SphereCMS Blind SQL Injection Vulnerability

www.BugReport.ir AmnPardaz Security Research Team Title: SphereCMS Blind SQL Injection Vulnerability Vendor: http://sphere.xlentprojects.se/ Vulnerable Version: 1.1 alpha Latest version till now Exploitation: Remote with browser Fix: N/A - Description: SphereCMS is a CMS which allow managing foru...

VUPEN Security Research - OpenOffice Word Document Processing Heap Overflow Vulnerabilities

VUPEN Security Research - OpenOffice.org Word Document Handling Heap Overflow Vulnerabilities http://www.vupen.com/english/research.php I. BACKGROUND --------------------- OpenOffice.org OO.o or OOo, commonly known as OpenOffice, is an open source software application suite available for a number...

Symantec (Multiple Products) - Client Proxy ActiveX 'CLIproxy.dll' Remote Overflow

source: https://www.securityfocus.com/bid/38222/info The Symantec Client Proxy ActiveX control is prone to a buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied data. Successful exploits allow remote attackers to execute arbitrary code ...

Malware Infested PDFs Ruled 2009 Exploits

A newly released report shows that based on more than a trillion Web requests processed in 2009, the use of malicious PDF files exploiting flaws in Adobe Reader/Adobe Acrobat not only outpaced the use of Flash exploits, but also, grew to 80% of all exploits the company encountered throughout the...

Calendarix 0.8.20071118 - SQL Injection

Calendarix 0.8.20071118 - SQL Injection Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution ...

Calendarix 0.8.20071118 - SQL Injection

Informatique inside Calendarix : SQL injection Version : 0.8.20071118 et infrieur Author : Thibow Contact : Thibow4tlinformatique-insidedotcom Location : France Website : http://www.informatique-inside.com Dork : "inurl:calday.php?op=day&catview=" Solution : Update: http://www.calendarix.com/ . :...

CVE-2010-0691

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11445...

CVE-2010-0678

creationtimestamp| type| source ---|---|--- 2010-02-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/11452...

Nokia Symbian S60v3 web browser DoS Exploits

Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...

HASHE! Solutions - Multiple SQL Injections

HASHE! Solutions - Multiple SQL Injections HASHE! Multiple Sql Injection Vulnerability ============================================================== .:. Author : AtT4CKxT3rR0r1ST [email protected] .:. Team : Sec Attack Team .:. Home : www.sec-attack.com/vb .:. Script : HASHE .:. Bug Type : Sql...

MS10-007: Vulnerability in Windows Shell Handler Could Allow Remote Code Execution (975713)

The ShellExecute API function on the remote host fails to properly validate URLs, which could result in arbitrary code execution. A remote attacker could exploit this by tricking a user into making an application e.g. web browser pass specially crafted data to the vulnerable function, resulting i...

Samba Symlink Directory Traversal Vulnerability (Feb 2010)

Samba is prone to a directory traversal vulnerability because the application fails to sufficiently sanitize user-supplied input. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

Oracle 11g - Multiple Privilege Escalation Vulnerabilities

source: https://www.securityfocus.com/bid/38115/info Oracle Database is prone to multiple remote privilege-escalation issues because it fails to properly restrict access to certain packages. The attacker can exploit these issues to escalate their privileges to DBA or execute arbitrary operating...

The Web Won't Be Safe, Let Alone Secure, Unless We Break It

There are several security issues affecting all major Web browsers that have remained unaddressed for years probably because the bad guys haven’t leveraged them aggressively enough, but the potential is there. The problem is that the only known ways to fix these issues adequately is to “break the...

Tinypug Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...

Tinypug 0.9.5 Cross Site Request Forgery / Cross Site Scripting

www.BugReport.ir AmnPardaz Security Research Team Title: Tinypug Multiple Vulnerabilities Vendor: http://platformassociates.com/ project hosted at http://code.google.com/p/tinypug/ Vulnerable Version: 0.9.5 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Tinypug is a...

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information-disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. OpenVAS Vulnerability Test $Id: bugzilla38025.nasl 5245...

Bugzilla Directory Access Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. Versions prior to Bugzilla 3.0.11, 3.2.6, 3.4.5, and 3.5.3 are affected. SPDX-FileCopyrightText: 2010 Greenbone AG Some text...

Bugzilla Group Selection During Bug Move Information Disclosure Vulnerability

Bugzilla is prone to an information disclosure vulnerability. Exploits may allow attackers to obtain potentially sensitive information that may aid in other attacks. This issue affects the following: Bugzilla 3.3.1 through 3.4.4 Bugzilla 3.5.1 Bugzilla 3.5.2 SPDX-FileCopyrightText: 2010 Greenbone...

eWebeditor ASP Version - Multiple Vulnerabilities

eWebeditor ASP Version - Multiple Vulnerabilities Application Info: Name: eWebeditor Version: ASP Vulnerability: ======================= Arbitrary File Upload ======================= ======================= Arbitrary File Upload 2 =======================...