PT-2010-5307

Name of the Vulnerable Software and Affected Versions HP Insight Management Agents versions prior to 8.6 Description The issue allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path. Recommendations For versions prior to 8.6,...

CVE-2010-4112: Exposure of Sensitive Information to an Unauthorized Actor

HP Insight Management Agents before 8.6 allows remote attackers to obtain sensitive information via an unspecified request that triggers disclosure of the full path...

Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Pandora FMS Authentication Bypass and Multiple Input Validation Vulnerabilities CVE IDs in this security advisory: 1 Authentication bypass - CVE-2010-4279 2 OS Command Injection - CVE-2010-4278 3 SQL Injection - CVE-2010-4280 4 Blind SQL Injection -...

Woltlab Burning Board Userlocator 2.5 - SQL Injection

Woltlab Burning Board Userlocator 2.5 - SQL Injection ----------------------------Information------------------------------------------------ +Name : Woltlab Burning Board Userlocator V2.5 Hack = SQL injection Exploit +Autor : Easy Laster +Date : 08.11.2010 +Script : Woltlab Burning Board...

Feds Raid Home of Former Raytheon Employee

Federal agents on Monday raided the Melrose, Massachusetts home of a missile systems expert who formerly worked at U.S. defense contractor Raytheon. Several boxes of items were taken by FBI and Immigration and Customs Enforcement agents from the home, which is owned by Richard M. Lloyd. According...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

CVE-2010-3389

CVE-2010-3389 affects the SAPDatabase and SAPInstance scripts in OCF Resource Agents (resource-agents) 1.0.3 used by Linux-HA. The vulnerability arises from placing a zero-length directory name in LD_LIBRARY_PATH, enabling a local attacker to load a Trojan horse shared library from the current wo...

CVE-2010-3389: Undefined Security Weakness

The 1 SAPDatabase and 2 SAPInstance scripts in OCF Resource Agents aka resource-agents or cluster-agents 1.0.3 in Linux-HA place a zero-length directory name in the LDLIBRARYPATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory...

PT-2010-4784

Name of the Vulnerable Software and Affected Versions OCF Resource Agents versions 1.0.3 Description The issue allows local users to gain privileges via a Trojan horse shared library in the current working directory. This is due to the SAPDatabase and SAPInstance scripts in OCF Resource Agents...

Directory traversal

Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 folder and 2 action parameters...

CVE-2010-3606

CVE-2010-3606 : In NetArt MEDIA Real Estate Portal 2.0, the file AGENTS/index.php is affected by directory traversal in the folder and action parameters, enabling remote attackers to include and execute arbitrary local files. The NVD description confirms the vulnerability and impact with a CVSS v...

CVE-2010-3607: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allows remote authenticated users to inject arbitrary web script or HTML via the id parameter...

CVE-2010-3606: Improper Limitation of a Pathname to a Restricted Directory

Multiple directory traversal vulnerabilities in AGENTS/index.php in NetArt MEDIA Real Estate Portal 2.0 allow remote emote attackers to include and execute arbitrary local files via directory traversal sequences in the 1 folder and 2 action parameters...

ruby -- UTF-7 encoding XSS vulnerability in WEBrick

The official ruby site reports: WEBrick have had a cross-site scripting vulnerability that allows an attacker to inject arbitrary script or HTML via a crafted URI. This does not affect user agents that strictly implement HTTP/1.1, however, some user agents do not...

BS Auto Classifieds - info.php SQL Injection

BS Auto Classifieds - info.php SQL Injection ----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Auto Classifieds +Price : $24.95 +Language :PHP +Discovered by Easy Laster...

BS Events Directory SQL Injection

----------------------------Information------------------------------------------------ +Autor : Easy Laster +ICQ : 11-051-551 +Date : 06.07.2010 +Script : BS Events Directory +Price : $24.95 +Language :PHP +Discovered by Easy Laster 4004-security-project.com +Security Group Undergroundagents and...

Netartmedia Real Estate Portal SQL Injection Vulnerability

Exploit for php platform in category web applications ========================================================== Netartmedia Real Estate Portal SQL Injection Vulnerability ==========================================================...

Bild Flirt System 2.0 SQL Injection

----------------------------Information------------------------------------------------ +Name : Bild Flirt System V2.0 index.php id SQL Injection +Autor : Easy Laster +Date : 07.03.2010 +Script : Bild Flirt System V2.0 +Download : ------------------ +Demo :http://www.demo1.de/demos/php0124/ +Pric...