CVE-2009-1428

Multiple cross-site scripting XSS vulnerabilities in ccLgView.exe in the Symantec Log Viewer, as used in Symantec AntiVirus SAV before 10.1 MR8, Symantec Endpoint Protection SEP 11.0 before 11.0 MR1, Norton 360 1.0, and Norton Internet Security 2005 through 2008, allow remote attackers to inject...

Fortify 360 Web Interface Detection

The remote web server is running the web interface for Fortify 360, a web interface to analyze the results of source code audits. As this interface is likely to contain sensitive information, make sure only authorized personel can log into this site C Tenable Network Security, Inc...

世界之窗(The World)浏览器地址栏欺骗漏洞

世界之窗浏览器是一款小巧、快速、安全、功能强大的多窗口浏览器，它是完全免费，没有任何功能限制的绿色软件。世界之窗浏览器兼容微软IE浏览器，可运行于微软windows98/ME/2000/XP/Vista系列操作系统上，它使用IE浏览器相同的内核，因此网页显示效果可以与IE浏览器完全相同，推荐您同时安装IE6.0版或者更高的版本。世界之窗浏览器由凤凰工作室出品，它完全免费，没有任何功能限制，不捆绑任何第三方软件，可以干净卸载，请您放心使用。不同于常见的其它IE内核浏览器，世界之窗浏览器使用C++和Win32...

GEAR Software CD DVD Filter Driver Insecure Method Local Privilege Escalation

The version of GEAR Software's CD DVD Filter kernel driver GEARAspiWDM.sys on the remote host contains an insecure method that allows a local user to make an unlimited number of calls to 'IoAttachDevice' from user-land, thereby enabling him to exploit a local privilege escalation flaw in the...

Gear Software CD DVD Filter driver privilege escalation vulnerability

Overview The Gear Software CD DVD Filter driver contains a privilege escalation vulnerability, which can allow an attacker to gain SYSTEM privileges. Description Gear Software provides a driver called CD DVD Filter, which is provided by GEARAspiWDM.sys. This driver is used by multiple CD/DVD...

Preliminary validation of my thoughts--about 3 6 0 safe guard of self-protection-vulnerability warning-the black bar safety net

About 3 6 0 security guards（3 6 0 safe of self-preservation, I see a lot of advertising, but have not been to research. Today was evacuated carefully looked at because it is doubts it. The program in the kernel just hung up two Hook（KiSystemService, the KeUserModeCallback, then how is it possible...

Unfixed XSS vulnerability at www.se7ensins.com

Security researcher PaPPy, has submitted on 29/06/2008 a cross-site-scripting XSS vulnerability affecting www.se7ensins.com, which at the time of submission ranked 18125 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is currentl...

Unfixed XSS vulnerability at www.xbox-360.fr

Security researcher Zeryus, has submitted on 28/05/2008 a cross-site-scripting XSS vulnerability affecting www.xbox-360.fr, which at the time of submission ranked 72131 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/06/2008. It is currently...

Break 3 6 0 security guards monitoring-vulnerability warning-the black bar safety net

Article author: xxfish Information source: evil octal information security team www.eviloctal.com） I believe that many Trojan authors to write the Trojans are however 3 6 0 security guards monitoring,such as the current pcshare, etc,,are not listed. My friends taken before is K process, me too...

CVE-2008-0430

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter...

Sql injection

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter...

CVE-2008-0430

CVE-2008-0430 describes an SQL injection vulnerability in the form.php component of 360 Web Manager 3.0, where an attacker can craft requests to the IDFM parameter to execute arbitrary SQL commands. The issue is exploitable remotely and can impact data confidentiality, integrity, and availability...

CVE-2008-0430

SQL injection vulnerability in form.php in 360 Web Manager 3.0 allows remote attackers to execute arbitrary SQL commands via the IDFM parameter...

360-sql.txt

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

360 Web Manager 3.0 (IDFM) SQL Injection Vulnerability

No description provided by source. 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

360 Web Manager 3.0 - IDFM SQL Injection

360 Web Manager 3.0 - IDFM SQL Injection 360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

360 Web Manager 3.0 - 'IDFM' SQL Injection

360 Web Manager CMS Remote SQL Injection Vulnerability Author: Ded MustD!e Site: http://www.360webmanager.com/ Google Dork: inurl:"IDFM=" "form.php" Exploit: http://site.com/form.php?IDM=7&IDSM=20&IDFM=-1+union+select+1,concatws0x3a,name,password,3,4...

Ubuntu 5.04 / 5.10 / 6.06 LTS : awstats vulnerabilities (USN-360-1)

awstats did not fully sanitize input, which was passed directly to the user's browser, allowing for an XSS attack. If a user was tricked into following a specially crafted awstats URL, the user's authentication information could be exposed for the domain where awstats was hosted. CVE-2006-3681...

Design/Logic Flaw

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...

CVE-2007-1220

The Hypervisor in Microsoft Xbox 360 kernel 4532 and 4548 does not properly verify the parameters passed to the syscall dispatcher, which allows attackers with physical access to bypass code-signing requirements and execute arbitrary code...