SAP NetWeaver Workflow Modeler - Multiple XSS

Application: SAP NetWeaver Workflow Modeler Versions Affected: SAP NetWeaver NW2004s SP6 Workflow Modeler Vendor URL: http://www.sap.com Bugs: XSS Exploits: YES Reported: 06.08.2010 Vendor response: 07.08.2010 Date of Public Advisory: 12.02.2014 Reference: SAP Security Note 1860923 Author:...

Anatomy of the Eleonore Exploit Kit

LIMASSOL, CYPRUS–When an unknown attacker compromised three domains belonging to the U.S. Bureau of Engraving and Printing last month, it became big news, mainly for the brazenness of the attack against a federal Web site. The bigger news, however, turned out to be that the attack involved the us...

DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera

No description provided by source. Advisory: DoS vulnerabilities in Firefox, Internet Explorer, Chrome and Opera ----------------------------- URL: http://websecurity.com.ua/4248/ ----------------------------- Affected products: Mozilla Firefox, Internet Explorer 6, Internet Explorer 8, Google...

clickartweb Design - SQL Injection

clickartweb Design SQL Injection Vulnerability Vendor: http://www.clickartweb.com Discovered by : cyberlog Site : Sekuritionline.net Channel : SekuritiOnline Now Just My Bot :P Dork : "diseño y programación Clickart" Exploit : site/quisom.php?id=SQL Injection site/eobregrupolleal.php?id= SQL...

SyncBack Profile File Remote Buffer Overflow

The remote Windows host contains a version of SyncBack that is earlier than 3.2.21. Such versions are prone to a remote buffer overflow attack. An attacker may exploit this issue to execute arbitrary code in the context of the vulnerable application by tricking the user into importing a malicious...

(Gabriel's FTP Server) Open & Compact FTP Server 1.2 - 'PORT' Remote Denial of Service

============================================================================= Tilte: Open&Compact Ftp Server 1.2 "PORT" command Remote Denial of Service. ============================================================================= Date....................: 22-05-2010 Author..................:...

Q&A: HD Moore on Metasploit, Disclosure and Ethics

We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and...

CVE-2010-2126

creationtimestamp| type| source ---|---|--- 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34016 2010-05-20 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34017...

LinksAutomation Multiple Remote Vulnerabilities

----------------In The Name Of God------------ LinksAutomation Multiple Remote Vulnerabilities AUTHOR: md.r00t Mail: [email protected] Website: www.r00t.gigfa.com Google D0rk: "Powered By LinksAutomation" Sql Injection: --------- Exploit=...

VMware View Portal 3.1 - Cross-Site Scripting

VMware View Portal 3.1 - Cross-Site Scripting DSECRG-09-058 Vmware View - XSS vulnerability Source:http://www.dsecrg.com/pages/vul/show.php?id=158 Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected:...

Miniwebsvr 0.0.10 Directory Traversal

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

CVE-2005-3294

creationtimestamp| type| source ---|---|--- 2010-05-14 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12604 2010-12-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15860...

VUPEN Security Research - Adobe Shockwave 3D Two Remote Code Execution Vulnerabilities (CVE-2010-1284)

VUPEN Security Research - Adobe Shockwave 3D Two Code Execution Vulnerabilities CVE-2010-1284 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to some of th...

VUPEN Security Research - Adobe Shockwave 3D Blocks Field Code Execution Vulnerability (CVE-2010-1283)

VUPEN Security Research - Adobe Shockwave 0xFFFFFF49 3D Block Code Execution Vulnerability CVE-2010-1283 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Over 450 million Internet-enabled desktops have installed Adobe Shockwave Player. These people now have access to...

miniwebsvr v0.0.10 Directory Traversal / Listing Exploits

Exploit for windows platform in category remote exploits ========================================================= miniwebsvr v0.0.10 Directory Traversal / Listing Exploits ========================================================= miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By:...

MiniWebsvr 0.0.10 - Directory Traversal Listing

MiniWebsvr 0.0.10 - Directory Traversal Listing miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the late...

MiniWebsvr 0.0.10 - Directory Traversal / Listing

miniwebsvr v0.0.10 Directory Traversal/Listing Exploits Found By: DrIDE Date: May 12, 2010 Download: http://sourceforge.net/projects/miniwebsvr/ Tested on: Windows 7 - Description - miniwebsvr v0.0.10 is a Windows based HTTP server. This is the latest version of the application available...

Adobe Patches 'Critical' Shockwave, ColdFusion holes

Adobe joined the Patch Tuesday train today with the release of patches for at least 21 documented security vulnerabilities in the Shockwave and ColdFusion product lines. According to the APSB10-12 security bulletin, 18 of the 21 flaws affected the Shockwave Player, a free software product that le...

CVE-2010-1939

creationtimestamp| type| source ---|---|--- 2010-05-11 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12573 2010-05-15 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/12614...

MS10-030: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)

The remote host is running a version of Microsoft Outlook Express / Windows Mail that contains a flaw that could be used to cause an integer overflow, resulting in remote code execution. To exploit this flaw, an attacker would need a victim to connect to a mail server under their control and send...