Multiple DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! This is the last advisory in which I'll warn you about new multiple security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. This time I will tell you about Security section of control panel, which is full of vulnerabilities. These are Denial of Service,...

New DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about new security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Denial of Service, Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and thi...

New DoS, CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about new security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Denial of Service, Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and thi...

New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about new security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. In April I've already drew attention of Ukrtelecom's representative and this modem was bough a...

New CSRF and XSS vulnerabilities in ADSL modem Callisto 821+

Hello 3APA3A! I want to warn you about security vulnerabilities in ADSL modem Callisto 821+ SI2000 Callisto821+ Router. These are Cross-Site Request Forgery and Cross-Site Scripting vulnerabilities. Which I've found in your modem. In April I've already drew attention of Ukrtelecom's representativ...

E-Manage MySchool 7.02 SQL Injection

Exploit Title: SQL Injection MySchool Version 7.02 Google Dork: "MySchool Version 7.02" Date: 05-21-2011 Software Link: http://em.com.eg/ Version: Version 7.02 Author: az7rb Tested on : winxp sp3 Ar end bt5 Homepage : www.p0c.cc Greetz : p0c Team & Dr.NaNo & All My Msn Messenger Friends wWw.p0c.c...

E-Manage MySchool 7.02 SQL Injection Vulnerability

Exploit for php platform in category web applications Exploit Title: SQL Injection MySchool Version 7.02 Google Dork: "MySchool Version 7.02" Date: 05-21-2011 Software Link: http://em.com.eg/ Version: Version 7.02 Author: az7rb Tested on : winxp sp3 Ar end bt5 Homepage : www.p0c.cc Greetz : p0c...

Adobe Boosts Privacy Protections with Flash Player Update

Adobe released an update to its Flash Player that it says will make it easier for users to manage their online privacy. The company released Flash Player Version 10.3 on Thursday. The update to the common rich media player includes support for a new cross platform application program interface AP...

Directory Traversal Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Complete-Modules Package)

============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Directory Traversal Vulnerability...

LFI Vulnerability in 1024cms Admin Control Panel v1.1.0 Beta (Master-cPanel Package)

========================================================================================================== 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Local File Include Vulnerability...

1024cms ACP 1.1.0 Complete Modules Local File Inclusion

============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Local File Include Vulnerability...

1024cms ACP 1.1.0 Master-cPanel Cross Site Scripting

============================================================================================================ 1024cms Admin Control Panel v1.1.0 Beta Master-cPanel Package - Cross-Site Scripting Vulnerability...

1024cms ACP 1.1.0 Complete Modules Directory Traversal

============================================================================================================= 1024cms Admin Control Panel v1.1.0 Beta Complete-Modules Package - Directory Traversal Vulnerability...

Debian Security Advisory DSA 2179-1 (dtc)

The remote host is missing an update to dtc announced via advisory DSA 2179-1. OpenVAS Vulnerability Test $Id: deb21791.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2179-1 dtc Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

Debian DSA-2179-1 : dtc - SQL injection

Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services. - CVE-2011-0434 The bwpermoth.php graph contains a SQL injection vulnerability. - CVE-2011-0435 Insufficient checks in bwpermonth.php can lead to bandwidth usage information...

[SECURITY] [DSA 2179-1] dtc security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

[SECURITY] [DSA 2179-1] dtc security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2179-1 [email protected] http://www.debian.org/security/ Florian Weimer March 02, 2011 http://www.debian.org/security/faq -...

DSA-2179-1 dtc - SQL injection

Bulletin has no description...

dtc -- multiple vulnerabilities

Ansgar Burchardt reports: Ansgar Burchardt discovered several vulnerabilities in DTC, a web control panel for admin and accounting hosting services: The bwpermoth.php graph contains an SQL injection vulnerability; insufficient checks in bwpermonth.php can lead to bandwidth usage information...

AIOCP 1.4.001 SQL Injection

------------------------------------------------------------------------ Software................AIOCP All In One Control Panel 1.4.001 Vulnerability...........SQL Injection Download................http://www.tecnick.com/public/code/cpdpage.php?aiocpdp=aiocp Release Date............1/31/2011 Test...