Novell ZENworks Mobile Management DUSAP.php Language Parameter Vulnerability

Added: 07/18/2013 CVE: CVE-2013-1082 BID: 60179 OSVDB: 91118 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...

ASUS RT-N66U Router - HTTPS Directory traversal and full file access and credential disclosure vuln

Vulnerable product: ASUS RT-N66U when HTTPS WebService via AiCloud is enabled AC66R and RT-N65U are effected as well, but need more testing Vulnerabilities: - Linux 2.6.22 - Researched on both 3.0.0.4.270 and 3.0.0.4.354 firmware - Full directory traversal and plain text disclosure of all sensiti...

Oracle Linux 4 : thunderbird (ELSA-2008-0616)

From Red Hat Security Advisory 2008:0616 : Updated thunderbird packages that fix a security issue are now available for Red Hat Enterprise Linux 4 and Red Hat Enterprise Linux 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbi...

ModSecurity < 2.7.3 XML External Entity (XXE) Data Parsing Arbitrary File Disclosure

According to its banner, the version of ModSecurity installed on the remote host is earlier than 2.7.3. It is, therefore, potentially affected by a file disclosure vulnerability. An improperly configured XML parser could allow untrusted XML entities from external sources to be accepted, thus...

Seowonintech Devices - Remote Command Execution

Seowonintech Devices - Remote Command Execution !/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com...

Seowonintech Devices - Remote Command Execution

!/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com ===================================================== type: | platform: | description:...

Seowonintech Remote Root Exploit

Remote root exploit for all Seowonintech devices. !/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com...

Seowonintech Remote Root

!/usr/bin/perl + Seowonintech all device remote root exploit v2 ===================================================== author: | email: Todor Donev latin | todor dot donev Òîäîð Äîíåâ cyrillic | @googlemail.com ===================================================== type: | platform: | description:...

Prestige Software CMS File Disclosure

Exploit Title : Prestige Software CMS Local File Disclosure Author : IrIsT.Ir Discovered By : BeniVanda Home : http://IrIsT.Ir/en/ Software Link : http://www.prestijsoftware.com/tr/ Security Risk : High Version : All Version Tested on : GNU/Linux Ubuntu/BT/Fedora - win7 Dork : intext:Bu site...

Novell ZENworks Mobile Management MDM.php Language Parameter Vulnerability

Added: 06/15/2013 CVE: CVE-2013-1081 BID: 58402 OSVDB: 91119 Background ZENworks Mobile Management ZMM offers centralized management tools that are useful for deploying new mobile devices in the workforce, whether those devices are company-issued or privately owned. ZMM ensures that users have th...

Internet Explorer vulnerable to information disclosure

Overview Internet Explorer contains an issue in handling XML files, which may result in information disclosure. Isayama Takayoshi of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

Seowonintech Routers fw: 2.3.9 - File Disclosure

Seowonintech Routers fw: 2.3.9 - File Disclosure !/usr/bin/perl + Seowonintech routers ; $bug = $host."/cgi-bin/systemconfig.cgi?filename=".$file."&btntype=load&action=APPLY"; if$file eq "" print "Enter full path to file!\n"; $data=get$bug || die "$!, try another exploit\n"; $data = s/Null/File n...

Seowonintech Routers fw: 2.3.9 - File Disclosure

!/usr/bin/perl + Seowonintech routers ; $bug = $host."/cgi-bin/systemconfig.cgi?filename=".$file."&btntype=load&action=APPLY"; if$file eq "" print "Enter full path to file!\n"; $data=get$bug || die "$!, try another exploit\n"; $data = s/Null/File not found!/gs; if defined $data = mrows="30".?sx...

Several vulnerabilities in third party extensions

Several vulnerabilities have been found in the following third-party TYPO3 extensions: accessibleisbrowseresults, maagformcaptcha, metafeedit, rzautocomplete, sbfolderdownload, sgzfelib, sgzlib, tqseo Release Date: June 03, 2013 Please read first: This Collective Security Bulletin CSB is a listin...

Greenstone Multiple Vulnerabilities (Jun 2013) - Active Check

Greenstone is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Safari information disclosure vulnerability

Overview Safari contains an information disclosure vulnerability caused the by the improper handling of XML files. Takayoshi Isayama from Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning...

WeBid Local File Disclosure and SQL Injection Vulnerabilities

WeBid is prone to file disclosure and SQL Injection vulnerability. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Webid 1.0.6 - Multiple Vulnerabilities

WeBid is an open-source auction script package. Although still in beta stages WeBid is one of the best open-source solutions for getting an auction site up and running quickly and cheaply. Written in the popular scripting language PHP and with a large collection of highly customisable features...

Webid 1.0.6 File Disclosure / SQL Injection

Title: Webid Blind SQL Injection / Local File Disclosure Vulnerability Google Dork: intext:"Powered by WeBid" Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.webidsupport.com/ Software Link:...

WeBid 1.0.6 - Multiple Vulnerabilities

WeBid 1.0.6 - Multiple Vulnerabilities Title: Webid Blind SQL Injection / Local File Disclosure Vulnerability Google Dork: intext:"Powered by WeBid" Author: Ahmed Aboul-Ela Contact: Ahmed.Aboul3laatgmaildotcom Vendor: http://www.webidsupport.com/ Software Link:...