CVE-2011-3700

Advanced Electron Forum AEF 1.0.8 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by languages/english/deletetopiclang.php...

CVE-2011-3700

Vulnerability: CVE-2011-3700 in Advanced Electron Forum (AEF) 1.0.8. Issue: Remote attackers can disclose sensitive information by making a direct request to a PHP file (languages/english/deletetopic_lang.php), causing an error message that reveals the installation path. Impact: Information discl...

Massachusetts Inaugurates New Cyber Security Center

Hundreds of business leaders and academics joined Massachusetts Governor Deval Patrick and Attorney General Martha Coakley to launch the state’s Advanced Cyber Security Center ACSC, one of the first of its kind in the nation. Speaking at the local headquarters of the MITRE Corporation, Patrick an...

CVE-2011-3321

CVE-2011-3321 affects Siemens WinCC flexible Runtime and SIMATIC WinCC (TIA Portal) Runtime Advanced Loader. The issue is a heap-based buffer overflow in the loader’s handling of inputs on 2308/TCP, enabling remote attackers to cause memory corruption and potentially execute arbitrary code or cau...

McAfee DeepSAFE - Anti-rootkit Security Solution

McAfee DeepSAFE - Anti-rootkit Security Solution McAfee previewed its DeepSAFE hardware-assisted security technology for proactively detecting and preventing stealthy advanced persistent threats APTs and malware. The technology, which was co-developed with Intel, sits below the OS, providing the...

McAfee DeepSAFE - Anti-rootkit Security Solution

McAfee DeepSAFE - Anti-rootkit Security Solution McAfee previewed its DeepSAFE hardware-assisted security technology for proactively detecting and preventing stealthy advanced persistent threats APTs and malware. The technology, which was co-developed with Intel, sits below the OS, providing the...

Advanced Image Hosting Cross Site Scripting Vulnerability

This host is running Advanced Image Hosting and is prone to cross site scripting vulnerability. OpenVAS Vulnerability Test $Id: gbadvancedimagehostingxssvuln.nasl 5793 2017-03-30 13:40:15Z cfi $ Advanced Image Hosting Cross Site Scripting Vulnerability Authors: Madhuri D Copyright: Copyright c 20...

Advanced Image Hosting Cross Site Scripting Vulnerability

Advanced Image Hosting is prone to a cross-site scripting XSS vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NATO Looks to Team With India To Fight Cybercrime

The North Atlantic Treaty Organization NATO is looking to enlist the help of India when it comes to contending with cyber threats from China, according to a recent report. According to a piece in the Economic Times, NATO hopes to strengthen its ties with the Southeast Asia republic, citing its...

IZotope Rx Advanced Local Buffer Overflow

Exploit for windows platform in category local exploits !/usr/bin/python Exploit Title:IZotope Rx Advanced Local Buffer Overflow Author: Angel Injection Thanks: r0073r // Sid3^effects // r4dc0re // CrosS || Inj3ct0r Team || "SeeMe" // XroGuE // gunslinger // indoushka // KnocKout // ZoRLu //...

Advanced Image Hosting Script 2.3 - 'report.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...

Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting

Advanced Image Hosting Script 2.3 - report.php Cross-Site Scripting source: https://www.securityfocus.com/bid/49457/info YABSoft Advanced Image Hosting Script is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this...

VulnCheck KEV: CVE-2007-4816

Multiple buffer overflows in the BaoFeng2 storm ActiveX control in Mps.dll allow remote attackers to have an unknown impact via a long 1 URL, 2 backImage, or 3 titleImage property value; 4 a long first argument to the advancedOpen method; a long argument to the 5 isDVDPath or 6...

Bit-7 Informatics SQL Injection Vulnerability

Exploit for php platform in category web applications Bit-7 Informatics SQL Injection Vulnerability ---------------------------------------------------- Author : Yassin Aboukir E-mail : email protected Web : Www.Yaboukir.Com ---------------------------------------------------- Title : Bit-7...

[security bulletin] HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager (SL-APM), Remote User Validation Failure

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02950841 Version: 1 HPSBHF02699 SSRT100592 rev.1 - HP ProLiant SL Advanced Power Manager SL-APM, Remote User Validation Failure NOTICE: The information in this Security Bulletin should be acted...

HP ProLiant SL Advanced Power Manager unauthorized access

No description provided...

CVE-2011-2405

The HP ProLiant SL Advanced Power Manager SL-APM with firmware before 1.20 does not properly validate users, which allows remote attackers to cause a denial of service via unspecified vectors...

#DefCon 19 : Android Network Toolkit for Penetration Testing and Hacking

DefCon 19 : Android Network Toolkit for Penetration Testing and Hacking Have an Android and wanna start pwning people, networks and machines like penetration testers do? Defcon 2011 is in full hacking swing, and Itzhak Avraham -- "Zuk" for short -- and his company Zimperium have unveiled the...

Incident Response and Recovery May Be the Best Defense

By B.K. DeLong The ever increasing list of breaches appearing on the Open Security Foundation’s DataLossDB Web site as well as companies being targeted by the AntiSec movement made up of groups including recently-raided Anonymous, AnonOps, TeaMp0isoN, and now-dormant LulzSec continues to show tha...

Advanced Threats Are Not All the APT

By B.K. DeLong We have heard variations on the argument that within the context of information security, the “advanced persistent threat” APT is not really all that advanced or new, that it is being made too big a deal of or FUD and that it is no more than marketing hype though more of an effort...