Critical SQL Injection in Myanmar Calendar
PlanetCreator‘s Security Team Researcher Infofreakzzz reported another Critical SQL injection (vulnerability) on Myanmar Calendar URL : http://www.myanmarcalendar.org/ SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in [...]
#RefRef – Denial of Service ( DDoS ) Tool Developed by Anonymous
Anonymous is developing a new DDoS tool which is said to exploit SQL vulnerabilities to support the group’s future campaigns. So far, what they have is something that is platform neutral, leveraging JavaScript and vulnerabilities within SQL to create a devastating impact on the targeted website. Previously, Low Orbit Ion Canon (LOIC) was the go [...]
Critical SQL Injection in All About Myanmar
PlanetCreator reported another Critical SQL injection (vulnerability) on All About Myanmar (Beta) URL : http://www.allaboutmyanmar.com/ SQL injection is a code injection technique that exploits a security vulnerability occurring in the database layer of an application. The vulnerability is present when user input is either incorrectly filtered for string literal escape characters embedded in SQL statements [...]
Clickjacking technique called “content extraction”
Cookiejacking is a UI redressing attack that allows an attacker to hijack his victim’s cookies without any XSS. Clickjacking attacks have been widely adopted by attackers worldwide on popular websites (eg Facebook) in order to perform some drive to download attacks,click forging, message sending and so on. In previous works on the same matter, new [...]
SpoofTooph 0.4 Release
Spooftooph is designed to automate spoofing or cloning Bluetooth device Name, Class, and Address. Cloning this information effectively allows Bluetooth device to hide in plain site. Bluetooth scanning software will only list one of the devices if more than one device in range shares the same device information when the devices are in Discoverable Mode [...]
Submit News
Exploits Database by Offensive Security
- WordPress TimThumb Exploitation August 12, 2011
- vbSEO – From XSS to Reverse PHP Shell January 31, 2011
- Owned and Exposed December 25, 2010
- Google Hacking Database Updates December 20, 2010
- Bypassing UAC with User Privilege under Windows Vista/7 – Mirror November 26, 2010
