE1 Function User Creation

This module makes use of the BAPIUSERCREATE1 function, through the SOAP /sap/bc/soap/rfc service, for creating/modifying users on a SAP. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework This module is based on, inspire...

ZenPhoto 1.4.3.3 - Multiple Vulnerabilities

ZenPhoto 1.4.3.3 - Multiple Vulnerabilities waraxe-2012-SA096 - Multiple Vulnerabilities in Zenphoto 1.4.3.3 =============================================================================== Author: Janek Vind "waraxe" Date: 03. November 2012 Location: Estonia, Tartu Web:...

MosP kintai kanri fails to restrict access permissions

Overview MosP kintai kanri contains an issue where access permissions are not restricted. MosP kintai kanri is an open source attendance management software. MosP kintai kanri contains an issue where access permissions are not restricted. Masako Ohno reported this vulnerability to IPA. JPCERT/CC...

Zomorrod Web Design SQL Injection

zomorrod Web Design Sql Injection Vulnerability Exploit Title : zomorrod Web Design Sql Injection Vulnerability Google Dork: inurl: Design By Zomorrod 0r inurl:topic.php?SITEitem= vender : http://www.zomorrod.net/ Expl0it : topic.php?SITEitem=-54+union+select+1,groupconcatusername,0x3a,passw...

Joomla! Component com_kunena - 'search' SQL Injection

!/usr/bin/perl Exploit title: Joomla Component comkunena SQL Injection exploit Google Dork: inurl:index.php?option=comkunena& Exploit Author: D35m0nd142 Screenshot : http://imageshack.us/f/155/comkunena2.png/ Vendor HomePage: http://www.joomla.org/ Special thanks to Taurusomar system"clear"; prin...

Research Shows Serious Problems With Android App SSL Implementations

There are thousands of apps in the Google Play mobile market that contain serious mistakes in the way that SSL/TLS is implemented, leaving them vulnerable to man-in-the-middle attacks that could compromise sensitive user data such as banking credentials, credit card numbers and other information...

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure

Amateur Photographers Image Gallery - force-download.php?File Information Disclosure source: https://www.securityfocus.com/bid/56110/info Amateur Photographer's Image Gallery is prone to multiple SQL injection vulnerabilities, a cross-site scripting vulnerability, and an arbitrary file-disclosure...

Get Short & Protected Link Remote String Based SQLi (perl)

Exploit for php platform in category web applications !/usr/bin/perl -w Title : Get Short Protect Link Remote String Based SQLi perl Author : Caddy-Dz Facebook Page: http://www.facebook.com/Algerian.Cyber.Army E-mail: islambabiaathotmail.com Category:: WebApps Security Risk : High Download :...

phpMyBitTorrent 2.04 SQL Injection / Local File Inclusion

Exploit for php platform in category web applications Author: Janek Vind "waraxe" Date: 01. October 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-91.html Description of vulnerable target: phpMyBitTorrent is the brand new Open Source solution for BitTorrent communities!...

AlamFifa CMS - user_name_cookie SQL Injection

AlamFifa CMS - usernamecookie SQL Injection source: https://www.securityfocus.com/bid/55746/info AlamFifa CMS is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to...

torrenttrader 2.08 - Multiple Vulnerabilities

waraxe-2012-SA089 - Multiple Vulnerabilities in TorrentTrader 2.08 =============================================================================== Author: Janek Vind "waraxe" Date: 17. September 2012 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-89.html Description of vulnerable...

Mandrake Linux Security Advisory : cvsweb (MDKSA-2000:019)

Cvsweb contains a hole that provides attackers who have write access to a cvs repository with shell access. Thus, attackers who have write access to a cvs repository but not shell access can obtain a shell. In addition, anyone with write access to a cvs repository that is viewable with cvsweb can...

Group Office Calendar - calendarjson.php SQL Injection

Group Office Calendar - calendarjson.php SQL Injection /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Sciretech (Multiple Products) - Multiple SQL Injections

source: https://www.securityfocus.com/bid/55390/info Sciretech Multimedia Manager and Sciretech File Manager are prone to multiple SQL-injection vulnerabilities because they fail to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting these issues could allow an...

Sitemax Maestro - SQL Injection Local File Inclusion

Sitemax Maestro - SQL Injection Local File Inclusion source: https://www.securityfocus.com/bid/55386/info Sitemax Maestro is prone to SQL-injection and local file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. An attacker can exploit these vulnerabilities to...

iPhone SMS spoofing vulnerability disclosure-vulnerability warning-the black bar safety net

Vulnerability description: 4 days ago Pod2g issued a document to Never trust SMS: iOS text spoofin http://pod2g-ios.blogspot.com/2012/08/never-trust-sms-ios-text-spoofing.html The vulnerability can affect all iOS version including the latest iOS 6 beta 4 to. And cloth use the program:...

CVE-2011-4944

Python 2.6 through 3.2 creates /.pypirc with world-readable permissions before changing them after data has been written, which introduces a race condition that allows local users to obtain a username and password by reading this file...