PT-2014-6500

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.0 Description The issue allows remote attackers to obtain access to the database and execute arbitrary code via unspecified vectors, related to HyperSQL. This is due to the use of static...

SolarWinds Log and Event Manager Static Credential Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of SolarWinds Log and Event Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within the usage of HyperSQL. The issue lies in the usage of static...

PT-2013-4070

Name of the Vulnerable Software and Affected Versions IBM QRadar Security Information and Event Manager SIEM versions prior to 7.1 MR2 Patch 1 Description The issue allows remote authenticated users to execute operating-system commands. Recommendations For versions prior to 7.1 MR2 Patch 1, updat...

CVE-2013-2970: Undefined Security Weakness

Unspecified vulnerability in IBM QRadar Security Information and Event Manager SIEM 7.x before 7.1 MR2 Patch 1 allows remote authenticated users to execute operating-system commands via unknown vectors...

SolarWinds Log & Event Manager for Log Management and SEIM Security

SolarWinds® Log & Event Manager LEM, a full-function Security & Information Event Management SIEM solution, delivers powerful log management capabilities in a highly affordable, easy-to-deploy virtual appliance. SolarWinds LEM combines real-time log analysis, event correlation, and a groundbreaki...

Multiple vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third party TYPO3 extensions: Event Manager eventmanagement, Game Article DB gamearticledb, Simple career mlcareer, Surprise Calendar mlsurprisecalendar, Search Api Ajax Google searchajaxgoogle, Download Manager sprdownloadmanager Release...

WingFTP Server v3.2.4 CSRF Vulnerability

Exploit for unknown platform in category web applications ======================================== WingFTP Server v3.2.4 CSRF Vulnerability ======================================== Application: WingFTP Server 3.2.4 maybe earlier versions too Link: http://www.wftpserver.com/ Vulnerability: CSRF...

Joomla! Component Event Manager - Blind SQL Injection

Joomla! Component Event Manager - Blind SQL Injection Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : +...

Joomla Event Manager Blind SQL Injection

Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alýnabilir. Demo Vuln. : + »...

Joomla Component Event Manager Blind SQL Injection Vulnerability

No description provided by source. ------------------- header data start ------------------- Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir...

Joomla Component Event Manager Blind SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================ Joomla Component Event Manager Blind SQL Injection Vulnerability ================================================================ Joomla Component Event Manager Blind SQL...

Joomla! Component Event Manager - Blind SQL Injection

Joomla Component Event Manager Blind SQL Injection Vulnerability author : Fl0riX Script Name : Joomla Component Event Manager 1.5 Bug Type : Blind SQL Injection Infection : Admin login bilgileri alnabilir. Demo Vuln. : + http://server/eventmanager/index.php?option=comcontent&view=article&id=44 an...

Claroline 1.7.5 - Multiple Remote File Inclusions

source: https://www.securityfocus.com/bid/29162/info Claroline is prone to multiple remote file-include vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues may allow a remote attacker to compromise the application and the underlying system; other...