CVE-2010-2373

Unspecified vulnerability in the Console component in Oracle Enterprise Manager Grid Control 10.1.0.6 and 10.2.0.5 allows remote attackers to affect integrity via unknown vectors...

AVCON 4.6.8.7 Buffer Overflow

!/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE Code : exploit.pl Twitter: http://twitter.com/D1N Dork: site:gov.cn "AVCON" There are other bugs... This is just for fun ;-...

AVCON Buffer Overflow

Exploit for windows platform in category local exploits ===================== AVCON Buffer Overflow ===================== !/usr/bin/perl Exploit Title: AVCON Buffer Overflow Date: 5/7/10 Author: Dillon Beresford URL: http://www.avcon.com.cn/ Version: 4.6.8.7 Tested on: XP SP2 and SP3 CVE : NONE...

Joomla! Component Card View JX - Cross-Site Scripting

Joomla! Component Card View JX - Cross-Site Scripting :::::::::::::::::::::::::::::::::::::: 0x1 :::::::::::::::::::::::::::::::::::::: General Information Advisory/Exploit Title = Joomla Component Card View JX XSS Vulnerabilities Author = Valentin Hoebel Contact = [email protected]...

Researchers Find Security Flaws in 'Smart' Meters

Computer-security researchers say new “smart” meters that are designed to help deliver electricity more efficiently also have flaws that could let hackers tamper with the power grid in previously impossible ways. At the very least, the vulnerabilities open the door for attackers to jack up...

CVE-2009-4133

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...

Design/Logic Flaw

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...

CVE-2009-4133

CVE-2009-4133 affects Condor (versions 6.5.4–7.2.4, 7.3.x, and 7.4.0 as used in MRG/GRID environments). The issue allows remote authenticated users to queue jobs as an arbitrary user by using a Condor CLI tool to modify an unspecified job attribute, enabling privilege elevation (partial confident...

CVE-2009-4133

Condor 6.5.4 through 7.2.4, 7.3.x, and 7.4.0, as used in MRG, Grid for MRG, and Grid Execute Node for MRG, allows remote authenticated users to queue jobs as an arbitrary user, and thereby gain privileges, by using a Condor command-line tool to modify an unspecified job attribute...

Privacy Concerns Raised About Smart Grids

Technologists already are worried about the security implications of linking nearly all elements of the U.S. power grid to the public Internet. Now, privacy experts are warning that the so-called “smart grid” efforts could usher in a new class of concerns, as utilities begin collecting more...

CBS 60 Minutes on Cyber Terrorism

Could hackers get into the computer systems that run crucial elements of the world’s infrastructure, such as the power grids, water works or even a nation’s military arsenal? Watch the CBS News 60 Minutes segment. Read the transcript...

FlexCell Grid FlexCell.Grid ActiveX Control Multiple Method Arbitrary File Overwrite

The remote host contains the FlexCell.Grid ActiveX control, a component of the FlexCell grid control software. The version of the control installed on the remote host reportedly fails to validate input to the 'File' argument of the 'SaveFile' and 'ExportToXML' methods before writing to the...

Oracle将发布2009 7月重要补丁更新修复多个安全漏洞

Bugraq ID: 35618 Oracle Database是一款商业性质大型数据库系统。 racle发布了2009年7月的紧急补丁更新公告，补丁修复了跨越100多个Oracle产品中33个安全漏洞，受影响的软件包括如下： Oracle Database Oracle Application Server Oracle Identity Management Oracle E-Business Suite Release Oracle Enterprise Manager Database Control Oracle Enterprise Manager Grid Control...

Solaris 10 (x86) : 121958-01 (deprecated)

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121958 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 10 (sparc) : 121957-01 (deprecated)

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121957 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 10 (x86) : 121959-01 (deprecated)

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121959 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled ...

Solaris 10 (sparc) : 121956-01 (deprecated)

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 This plugin has been deprecated and either replaced with individual 121956 patch-revision plugins, or deemed non-security related. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. @DEPRECATED@ Disabled on...

Solaris 8 (sparc) : 121956-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

Solaris 8 (x86) : 121958-01

N1 Grid Engine 6.0x86: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if...

Solaris 7 (sparc) : 121957-01

N1 Grid Engine 6.0: security patch. Date this patch was last updated by Sun : Jan/20/06 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...