EMC Data Protection Advisor information leakage

Cleartext passwords are stored in user readable files...

ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-021: EMC Data Protection Advisor sensitive information disclosure vulnerability. EMC Identifier: ESA-2011-021 CVE Identifier: CVE-2011-1742 Severity Rating: CVSS v2 Base Score: 7.2 AV:L/AC:L/Au:N/C:C/I:C/A:C Affected products: EMC SW: EMC Dat...

CVE-2011-1742: Undefined Security Weakness

EMC Data Protection Advisor before 5.8.1 places cleartext account credentials in the DPA configuration file in unspecified circumstances, which might allow local users to obtain sensitive information by reading this file...

EMC Data Protection Advisor Collector for Solaris SPARC不安全文件权限漏洞

Bugtraq ID: 47036 CVE ID：CVE-2011-1420 EMC Data Protection Advisor Collector是一款数据备份报告工具。 Solaris SPARC平台下的EMC Data Protection Advisor Collector不正确设置文件权限，本地攻击者可以利用漏洞以目标用户安全上下文执行任意代码，可导致特权提升。 EMC Data Protection Advisor Collector for Solaris SPARC 5.7.1 EMC Data Protection Advisor Collector for...

Code injection

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

CVE-2011-1420

EMC Data Protection Advisor Collector for Solaris SPARC (version 5.7 and 5.7.1) contains incorrect/weak file permissions that allow a local attacker to execute code with elevated privileges. Affected builds 5.7 and 5.7.1 require Patch/DPA-8873; EMC notes that Build 5833 for both 5.7 and 5.7.1 res...

PT-2011-3116

Name of the Vulnerable Software and Affected Versions EMC Data Protection Advisor Collector versions 5.7 through 5.7.1 Description The issue concerns weak permissions for unspecified files, allowing local users to gain privileges via unknown vectors. Recommendations For versions 5.7 through 5.7.1...

CVE-2011-1420: Undefined Security Weakness

EMC Data Protection Advisor Collector 5.7 and 5.7.1 on Solaris SPARC platforms uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

EMC Data Protection Advisor Collector weak security permissions

Weak permissions for executable files...

Code injection

Multiple unspecified vulnerabilities in the CA 1 PSFormX and 2 WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors...

CVE-2010-2193

Multiple unspecified vulnerabilities in the CA 1 PSFormX and 2 WebScan ActiveX controls, as distributed on the CA Global Advisor web site until May 2009, allow remote attackers to execute arbitrary code via unknown vectors...

Windows 7 Compatibility Spam Hides Trojan

A deceptive “help” message invites recipients to check their PCs’ compatibility with Windows 7 by downloading and running an altered version of the Windows 7 Upgrade Advisor concealing a Trojan. Read the full article. Help Net Security...

Webmoney Advisor ActiveX Remote DoS Exploit

Exploit for windows platform in category dos / poc =========================================== Webmoney Advisor ActiveX Remote DoS Exploit =========================================== Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As...

Webmoney Advisor - ActiveX Remote Denial of Service

Webmoney Advisor - ActiveX Remote Denial of Service Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Webmoney Advisor - ActiveX Remote Denial of Service

Pwnage Page targetFile = "C:\Program Files\WebMoney Advisor\wmadvisor.dll" prototype = "Sub Redirect ByVal url As String " memberName = "Redirect" progid = "TOOLBAR3Lib.ToolbarObj" argCount = 1 arg1=String1337, "A" target.Redirect arg1...

Internet Explorer Content Advisor Memory Corruption (MS05-020; CVE-2005-0555)

Microsoft Internet Explorer includes a feature called Content Advisor. This feature allows users to rate the appropriateness of Web content and to control which web sites can be visited by a user. This feature can help to create a more secure environment that protects users from unsuitable conten...

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007

Piwigo SQL Injection Vulnerability - Security Advisory - SOS-09-007 Release Date. 17-Aug-2009 Last Update. - Vendor Notification Date. 15-Jun-2009 Product. Piwigo Platform. Independent Affected versions. 2.0.0 verified, possibly others Severity Rating. Medium Impact. Manipulation of data Attack...

CVE-2008-3451

PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile...

CVE-2008-3451: Exposure of Sensitive Information to an Unauthorized Actor

PhpWebGallery 1.7.0 and 1.7.1 allows remote authenticated users with advisor privileges to obtain the real e-mail addresses of other users by editing the user's profile...

windowslive-remote.txt

Windows live Messenger malformed file overflow remote exploitation. windows ole32.dll ms07-024 windows GDI MS07-046 vendor url: http://www.microsoft.com/ , http://get.live.com/messenger/overview Advisore: http://lostmon.blogspot.com/2007/09/ windows-live-messenger-jpg-overflow.html Vendor...