7381 matches found
CVE-2011-4918
creationtimestamp| type| source ---|---|--- 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36407 2011-12-05 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36406...
SAP Portal - unauthorized file read
Application: SAP Portal Vendor URL: http://www.sap.com Bugs: Directory traversal Exploits: YES Reported: 12.03.2011 Vendor response: 13.03.2011 Date of Public Advisory: 12.09.2012 Reference: SAP Security Note 1707494 Author: Dmitry Chastukhin ERPScan Description It is possible to read files in...
Java Still a Favorite Target of Attackers
Java has become virtually unavoidable in the last few years, and it’s installed on hundreds of millions of PCs around the world. A huge number of those installations are vulnerable versions of Java, and this fact has not escaped the attention of attackers, who have made the technology one of thei...
CVE-2011-5009
creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36377 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36378...
CVE-2011-5258
creationtimestamp| type| source ---|---|--- 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36380 2011-11-30 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36379...
CVE-2011-4712
creationtimestamp| type| source ---|---|--- 2011-11-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36376...
New Java Vulnerability Coming Bundled With Exploit Kits
A recently discovered Java vulnerability that’s been circulating throughout the hacking underground has begun to show up alongside the BlackHole exploit kit, according to a post on Brian Krebs’ KrebsonSecurity blog. The National Vulnerability Database claims the vulnerability is found in the Java...
CVE-2011-5111
creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36350 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36351...
CVE-2011-5184
creationtimestamp| type| source ---|---|--- 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36354 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36355 2011-11-24 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36357 2011-11-24...
CVE-2011-4544
creationtimestamp| type| source ---|---|--- 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36341 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36342 2011-11-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/36343 2011-11-23...
How the Duqu Authors May Have Erred
Duqu has been called the spawn of Stuxnet, or maybe some sort of stepchild or second cousin. That initial analysis came from some similarities in the code of the two attack tools, and now that researchers have had more time to pull Duqu apart and see how it works, it seems more and more likely th...
[DSECRG-11-032] SAP NetWeaver ipcpricing - information disclose
DSECRG-11-032 SAP NetWeaver ipcpricing - information disclose com.sap.ipc.webapp.ipcpricing application has information disclose vulnerability Digital Security Research Group DSecRG Advisory DSECRG-11-032 Internal DSecRG-00197 Application: SAP NetWeaver Versions Affected: SAP NetWeaver Vendor URL...
[DSECRG-11-031] SAP RFC EPS_DELETE_FILE - Authorisation bypass, smbrelay
DSECRG-11-031 SAP RFC EPSDELETEFILE - Authorisation bypass, smbrelay Security vulnerability was founded in sap EPSDELETEFILE RFC function allows attacker to delete files remotely or steal hashes of SAP server account in windows environment using SMBRelay attack. Digital Security Research Group...
Apache Mixed Platform AddType Directive Information Disclosure
The remote host appears to be running Apache. When Apache runs on a Unix host with a document root on a Windows SMB share, remote, unauthenticated attackers could obtain the unprocessed contents of the directory. For example, requesting a PHP file with a trailing backslash could display the file'...
AShop - Open Redirection Cross-Site Scripting
AShop - Open Redirection Cross-Site Scripting source: https://www.securityfocus.com/bid/50616/info AShop is prone to multiple open-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execu...
WHMCompleteSolution 3.x4.x - Multiple Vulnerabilities
WHMCompleteSolution 3.x4.x - Multiple Vulnerabilities $b0x WHMCS WHMCompleteSolution 3.x / 4.x Multiple Vulnerability ! $b0x ZxH-Labs $b0x 1st-NOV-11 $b0x Www.Sec4ever.coM $b0x WH-03 On Windows IIS 6.0 ======================================================== b0x@1337b0x:/b0x/Exploits/WebAPP whoam...
Call for Articles - The Hacker News Magazine | December Edition
Call for Articles - The Hacker News Magazine | December Edition THN Magazine is a free monthly magazine designed to spread awareness and knowledge about cyber security. Our goal is to provide the most up-to-date information on a wide variety of topics that relate to hackers and security experts...
eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections
eFront 3.6.x - Multiple Cross-Site Scripting SQL Injections source: https://www.securityfocus.com/bid/50492/info eFront is prone to multiple cross-site scripting and SQL-injection vulnerabilities because the software fails to sufficiently sanitize user-supplied input. Exploiting these...
ASLR Added to Android 4.0
The newest version of the Android mobile operating system includes a major security upgrade, the presence of address space layout randomization ASLR, which gives users some better protection against memory-corruption exploits. The inclusion of ASLR in Android 4.0, also known as “Ice Cream...