Sun Java System Communication Express CSRF via HPP

Hello, As a continuation of my advisory about "Sun Java System Communications Express Multiple HTML Injection Vulnerabilities" that can be found here: http://www.securityfocus.com/bid/34083/info, I would like to introduce another potential security threat in the same product and based on my...

Trouble Ticket Express fid Parameter Arbitrary Remote Code Execution

The remote host is running Trouble Ticket Express, an open source web-based trouble ticket application written in Perl. At least one module included with the version of Trouble Ticket Express hosted on the remote web server fails to sanitize input to the 'fid' parameter of the 'ttx.cgi' script...

Sun Java System Communications Express Multiple HTML Injection Vuln

Exploit for unknown platform in category web applications ============================================================================== Sun Java System Communications Express Multiple HTML Injection Vulnerabilities ============================================================================== As...

Liquid XML Studio 2010 <= v8.061970 - OpenFile() Remote Heap Overflow

Exploit for unknown platform in category remote exploits ====================================================================================================== Liquid XML Studio 2010 !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / /...

Liquid XML Studio 2010 8.061970 - LtXmlComHelp8.dll OpenFile() Remote Overflow

Liquid XML Studio 2010 8.061970 - LtXmlComHelp8.dll OpenFile Remote Overflow !-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | |...

Liquid XML Studio 2010 < 8.061970 - 'LtXmlComHelp8.dll OpenFile()' Remote Overflow

!-- |------------------------------------------------------------------| | | | / / / / | | / / / / / / / \ / / / / \ | | / // // / / / / / // / / / / / // / // / / / / / / | | /// //,// // //,// // // | | | | http://www.corelan.be:8800 | | [email protected] | | |...

Trouble Ticket Express <= 3.01 Remote Code Execution

Exploit for unknown platform in category web applications ======================================================================== Trouble Ticket Express print get $url . '?cmd=file&fn=|' . $ . '|' ; print '$ '; 0day.today 2018-01-03...

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal

Trouble Ticket Express 3.01 - Remote Code Execution Directory Traversal Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE :...

Trouble Ticket Express 3.01 - Remote Code Execution / Directory Traversal

Exploit Title: Trouble Ticket Express Remote Code Execution/Directory Traversal Author: zombiefx Software Link: http://www.troubleticketexpress.com/download/ttx301.zip Version: v3.01,v3.0,v2.24,v2.21 Tested on: Linux CVE : Code: This is only possible if an attachment input is available. Directory...

CVE-2010-0962

The CVE-2010-0962 case concerns the FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule firmware 7.5. The root cause is that the FTP proxy does not restrict the IP address and port specified in a PORT command, allowing a client to trigger forwarding to an intranet FTP ser...

CVE-2010-0962: Undefined Security Weakness

The FTP proxy server in Apple AirPort Express, AirPort Extreme, and Time Capsule with firmware 7.5 does not restrict the IP address and port specified in a PORT command from a client, which allows remote attackers to leverage intranet FTP servers for arbitrary TCP forwarding via a crafted PORT...

CVE-2010-0557

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials...

Hardcoded credentials

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials...

CVE-2010-0557

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials...

CVE-2010-0557

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials...

CVE-2010-0557

CVE-2010-0557 affects IBM Cognos Express 9.0, where a bundled Tomcat Manager is reachable via hardcoded credentials, allowing attackers to obtain access and cause a denial of service. The root cause is the use of fixed credentials in the Tomcat Manager component, enabling unauthenticated interact...

CVE-2010-0557: Undefined Security Weakness

IBM Cognos Express 9.0 allows attackers to obtain unspecified access to the Tomcat Manager component, and cause a denial of service, by leveraging hardcoded credentials...

CVE-2010-0076

Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...

CVE-2010-0076

CVE-2010-0076 affects Oracle Database 3.2.1.00.10 (Application Express Application Builder). An unspecified vulnerability allows remote, authenticated attackers to impact confidentiality, integrity, and availability via unpublished vectors. CVSS 2.0 base score 6.0 (Network, Medium complexity, sin...

CVE-2010-0076: Undefined Security Weakness

Unspecified vulnerability in the Application Express Application Builder component in Oracle Database 3.2.1.00.10 allows remote authenticated users to affect confidentiality, integrity, and availability via unknown vectors...