reos 2.0.5 - Multiple Vulnerabilities

===================================== Vulnerability ID: HTB22807 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos1.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk...

HTB22806: SQL Injection in ReOS

Vulnerability ID: HTB22806 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA ...

HTB22810: SQL Injection in ReOS

Vulnerability ID: HTB22810 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos3.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

ReOS 2.0.5 SQL Injection

Vulnerability ID: HTB22809 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos2.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

HTB22808: Local File Inclusion in ReOS

Vulnerability ID: HTB22808 Reference: http://www.htbridge.ch/advisory/localfileinclusioninreos.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: Local File Inclusion Risk level: High Credit: High-Te...

HTB22809: SQL Injection in ReOS

Vulnerability ID: HTB22809 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos2.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

HTB22807: SQL Injection in ReOS

Vulnerability ID: HTB22807 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos1.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk level: High Credit: High-Tech Bridge SA...

ReOS 2.0.5 Local File Inclusion / SQL Injection

===================================== Vulnerability ID: HTB22807 Reference: http://www.htbridge.ch/advisory/sqlinjectioninreos1.html Product: ReOS Vendor: IT ELAZOS S.L. http://reos.elazos.com/ Vulnerable Version: 2.0.5 Vendor Notification: 20 January 2011 Vulnerability Type: SQL Injection Risk...

Microsoft Releases Security Advisory 2501696

Microsoft has released Microsoft security advisory 2501696 indicating that it is investigating public reports of a vulnerability affecting Windows. This vulnerability is due to the way MHTML interprets MIME-formatted requests for content blocks within a document. Exploitation of this vulnerabilit...

MultiPowUpload 2.1 - Arbitrary File Upload

MultiPowUpload 2.1 - Arbitrary File Upload Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.element-it.com Download Software : http://www.element-it.com/Download/ElementIT.MultiPowUpload3.zip...

syslog-ng wrong file permission vulnerability

========================================================================== syslog-ng 2.0, 3.0, 3.1, 3.2 OSE and PE = Information leak, access prevention and possible priviledge escalation CVE-2011-0343 ========================================================================== 1. OVERVIEW Versions...

MultiPowUpload 2.1 Shell Upload

Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.element-it.com Download Software : http://www.element-it.com/Download/ElementIT.MultiPowUpload3.zip Version: 2.1 Tested on: LiNuX...

MultiPowUpload 2.1 - Arbitrary File Upload

Exploit Title: MultiPowUpload v 2.1 Remote File Upload Vulnerability Author: DIES3L Email: [email protected] Date: 26-1-2011 Software Link: http://www.element-it.com Download Software : http://www.element-it.com/Download/ElementIT.MultiPowUpload3.zip Version: 2.1 Tested on: LiNuX...

CIO said - London Olympics Will Be 'ready' For Cyber-attacks !!

London Olympics will be well prepared for attempted cyber attack, according to CIO Gerry Pennell London 2012. Speaking in London to start in 2012, and Atos Origin IT testing organization, Technology Lab, Pennell said the attacks at the Olympics - is also trying to overthrow the Games, to influenc...

DotNetNuke Remote Code Execution vulnerability

======================================= Vulnerability discovered: November 23, 2010 Discovered by: Danil Niggebrugge, Fox-IT BV https://www.fox-it.com/ Reported to vendor: November 30, 2010 Fix available: Yes ======================================= PRODUCT ------------- DotNetNuke is an open sour...

Amitabh Bacchan's fan website hacked by 'Cyber Stonepelters Force' !

A group of hackers, claiming to be from Kashmir, on Thursday night hacked a website dedicated to the Bollywood superstar, Amitabh Bacchan. The group calling itself 'Cyber Stone Pelters Force or Cyber Sangbaaz Force' hacked www. amitabhbachchanonline.com last night and posted pro-independence,...

Microsoft Security Advisory 2488013

Microsoft Security Advisory 2488013 addresses a vulnerability in Internet Explorer. This advisory has been updated to include Microsoft Fix It 50591 that prevents the recursive loading of CSS style sheets in Internet Explorer as a mitigation for this vulnerability. Exploitation of this...

December Top 10 Malware List !

GFI Software, a leading IT solutions provider for small and medium-sized enterprises, today revealed continuing high levels of Trojan and rogue malware circulating during December, with data revealing a surge in activity, boosted by themed activity around the Christmas and New Year holiday period...

Kerala Computer Emergency Response Team launches operations !

The Kerala Government has announced the launch of the Computer Emergency Response Team, Kerala CERT-K as the nodal agency for monitoring various cyber security related incidents in the State. Chief Minister Shri V S Achuthanandan formally announced the launch of operations today. The agency will...

Kerala cyber police closing in on software theft culprits !

Thiruvananthapuram, Jan 5 IANS The cyber wing of the Kerala Police Wednesday claimed it had got vital clues about the theft of software source codes and intellectual property data from a Kochi-based IT company. The investigation is progressing on the right track, V.K. Ajith Mohan of the police...