VMware Update Manager Directory Traversal

DSECRG-11-042 VMware Update Manager - Directory Traversal Application: VMware Update Manager Versions Affected: vCenter Update Manager 4.1 prior to Update 2, vCenter Update Manager 4.0 prior to Update 4 Vendor URL: http://vmware.com Bugs: Directory Traversal File Read CVE: CVE-2011-4404 CVSS2: 7....

CVE-2010-5030

Cross-site scripting XSS vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action...

CVE-2010-5029

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

Sql injection

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

CVE-2010-5029

SQL injection vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to execute arbitrary SQL commands via the show parameter in a web action...

CVE-2010-5029

CVE-2010-5029 : A SQL injection in the Ecomat CMS 5.0 web action occurs via the show parameter in index.php. The root cause is an input sanitation error in the show parameter, allowing remote attackers to craft HTTP requests and execute arbitrary SQL commands against the application’s database. E...

CVE-2010-5030

Cross-site scripting XSS vulnerability in index.php in Ecomat CMS 5.0 allows remote attackers to inject arbitrary web script or HTML via the lang parameter in a web action...

HP Intelligent Management Center iNodeMngChecker.exe Buffer Overflow

Added: 10/14/2011 CVE: CVE-2011-1867 BID: 48527 OSVDB: 73597 Background HP Intelligent Management Center, also known as HP iNode Management Center, is a comprehensive management platform for delivering integrated, modular network management capabilities. The iNodeMngChecker.exe component listens,...

dotProject 2.1.5 - SQL Injection

dotProject 2.1.5 - SQL Injection Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability Google Dork: intitle:"dotproject" Date: 2011-12-09 Author: sherl0ck @AlligatorTeam Software Link: http://www.dotproject.net/ Version: 2.1.5 tested Tested on: Debian GNU/Linux 5.0 --------------- PoC...

dotProject 2.1.5 SQL Injection

Exploit Title: dotProject 2.1.5 SQL Injection Vulnerability Google Dork: intitle:"dotproject" Date: 2011-12-09 Author: sherl0ck @AlligatorTeam Software Link: http://www.dotproject.net/ Version: 2.1.5 tested Tested on: Debian GNU/Linux 5.0 --------------- PoC --------------- URL:...

[SECURITY] [DSA 2298-2] apache2 regression fix

------------------------------------------------------------------------- Debian Security Advisory DSA-2298-2 [email protected] http://www.debian.org/security/ Stefan Fritsch September 05, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2298-1] apache2 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2298-1 [email protected] http://www.debian.org/security/ Stefan Fritsch August 29, 2011 http://www.debian.org/security/faq -...

DSA-2298-1 apache2 - denial of service

Bulletin has no description...

Mozilla Firefox 5.0 Multiple Vulnerabilities

Binary data 801346.prm...

Fedora Update for libsoup FEDORA-2011-9763

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

SuSE9 Security Update : IBM Java5 JRE and SDK (YOU Patch Number 12810)

IBM Java 1.5.0 SR12 FP5 has been released fixing bugs and security issues. The following security issues were fixed : - Unspecified vulnerability in the Java Runtime Environment JRE component in Oracle Java SE 6 Update 25 and earlier, 5.0 Update 29 and earlier, and 1.4.231 and earlier allows remo...

Debian DSA-2284-1 : opensaml2 - implementation error

Juraj Somorovsky, Andreas Mayer, Meiko Jensen, Florian Kohlar, Marco Kampmann and Joerg Schwenk discovered that Shibboleth, a federated web single sign-on system is vulnerable to XML signature wrapping attacks. More details can be found in the Shibboleth advisory. %NASLMINLEVEL 70300 C Tenable...

JVN#86220950: Google Search Appliance vulnerable to cross-site scripting

Google Search Appliance from Google is a product that provides searching services for an intranet service or a website. Google Search Appliance contains a cross-site scripting vulnerability. Impact An arbitrary script may executed on the user's web browser. Solution Update the software Update to...

Mozilla Firefox 5.0 / Microsoft Internet Explorer 8.0 Denial Of Service

Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Exploit Title: Firefox 5.0 & Internet Explorer 8.0 - Access Violation Exception and Unknown Exception Google Dork: N/A Date: 7/12/2011 Author: r45c4l Software Link: www.firefox.com and IE is shiped with Windows...

Microsoft IIS FTP Server <= 7.0 Stack Exhaustion DoS [MS09-053]

Exploit for windows platform in category dos / poc Exploit Title: MS09-053 Microsoft IIS FTP Server Software Link: http://www.microsoft.com/ Version: 5.0 - 7.0 Tested on: unpatched version of windows xp & 2k3 This file is part of the Metasploit Framework and may be subject to redistribution and...