Collaborate Disseminate
Developers of phpMyAdmin, one of the most popular and widely used MySQL database management systems, today released an updated version 4.8.4 of its software to patch several important vulnerabilities that could eventually allow remote attackers to take… Continue reading phpMyAdmin Releases Critical Software Update — Patch Your Sites Now!
Vulnerabilities Summary Cisco Prime Infrastructure (CPI) contains two vulnerabilities that when exploited allow an unauthenticated attacker to achieve root privileges and execute code remotely. The first vulnerability is a file upload vulnerability tha… Continue reading SSD Advisory – Cisco Prime Infrastructure File Inclusion and Remote Command Execution to Privileges Escalation
Vulnerabilities Summary Authenticated users can exploit a file inclusion vulnerability in phpMyAdmin which can then be combined with another vulnerability, to perform Remote Code Execution. In addition, authnticated attackers can view files and execute… Continue reading SSD Advisory – phpMyAdmin File Inclusion and Remote Code Execution
Kadimus is an LFI scanner and exploitation tool for Local File Inclusion vulnerability detection and intrusion. Installation [crayon-58d574f29c045430221660/] Then you can run the configure file: [crayon-58d574f29c058368581278/] Then: [crayon-58d574f29c… Continue reading Kadimus – LFI Scanner & Exploitation Tool
Adult Friend Finder, a casual dating website with the tagline “hookup, find sex or meet someone hot now,” has suffered another massive data breach, but this time it is much worse than the last year.
Over 300 Million AdultFriendFinder accounts have rep… Continue reading Over 300 Million AdultFriendFinder Accounts Exposed in Massive Data Breach
One hacker is claiming to have stolen a database of 73 million users: a whole lot of details for a whole lot of people who’d rather keep that bedroom door closed. Continue reading Millions of AdultFriendFinder user accounts hacked – again
SQL injection and XSS attacks should have disappeared long ago. They didn’t. Continue reading The web attacks that refuse to die