DSA-2285-1 mapserver - several

Bulletin has no description...

Interactive World SQL Injection

Interactive World index.php Sql Injection Vulnerability Multiple Vulnerabilities ============================================================== .:. Exploit Title : Interactive World SQL Injection Vulnerability Multiple Vulnerabilities .:. Author : Netrondoank aka netron .:. My Web :...

[SECURITY] Fedora 15 Update: blender-2.49b-16.fc15

Blender is the essential software solution you need for 3D, from modeling, animation, rendering and post-production to interactive creation and playba ck. Professionals and novices can easily and inexpensively publish stand-alone, secure, multi-platform content to the web, CD-ROMs, and other medi...

The Social-Engineer Toolkit v1.5 Released

The Social-Engineer Toolkit v1.5 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

The Social-Engineer Toolkit v1.5 Released

The Social-Engineer Toolkit v1.5 Released The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

Joomla A Cool Debate 1.0.3 Local File Inclusion

A Cool Debate 1.0.3 Component Joomla Local File Inclusion ========================================================================================= - Discovered by : Chip D3 Bi0s - Email : chipdebiosatgmaildotcom - Group : LatinHackTeam - Date : 18 june 2011 - Where : From Remote...

PT-2011-2993

Name of the Vulnerable Software and Affected Versions Internet Explorer versions 6 through 8 Description The issue arises from the improper handling of objects in memory by the Timed Interactive Multimedia Extensions implementation, allowing remote attackers to execute arbitrary code. This can...

Ushahidi 2.0.1 SQL Injection

Ushahidi 2.0.1 range param SQL Injection Vulnerability post-auth Vendor: Ushahidi, Inc. Product web page: http://www.ushahidi.com Affected version: 2.0.1 Tunis Summary: The Ushahidi Platform is a platform for information collection, visualization and interactive mapping. Desc: Input passed via th...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

7T Interactive Graphical SCADA System dc.exe Directory Traversal

Added: 06/03/2011 CVE: CVE-2011-1566 BID: 46936 OSVDB: 72349 Background 7-Technologies Interactive Graphical SCADA System IGSS is a Supervisory Control and Data Acquisition SCADA solution used mainly in Denmark and the US. Problem An input validation error in the Data Collector service dc.exe whe...

CVE-2011-2214

The CVE-2011-2214 issue affects 7-Technologies IGSS (Interactive Graphical SCADA System) versions 8 and 9. A remote attacker can send a crafted packet to TCP port 20222, triggering memory corruption in the ODBC server component and potentially leading to arbitrary code execution or DoS. The vulne...

PT-2011-3684

Name of the Vulnerable Software and Affected Versions 7T Interactive Graphical SCADA System IGSS versions prior to 9.0.0.11143 Description The issue is related to an unspecified vulnerability in the Open Database Connectivity ODBC component. It allows remote attackers to execute arbitrary code vi...

CVE-2011-2214: Undefined Security Weakness

Unspecified vulnerability in the Open Database Connectivity ODBC component in 7T Interactive Graphical SCADA System IGSS before 9.0.0.11143 allows remote attackers to execute arbitrary code via a crafted packet to TCP port 20222, which triggers memory corruption related to an "invalid structure...

(e)2 Interactive Photo Gallery 0.9 Cross Site Scripting

Vulnerability ID: HTB22966 Reference: http://www.htbridge.ch/advisory/xssine2interactivephotogallery.html Product: e2 interactive Photo Gallery Vendor: http://www.e2interactive.com http://www.e2interactive.com Vulnerable Version: 0.9 Vendor Notification: 19 April 2011 Vulnerability Type: XSS Cros...

The Social-Engineer Toolkit v1.3.5 Released !

The Social-Engineer Toolkit v1.3.5 Released ! "The Social Engineering Toolkit SET is a python-driven suite of custom tools which solely focuses on attacking the human element of penetration testing. It's main purpose is to augment and simulate social-engineering attacks and allow the tester to...

Cross-site Scripting (XSS) Vulnerability in (e)2 interactive Photo Gallery

High-Tech Bridge SA Security Research Lab has discovered vulnerability in e2 interactive Photo Gallery which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in e2 interactive Photo Gallery The vulnerability exists due to input sanitation error ...

CVE-2011-1568

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...

CVE-2011-1567: Improper Restriction of Operations within the Bounds of a Memory Buffer

Multiple stack-based buffer overflows in IGSSdataServer.exe 9.00.00.11063 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted 1 ListAll, 2 Write File, 3 ReadFile, 4 Delete, ...

CVE-2011-1566: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in dc.exe 9.00.00.11059 and earlier in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to execute arbitrary programs via ..\ dot dot backslash sequences in opcodes 1 0xa and 2 0x17 to TCP port 12397...

CVE-2011-1568: Use of Externally-Controlled Format String

Format string vulnerability in the logText function in shmemmgr9.dll in IGSSdataServer.exe 9.00.00.11074, and 9.00.00.11063 and earlier, in 7-Technologies Interactive Graphical SCADA System IGSS allows remote attackers to cause a denial of service and possibly execute arbitrary code, as...