Xilisoft Video Converter Ultimate DLL Hijacking

Overview of Xilisoft Video Converter Ultimate

Xilisoft Video Converter Ultimate is a professional video converter which has a wide range of video and audio formats. I personally love this software since it uses GPU acceleration in converting videos.

It is on the high side of premium video converters for home use. It automatic profiles enhanced for just any device or format, graphics card detection and acceleration.
-CNET

(more…)

XSS in CloudFlare

#1 XSS

These are some of my duplicate vulnerabilities found. I just thought of sharing with you. Recently I found two POST XSS in CloudFlare and unfortunately I was not the first to report.
I found the first issue in the “Confirm Key Generator” dialog box.

View post on imgur.com

Let’s have a closer look at the URL.

/ajax/model-dialog.htm

It seems like an XMLHttpRequest object is used in the server side it accept our POST request. (more…)

Rewarded by WordPress

For reporting a security misconfiguration in the server I got rewarded 🙂 thank you very much 🙂

https://scontent-b-sin.xx.fbcdn.net/hphotos-prn2/t1.0-9/10250107_10203922624332601_954716133927497901_n.jpg

https://fbcdn-sphotos-f-a.akamaihd.net/hphotos-ak-frc3/t1.0-9/10307239_10203922624292600_8569974772412153834_n.jpg

My First White Paper

https://fbcdn-sphotos-c-a.akamaihd.net/hphotos-ak-frc1/t1.0-9/q74/s720x720/10255016_10203916964751115_7123992607935286279_n.jpg

Today I am releasing my first white paper based on the SQL injection in Insert, Update and Delete statements. Special thanks to Ryan Dewhurst for the review. So here you go 🙂

http://packetstormsecurity.com/files/126527/SQL-Injection-In-Insert-Update-And-Delete.html
http://www.exploit-db.com/wp-content/themes/exploit/docs/33253.pdf