CVE-2012-1074

SQL injection vulnerability in the White Papers mmwhtppr extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

Sql injection

SQL injection vulnerability in the White Papers mmwhtppr extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1074

SQL injection vulnerability in the White Papers mmwhtppr extension 0.0.4 and earlier for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2012-1074

CVE-2012-1074 affects TYPO3’s White Papers (mm_whtppr) extension 0.0.4 and earlier. The vulnerability is an SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. Documented impact includes potential data exposure or modification and partial confiden...

oday or exp mining techniques overview-vulnerability warning-the black bar safety net

A lot of times we on various 0day or exp with strong passion, indeed, the hand grip of such powerful weapons of destruction will make the target's combat becomes very smooth, but the problem is that not everyone can grasp the latest 0day, and to be clear that there is a lot we do not know the 0da...

Android Network Toolkit (ANTI) Review - Pentest at the push of a button

This Post reviews the newly released ANTI3 version. We've received a platinum account of ANTI3, before its official release, and this is our review: Recently White-Hat Hacker, Itzhak "Zuk" Avraham, the founder of zImperium unveiled its new app in Blackhat / Defcon19, introducing a new concept whe...

White House Launches Electric Industry Security Maturity Model Program

The White House has launched a new initiative designed to help companies in the electric power industry measure the maturity of their security programs against a new maturity model. The program is being run in tandem with the Department of Homeland Security and Department of Energy and is meant t...

International Conference on Cyber Security (ICCS) 2012 : Protecting the Cyber World

International Conference on Cyber Security ICCS 2012 : Protecting the Cyber World The FBI is teaming up with Fordham University for the International Conference on Cyber Security. It's an effort to identify emerging cyber threats and develop ways to mitigate those threats. The ZeuS Trojan has...

Facebook distributing White Hat Debit Card to Bug Bounty Winners

Facebook distributing White Hat Debit Card to Bug Bounty Winners Polish IT security portal Niebezpiecznik.pl, which recently published an image of a bug bounty card given to Szymon Gruszecki, a Polish security researcher and penetration tester. Neal Poole, a junior at Brown University, has report...

VIOCAM Sites SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: Remote Sql Injection In VIOCAM Sites Date: 27/12/2011 - 11:30 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: email protected Software Website: http://www.viocam.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform:...

VIOCAM Sites SQL Injection

Exploit Title: Remote Sql Injection In VIOCAM Sites Date: 27/12/2011 - 11:30 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: [email protected] Software Website: http://www.viocam.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: "Powered by VIOCAM" Vulnerable File :...

Majalty Group Sites SQL Injection

Exploit Title: Remote Sql Injection In Majalty Group Sites Date: 27/12/2011 - 11:00 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: [email protected] Software Website: http://www.majalty.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: "Programmmed By www.majalty.com"...

MyBB 1.6.5 Cross Site Scripting

Exploit Title: 0-day MyBB 1.6.5 XSS Vulnerability Date: 25/12/2011 - 18:30 Author: Cyber White Hats Nafsh Site: Cyberwh.org Mail: [email protected] Software Website: http://www.mybb.com/ Tested On: BackTrack 5 - Win7 Ultimate - Xp Platform: Php $ Dorks: inurl:"tags.php" intext:"MyBB 1.6.5" Vulnerabl...

CVE-2011-4695

Unspecified vulnerability in Microsoft Windows 7 SP1, when Java is installed, allows local users to bypass Internet Explorer sandbox restrictions and gain privileges via unknown vectors, as demonstrated by the White Phosphorus wpiesandboxescape module for Immunity CANVAS. NOTE: as of 20111207, th...

Persistent XSS Vulnerability in White House Website

Persistent XSS Vulnerability in White House Website Alexander Fuchs, A German Security Researcher Discover Persistent XSS Vulnerability in Official website of White House. He said "The petition system is vulnerable. Every Petition i start or join will execute my code. I could join all petitions a...

Persistent XSS Vulnerability in White House Website

Persistent XSS Vulnerability in White House Website Alexander Fuchs, A German Security Researcher Discover Persistent XSS Vulnerability in Official website of White House. He said "The petition system is vulnerable. Every Petition i start or join will execute my code. I could join all petitions a...

GFI Faxmaker - Fax Viewer v10.0[build 237] DoS (Poc)

Exploit for windows platform in category dos / poc !/usr/bin/python Title: GFI Faxmaker Fax Viewer v10.0build 237 DoS Poc. From: The eh?-Team || The Great White Fuzz we're not sure yet Found by: loneferret Home: http://www.kioptrix.com Manifacturer's link: http://www.gfi.com Date Found: Oct 28th...

CVE-2011-3148

Stack-based buffer overflow in the assembleline function in modules/pamenv/pamenv.c in Linux-PAM aka pam before 1.1.5 allows local users to cause a denial of service crash and possibly execute arbitrary code via a long string of white spaces at the beginning of the /.pamenvironment file...

XSS Vulnerability in Interactive YouTube API Demo Beta

XSS Vulnerability in Interactive YouTube API Demo Beta There is a Critical Cross site XSS Vulnerability in Interactive YouTube API Demo Beta, Discovered by various sources. One of the White Hat Hacker "Vansh Sharma " Inform us about this XSS Vulnerability with proof of concept. Proof Of Concept :...

Phishing Site hacked for teaching lesson to Scam Lovers

Phishing Site hacked for teaching lesson to Scam Lovers Researchers at the security firm GFI Labs found an email used to lure people to a phishing site called "canal-i. " The message attempts to scare unsuspecting readers by telling them they have exceeded the storage limit on their inbox, and...