DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

DOD Launches New Cyber Strategy Website

DOD Launches New Cyber Strategy Website The Department of Defense today launched a new website to highlight DoD's first unified strategy for cyberspace announced on July 14. The website is a tool to help explain and consolidate DoD's cybersecurity accomplishments and new way forward for military,...

Fedora Update for gnome-shell FEDORA-2011-8627

Check for the Version of gnome-shell OpenVAS Vulnerability Test Fedora Update for gnome-shell FEDORA-2011-8627 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

[SECURITY] Fedora 15 Update: gnome-shell-3.0.2-3.fc15

GNOME Shell provides core user interface functions for the GNOME 3 desktop, like switching to windows and launching applications. GNOME Shell takes advantage of the capabilities of modern graphics hardware and introduces innovative user interface concepts to provide a visually attractive and easy...

Oracle JD Edwards EnterpriseOne Cross Site Scripting

Advisory Name: Multiple Cross-Site Scripting XSS in Oracle JD Edwards EnterpriseOne Public Advisory Id: CVE-2011-0836 Internal Cybsec Advisory Id: 2011-0402-Multiple XSSs in Oracle JD Edwards EnterpriseOne Vulnerability Class: Reflected Cross-Site Scripting XSS Release Date: 04/20/2011 Affected...

Vulnerabilities in some SCADA server softwares

The following are almost all the vulnerabilities I found for a quick experiment some months ago in certain well known server-side SCADA softwares still vulnerable in this moment. In case someone doesn't know SCADA like me before the tests: it's just one or more softwares usually a core, a graphic...

openEngine 2.0 Cross Site Scripting / Local File Inclusion

SecPod Technologies www.secpod.com Title : openEngine Local File Inclusion and XSS Vulnerabilities Vendor : http://www.openengine.de Advisory : http://secpod.org/blog/?p=152 http://secpod.org/advisories/SECPODOpenengineLFIXSSVuln.txt Version : openEngine 2.0 100226; other versions may also be...

Altech Technology <= Remote SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================================= Altech Technology Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 1 0 + Site : Inj3ct0r.com 0 1 + Support e-mail : submitatinj3ct0r.com 1 0 0 1 1 0 I'm...

BarCodeWiz Barcode 3.29 Buffer Overflow

BarCodeWiz Barcode ActiveX Control 3.29 BoF SEH Bug found: 24th July 2010 Author: loneferret Software: http://www.barcodewiz.com/ Nods to exploit-db.com Vulnerable file BarCodeWiz.dll LoadProperties method Tested on: Windows XP Professional SP3 with Internet Explorer 6 Needs adjustment for Intern...

dit.cms 1.3 Local File Inclusion

dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable code is everywhere - PoC's...

dit.cms 1.3 - 'path/sitemap/relPath' Local File Inclusion

dit.cms 1.3 path/sitemap/relPath Local File Inclusion Vulnerabilities + Discovered By SirGod + http://insecurity-ro.org + http://h4cky0u.org + Homepage : http://ditcms.org/ + Local File Inclusion - Note : registerglobals = on - Vulnerable code is everywhere - PoC's...

Month Of Twitter Bugs - yfrog XSS

Tuesday, July 7, 2009 MoTB 07: Reflected XSS vulns in yfrog What is yfrog "yfrog is a service run by ImageShack that lets you share your photos on and videos on Twitter." yfrog FAQ page Twitter affect yfrog can be used to send tweets by uploading new photos, or posting comments on existing photos...

webshell431-xssxsrf.txt

======================================================================= . .. | | / / | | | | / \ / / /\ / / \ | | | / / \ /\ \| | / // / /\ \ / / / // http://www.lowsec.org ========================================================================...

major_rls54.txt

MajorSecurity Advisory 54xt:Commerce - Cross Site Scripting and Session Fixation Issues Details ======= Product: xt:Commerce Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.xtcommerce-shop.com/ Vendor-Status: informed Advisory-Status: published Credits ============ Discovered...

Sql injection

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

Multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS allow remote attackers to execute arbitrary SQL commands via the 1 nr parameter to a frontend/news.php, the 2 id parameter to b events3.php and c videos2.php in frontend/, the 3 y parameter to d frontend/events2.php, and th...

CVE-2008-2530

CVE-2008-2530 concerns multiple SQL injection vulnerabilities in Concepts & Solutions QuickUpCMS. The issues allow remote attackers to inject SQL via specific parameters: nr to frontend/news.php; id to frontend/events3.php and frontend/videos2.php; y to frontend/events2.php; and ser to frontend/f...

Insanely simple blog - Multiple vulnerabilities

Insanely simple blog version 0.5 and below http://sourceforge.net/projects/insanelysimple2 ISB contains multple vulnerabilities including both XSS, and SQL injection. First off, the search action fails to strip user content for html allowing a user to input tags. Next, anonymous blog entries can...

isb05-sql.txt

Insanely simple blog version 0.5 and below http://sourceforge.net/projects/insanelysimple2 ISB contains multple vulnerabilities including both XSS, and SQL injection. First off, the search action fails to strip user content for html allowing a user to input tags. Next, anonymous blog entries can...