ICNA

Iranian Cyber News Agency

Vulnerability

Ashiyane DST Discover More Vulnerabilities

Iranian security researchers Ashiyane Digital Security Team have discover vulnerabilities: Medical Website Design SQL Injection Vulnerability -discover by team member Naji– Details is here Seawind Solution Bypass Admin Page Vulnerability -discover by team member Cloner-47– Details is here

Danger Security Team Discover SriRam CMS Bug

Iranian hacking group Danger Security Team have discover bug in SriRam CMS Bug is: SriRam Cms Bug Default Admin Password vulnerability is discover by team member Mehran_FLash Page show greetz to: Ahoora Danger , Nima Danger , wild.soldier, all Member…. See…

Ashiyane DST Discover WordPress Ibs-Mappro Vulnerability

Iranian security specialists Ashiyane Digital Security Team have discover vulnerability by member ACC3SS is: WordPress ibs-mappro Plugin Arbitrary File Download Vulnerability IBS Mappro is map creator editor view generator based on Google Maps API v3 is supports kml kmz gpx map files…

IDCT Discover Audio-Gallery-Suite Vulnerability

Iranian_Dark_Coders_Team -IDCT- have discover Audio-Gallery-Suite Local File Disclosure Vulnerability Details is here: http://iedb.ir/exploits-3446.html Vulnerability is discover by Black.Hack3r of IDCT who are: Black.Hack3r,M.R.S.CO,N3O,D$@d_M@n,HOt0N,KurD_HaCK3R SpTnx: Mr.Cicili,Sec4ever,MR.0x41,M4H4N,Security,@3is And All Members In wWw.IDC-TeaM.NeT Home: http://wWw.IDC-TeaM.NeT

Dr.3v1l Discover Local Stack Overflow PoC Vulnerability

Iranian hacker Dr.3v1l –Hossein Hezami- have discover FastStone MaxView 2.8 (.jpg) local Stack Overflow PoC Vulnerability This vulnerability is caused by stack buffer overflow when parsing display properties parameter. Malicious third party have trigger execution of arbitrary code within the context of…

IeDb Team Discover Multiple And SQLi CMS Bugs

Iranian Exploit Database Team –IeDb– have discover multiple CMS And SQLi -SQL Injection- vulnerabilities:   ENH Media Cms Sql Injection Vulnerability -Detail: http://iedb.ir/exploits-3273.html– Bagwar Softwares Cms Multiple Vulnerability -Detail: http://iedb.ir/exploits-3272.html– Productsurf Cms Sql Injection Vulnerability -Detail: http://iedb.ir/exploits-3271.html– WebdesignJiNi Cms Sql…

Iranian Security Researcher Find Huawei Wimax Backdoor

Iranian security researcher –Koorosh Ghorbani– have discover hidden backdoor in Huawei Wimax CPE Bm632w as use in many wifi WiMAX routers. Vulnerability is hidden user with UserLevel = 0 have full ATP Access on Telnet and SSH. IEDB link is…

FullSecurity Team Report WordPress Vulnerabilities

Iranian hacking and security team FullSecurity –www.fullsecurity.org– have discover 2 vulnerability in WordPress is here: WordPress 4.2.1 XSS/Code Execution Exploit Uses Cross Site Scripting -XSS- Vulnerabilities in WordPress Plugins have execute code with administrator privilege All version of WordPress vulnerable…

Meganet And Maxnet ADSL Routers Vulnerability And ZYXEL configuration editor/Web Server DoS

Iranian security researcher Koorosh Ghorbani of company 8thbit have discover vulnerability: Meganet And Maxnet Adsl Routers Unattended Admin access vulnerability ZYXEL remote configuration editor / Web Server DoS Full details of Meganet And Maxnet vulnerability here: http://iedb.ir/exploits-3019.html Full details of ZYXEL vulnerability here: http://iedb.ir/exploits-3022.html

IRaNHaCK Security Discover Et-Chat 3.0.6 XSS Vulnerability

Iranian hacking group Iranhack Security Team –Www.IranHack.Org– have discover XSS flaw in Et-Chat This vulnerability allows attacker to grab admin cookie and login with admin account In post on website www.fullsecurity.org here: http://fullsecurity.org/acc/01 Iranhack greetz from PacketStorm post here: Mr.XpR , V30Sharp ,…