Joomla Xmap SQL Injection
The Joomla Xmap component suffers from a remote SQL injection vulnerability.
View ArticleEasy Page Cross Site Scripting
Easy Page suffers from a cross site scripting vulnerability.
View ArticleEspinas CMS SQL Injection
Espinas CMS suffers from a remote SQL injection vulnerability.
View ArticleZiggurat CMS File Upload / Download / Cross Site Scripting
Ziggurat CMS suffers from arbitrary file upload, arbitrary file download and cross site scripting vulnerabilities.
View ArticleWeb Negar Directory Traversal
Web Negar suffers from a directory traversal vulnerability.
View ArticlePargoon Denial Of Service
Pargoon suffers from a remote denial of service vulnerability.
View ArticleSmart Douran CMS File Disclosure
Smart Douran CMS suffers from a remote file disclosure vulnerability.
View ArticleIntroduction To Cross Site Request Forgery
Whitepaper called Introduction to Cross Site Request Forgery. Written in Persian.
View ArticleNginx 0.8.35 Source Code Disclosure
Nginx version 0.8.35 suffers from a source code disclosure vulnerability.
View ArticleParallels System Automation (PSA) Local File Inclusion
Parallels System Automation (PSA) suffers from a local file inclusion vulnerability.
View ArticleCherokee Web Server 0.5.3 Directory Traversal / Source Disclosure
Cherokee Web Server version 0.5.3 suffers from directory traversal and source disclosure vulnerabilities.
View ArticleKF Web Server 3.2.0 Remote Contents Change
KF Web Server version 3.2.0 suffers from an unauthenticated remote contents change vulnerability.
View ArticleAvant Browser 11.7 Build 45 Clickjack
Avant Browser version 11.7 build 45 clickjacking proof of concept exploit.
View ArticleOpera Browser 10.60 Clickjack
Opera Browser version 10.60 clickjacking proof of concept exploit.
View ArticleSafari Browser 4.0.2 Clickjack
Safari Browser version 4.0.2 clickjacking proof of concept exploit.
View ArticleNetscape Browser 9.0.0.6 Clickjack
Netscape Browser version 9.0.0.6 clickjacking proof of concept exploit.
View ArticleFirefox 3.6.7 / SeaMonkey 2.0.6 Clickjacking
Firefox version 3.6.7 / SeaMonkey version 2.0.6 clickjacking proof of concept exploits.
View ArticleSigma Portal Denial Of Service
Sigma Portal suffers from a denial of service vulnerability.
View ArticleMicrosoft IIS 6 Parsing Vulnerability
The author of this file claims that naming a directory with a .asp extension on IIS 6 will causing all files inside of it to be executed as such.
View ArticleIntroduction To Man-In-The-Middle Attacks
Whitepaper called Introduction to Man-in-the-middle Attacks. Written in Persian.
View ArticlePath Traversal - Bypass Methods
Short whitepaper discussing path traversal and bypass methods of exploitation.
View ArticleAnatomy Of A NULL Session Attack
Whitepaper discussing the anatomy of a null session attack, how it works, and how to prevent it from happening to you. Written in Persian.
View ArticleIntroduction To Social Engineering
This whitepaper is a brief introduction to social engineering. Written in Persian.
View Article
