Asset Manager 1.0 - Arbitrary File Upload

Asset Manager 1.0 - Arbitrary File Upload Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel Software Link: http://www.sourcecodeonline.com/details/assetmanagercmsandfileeditor.html Price : $35.00 Founded By NetOwn3r & Shichemt Alen Hi All...

Asset Manager v1.0 Shell Upload Vulnerability

Exploit for php platform in category web applications ============================================= Asset Manager v1.0 Shell Upload Vulnerability ============================================= Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel...

Asset Manager 1.0 - Arbitrary File Upload

Title: Asset Manager Shell Upload Vulnerability Version: 1.0 Author: Shichemt Alen & NeTOwn3r Meher Assel Software Link: http://www.sourcecodeonline.com/details/assetmanagercmsandfileeditor.html Price : $35.00 Founded By NetOwn3r & Shichemt Alen Hi All Muslims Brothers & All Hackers Exploit :...

SEC: BroCo Investments Hijacked Accounts

A U.S. federal judge has agreed to freeze the assets of a company being accused of manipulating the stocks of 38 companies listed on the Nasdaq and New York Stock Exchange via compromised trading accounts. Read the full article. CNet...

SNMP Query Airport Version

It is possible to obtain the version and model type of the remote Airport device by sending SNMP requests to the remote host. An attacker may use this information to gain more knowledge about the target network. TRUSTED...

OCS Inventory NG Server Administration Console Detection

The remote web server is hosting the OCS Inventory NG Server Administration console, a PHP application for managing computing assets. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include"compat.inc"; if description scriptid44392; scriptversion"1.11";...

Novell ZENworks Asset Management SQL injection

SQL injection via docfiledownload parameter...

Novell ZENworks Asset Management docfiledownload Remote SQL Injection Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Novell ZENworks Asset Management. Authentication is not required to exploit this vulnerability. The specific flaw exists due to insufficient sanity checks on the documentID parameter to the...

Novell ZENworks Asset Management Msg.dll Buffer Overflow (CVE-2006-6299)

ZENworks Asset Management is an IT asset management suite developed by Novell. The product integrates asset inventory, software usage and license reconciliation functionality. The ZENworks Asset Management suite is based on a client/server architecture. A set of management servers collects data o...

Symantec Discovery XFERWAN Service Buffer Overflow (CVE-2007-1173)

Symantec Discovery is a network asset management and configuration suite. This product is deployed in enterprise network to collect information about network computers and devices for management purpose. The product employs numerous communication protocols to access network nodes. One of the...

Sguil/PADS - Remote Server Crash

Sguil/PADS Denial of Service exploit by Ataraxia Benjamin Rose Public announcement made 7/15/09. Please visit http://allmybase.com/ my blog for more up-to-date information, and a quick patch. More in-depth article available at: http://allmybase.com/?p=72 This more in-depth article does include...

Sguil/PADS SQL Injection / Server Crash Vulnerability

Exploit for multiple platform in category dos / poc ===================================================== Sguil/PADS SQL Injection / Server Crash Vulnerability ===================================================== Sguil/PADS SQL injection and server crash exploit by Ataraxia Benjamin Rose Public...

CVE-2009-1261

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...

CVE-2009-1261

Multiple cross-site scripting XSS vulnerabilities in Web Help Desk 9.1.22 evaluation version allow remote attackers to inject arbitrary web script or HTML via the 1 Report Name, 2 Asset No., and 3 Full Name fields in a Models action. NOTE: the provenance of this information is unknown; the detail...

CVE-2008-6240

Cross-site scripting XSS vulnerability in data/views/index.html in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to inject arbitrary web script or HTML via the catalogid parameter...

CVE-2008-6239

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in OpenEdit Digital Asset Management DAM before 5.2014 allows remote attackers to perform unspecified actions as arbitrary users via unknown vectors...

CVE-2008-6240

OpenEdit Digital Asset Management (DAM) contains a Cross-site Scripting (XSS) vulnerability in data/views/index.html, exploitable via the catalogid parameter. Affected software is OpenEdit DAM prior to version 5.2014. The vulnerability allows remote attackers to inject arbitrary web script or HTM...

CVE-2008-6239

CVE-2008-6239 describes a CSRF vulnerability in OpenEdit Digital Asset Management (DAM) prior to 5.2014, allowing remote attackers to perform unspecified actions as arbitrary users via unknown vectors. The NVD entry lists a base score of 6.8 (Medium) with Network attack vector and no authenticati...