7089 matches found
(edited) [DSECRG-09-044] SAP GUI 7.1 Insecure Methods
Digital Security Research Group DSecRG Advisory DSECRG-09-044 Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Da...
[DSECRG-09-043] SAP GUI 7.1 Insecure Method
Digital Security Research Group DSecRG Advisory DSECRG-09-043 Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: http://SAP.com Bugs: insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor respons...
SuSE 11 Security Update : acroread_ja (SAT Patch Number 769)
Multiple flaws in the JBIG2 decoder and the JavaScript engine of the Adobe Reader allowed attackers to crash acroread or even execute arbitrary code by tricking users into opening specially crafted PDF files. CVE-2009-0658 / CVE-2009-0927 / CVE-2009-0193 / CVE-2009-0928 / CVE-2009-1061 /...
SuSE9 Security Update : Acrobat Reader (YOU Patch Number 12211)
This update of acroread fixes an unknown error in a JavaScript method that can lead to remote code execution. CVE-2008-2641 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
PBS Website Compromised, Used to Serve Exploits
Some sections of the popular PBS.org Web site have been hijacked by hackers serving up a cocktail of dangerous exploits. According to researchers at Purewire, attempts to access certain PBS Web site pages yielded JavaScript that serves exploits from a malicious domain via an iframe. The malicious...
Rogue AV Scam Targets Google PageRank
An ongoing attack on Google users is sending victims to rogue anti-virus software sites, researchers said this week. The attack takes advantage of Google’s page-ranking feature, according to researchers at eSoft’s Threat Prevention Team. The scam works like this: An attacker hacks a site, but...
CVE-2009-3486
creationtimestamp| type| source ---|---|--- 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33258 2009-09-22 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33259...
Linux Kernel get_random_int函数不充分随机数漏洞
Linux kernel 2.6.x CVE ID: CVE-2009-3238 Linux Kernel是开放源码操作系统Linux所使用的内核。 Linux Kernel的drivers/char/random.c文件中的getrandomint函数所生成的随机数随机性不够，攻击者可以相对容易的预测返回值，绕过基于随机化的保护机制。 Linux kernel 2.6.x 厂商补丁： Linux ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...
CVE-2009-4661
creationtimestamp| type| source ---|---|--- 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9695 2009-09-21 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9734...
CVE-2009-3493
creationtimestamp| type| source ---|---|--- 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34454 2009-09-16 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34453...
BRS Webweaver 1.33 - '/Scripts' Access Restriction Bypass
Name : BSR Webweaver Version 1.33 /Scripts access restriction bypass vulnerbility Author : Usman Saeed Company : Xc0re Security Reasearch Group Date : 15/09/09 Homepage : http://www.xc0re.net Download Page : http://www.brswebweaver.com/downloads.html Attack type : Remote Patch Status : Unpatched...
Wireshark: Denial of service
Background Wireshark is a versatile network protocol analyzer. Description Multiple vulnerabilities were discovered in Wireshark: A buffer overflow in the IPMI dissector related to an array index error CVE-2009-2559. Multiple unspecified vulnerabilities in the Bluetooth L2CAP, RADIUS, and MIOP...
Mac OS X 10.6.x < 10.6.1 Multiple Vulnerabilities
The remote host is running a version of Mac OS X 10.6.x that is prior to 10.6.1. Mac OS X 10.6.1 contains security fixes for the following product : - Flash Player plug-in C Tenable Network Security, Inc. if !definedfunc"bnrandom" exit0; include'compat.inc'; if description scriptid40946;...
Mac OS X Multiple Vulnerabilities (Security Update 2009-005)
The remote host is running a version of Mac OS X 10.5 or 10.4 that does not have Security Update 2009-005 applied. This security update contains fixes for the following products : - Alias Manager - CarbonCore - ClamAV - ColorSync - CoreGraphics - CUPS - Flash Player plug-in - ImageIO - Launch...
Bus Script SQL Injection
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability aboutus.php sitetextid Bus Script http://www.tourismscripts.com/ AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/aboutus.php?sitetextid=-1'+UNION+SELECT+0,CONCATWS0x3a3a,username,password,0+FROM+user...
MYRE Holiday Rental Manager - action SQL Injection
MYRE Holiday Rental Manager - action SQL Injection Viva IslaM Viva IslaM Remote SQL Injection Vulnerability review.php action MYRE Holiday Rental Manager http://www.myrephp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...
Accommodation Hotel Booking Portal (hotel_id) SQL Injection Vuln
Exploit for unknown platform in category web applications ================================================================ Accommodation Hotel Booking Portal hotelid SQL Injection Vuln ================================================================ Remote SQL Injection Vulnerability hotel.php...
iDesk - 'download.php?cat_id' SQL Injection
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability download.php catid iDesk http://www.nicecoder.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :- www.TraGeT.CoM/download.php?catid=-1+UNION+SELECT+0,0,0,@@VERSION,0,0,0,0,0-- -:: !Gr3E3E3E3E3E3E3TzZ! ::- ::...
MYRE Holiday Rental Manager - 'action' SQL Injection
Viva IslaM Viva IslaM Remote SQL Injection Vulnerability review.php action MYRE Holiday Rental Manager http://www.myrephp.com AuTh0r : Mr.SQL H0ME : WwW.55a.NeT Email : [email protected] -: ExploiteS :-...