CVE-2012-3796

Pro-face WinGP PC Runtime 3.1.00 and earlier and Pro-face Pro-Server EX 1.30.000 and earlier are affected by CVE-2012-3796, which allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a specific opcode. The issue is described as an information...

CVE-2012-3795

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

CVE-2012-3793

CVE-2012-3793 affects Pro-face WinGP PC Runtime (3.1.00 and earlier) and Pro-face Pro-Server EX (1.30.000 and earlier). The vulnerability stems from an integer overflow that can cause a buffer overflow when processing a crafted packet with a specific opcode, leading to a denial-of-service (daemon...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A "Find Node" invalid memory access B memset integer overflow C...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A...

Fedora Update for drupal7-ctools FEDORA-2012-5094

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2012-5094 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Pro-Face Pro-Server EX Vulnerabilities

Overview This advisory is a follow-up to the alert titled “ICS-ALERT-12-137-01 Pro-face Pro-Server EX Vulnerabilities,” that was published May 16, 2012, on the ICS-CERT Web page. Independent researcher Luigi Auriemma identified multiple vulnerabilities in the Pro-face Pro-Server EX application an...

F*EX 20111129-2 Cross Site Scripting Vulnerability

------------------------------------------------------------------------ FEX 20111129-2 Cross Site Scripting Vulnerability ------------------------------------------------------------------------ title.............: FEX 20111129-2 Cross Site Scripting Vulnerabilities author............: muuratsal...

F*EX 20111129-2 Cross Site Scripting

------------------------------------------------------------------------ FEX 20111129-2 Cross Site Scripting Vulnerability ------------------------------------------------------------------------ title.............: FEX 20111129-2 Cross Site Scripting Vulnerabilities author............: muuratsal...

F*EX 2010020820111129-2 - Multiple Cross-Site Scripting Vulnerabilities

FEX 2010020820111129-2 - Multiple Cross-Site Scripting Vulnerabilities source: https://www.securityfocus.com/bid/52085/info FEX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker t...

F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52085/info FEX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-base...

F*EX 20100208 Cross Site Scripting

------------------------------------------------------------------------ FEX = 20100208 Cross Site Scripting Vulnerabilities ------------------------------------------------------------------------ title.............: FEX = 20100208 Cross Site Scripting Vulnerabilities author............:...

Charlie Miller now working with DoD for Cyber Security

Charlie Miller is a former hacker who has become an information security consultant now working with Department of Defense DoD for helping out with cyber security. He was invited to the conference on cyber conflict held by the NATO Cooperative Cyber Defense Center of Excellence in Tallinn, where ...

Tech-ex kesion 6. x - 7.06 continue to use-vulnerability warning-the black bar safety net

Today with a black wide engage in a edu, it is a sad reminder of the webmaster, some time ago was installed the tech-ex 6. 5, and now directly get your ass kicked. that... t00ls a large cattle provides the use of the method, I burst the md5, but understand not out···the mssql version of section...

Atlanta IT Worker Hacked Ex-Employers Database

Atlanta IT Worker Hacked Ex-Employers Database An Atlanta man could receive up to five years in prison after pleading guilty Wednesday to hacking into a former employer's patient database, stealing information and then wiping the database clean. Federal prosecutors said Eric McNeal, 37, used the...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...

Tech-ex CMS website system 0day releases-vulnerability warning-the black bar safety net

Keywords: Powered By KesionCMS V5. 5 inurl:User/UserReg. asp Step one: access to/user/userreg. asp registered user Step two: access/KSeditor/selectupfiles. asp, check the auto-naming options, upload named as X. asp;X. jpg files Step three: access the Upload file path xm. asp;xm.jpg...

Authentication flaw

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

CVE-2011-1409

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

CVE-2011-1409

CVE-2011-1409 affects Frams’s Fast File EXchange (F*EX, fex). The vulnerability allows an unauthenticated remote attacker to bypass authentication and upload arbitrary files via a request that omits an authentication ID, potentially impacting confidentiality and integrity. The issue is documented...