Facebook Cross-Site Request Forgery vulnerability

Exploit for unknown platform in category web applications ================================================= Facebook Cross-Site Request Forgery vulnerability ================================================= ============================================= INTERNET SECURITY AUDITORS ALERT 2010-002 -...

UGiA PHP Uploader 0.2 Shell Upload

======================================================================================== | Title : UGiA PHP UPLOADER V0.2 Shell Upload Vulnerability | Author : indoushka | email : [email protected] | Home : www.iq-ty.com/vb | Script Home : sourceforge.net/projects/upu/files | Dork : Powered b...

Researcher Lifts Lid on Google's Spyware Connections

A prominent anti-spyware researcher is calling on Google to sever its ties with an advertising partner that covers popular sites with pop-up PPC advertisements promoting those same sites. According to Ben Edelman, an assistant professor at the Harvard Business School and a staunch anti-spyware...

Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability

Exploit for unknown platform in category web applications ========================================================= Simple PHP Blog v0.5.1 Local File Inclusion Vulnerability ========================================================= Simple PHP Blog is prone to a local file-include vulnerability...

QuiXplorer 2.41beta LFI / Traversal / Code Execution

============================================= INTERNET SECURITY AUDITORS ALERT 2009-003 - Original release date: March 2nd, 2009 - Last revised: December 17th, 2009 - Discovered by: Juan Galiana Lara - Severity: 9/10 CVSS scored ============================================= I. VULNERABILITY...

Simple PHP Blog 0.5.1 Local File Inclusion

============================================= INTERNET SECURITY AUDITORS ALERT 2009-005 - Original release date: March 2nd, 2009 - Last revised: December 18th, 2009 - Discovered by: Juan Galiana Lara - Severity: 6.8/10 CVSS scored ============================================= I. VULNERABILITY...

Horde 3.3.5 - PHP_SELF Cross-Site Scripting

Horde 3.3.5 - PHPSELF Cross-Site Scripting ============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date: October 13th, 2009 - Last revised: December 16th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3701 - Severity: 6.3/10 CVSS Bas...

Horde 3.3.5 Cross Site Scripting

============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date: October 13th, 2009 - Last revised: December 16th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3701 - Severity: 6.3/10 CVSS Base Score...

[ISecAuditors Security Advisories] Horde 3.3.5 "PHP_SELF" Cross-Site Scripting vulnerability

============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date: October 13th, 2009 - Last revised: December 16th, 2009 - Discovered by: Juan Galiana Lara - CVE ID: CVE-2009-3701 - Severity: 6.3/10 CVSS Base Score...

Horde 3.3.5 "PHP_SELF" XSS vulnerability

Exploit for unknown platform in category web applications ======================================== Horde 3.3.5 "PHPSELF" XSS vulnerability ======================================== ============================================= INTERNET SECURITY AUDITORS ALERT 2009-012 - Original release date:...

Cisco ASA 8.x - VPN SSL Module Clientless URL-list control Bypass

============================================= INTERNET SECURITY AUDITORS ALERT 2009-013 - Original release date: December 7th, 2009 - Last revised: December 16th, 2009 - Discovered by: David Eduardo Acosta Rodriguez - Severity: 4/10 CVSS Base Score ============================================= I...

WP-Forum <= 2.3 SQL Injection & Blind SQL Injection vulnerabilities

Exploit for unknown platform in category web applications =================================================================== WP-Forum = 5.0 III. DESCRIPTION ------------------------- WP-Forum fails to sanitized user supplied input and is vulnerable to SQL Injection and Blind SQL Injection. An...

Panda Products Privilege Escalation Vulnerability

This host is running panda Products and is prone to Privilege Escalation Vulnerability. OpenVAS Vulnerability Test $Id: gbpandaprdtsprivescvuln.nasl 8218 2017-12-21 14:14:04Z cfischer $ Panda Products Privilege Escalation Vulnerability Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

金山毒霸杀毒软件套装文档解析拒绝服务漏洞

BUGTRAQ ID: 37247 金山毒霸是一种个人电脑安全防护软件，集合了查毒、杀毒、实时监控、垃圾邮件过滤、防网页挂马和隐私数据保护等实用性强的功能于一身。 金山毒霸在处理解析特定类型的畸形文档时存在漏洞，远程攻击者可能利用此漏洞导致毒霸发生崩溃，失去正常的功能，攻击者可能执行进一步的攻击。 Kingsoft Corp Kingsoft Internet Security 9 厂商补丁： Kingsoft Corp ------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

Panda Products Version Detection

This script finds the installed Panda Products. The script logs in via smb, searches for Panda Global Protection, Panda Internet Security and Panda Antivirus in the registry and gets the version from registry SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from...

CVE-2009-4215

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions Everyone: Full Control for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs...

Code injection

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions Everyone: Full Control for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-4215

Panda Global Protection 2010, Internet Security 2010, and Antivirus Pro 2010 use weak permissions Everyone: Full Control for the product files, which allows local users to gain privileges by replacing executables with Trojan horse programs...

CVE-2009-4215

CVE-2009-4215 affects Panda Global Protection 2010, Panda Internet Security 2010, and Panda Antivirus Pro 2010. The vulnerability stems from weak permissions (Everyone: Full Control) on product files, which could allow local users to replace executables with Trojan horses and gain privileges. Con...

ISPs Leave Modems Open to DDoS Attacks

Internet security experts say that misconfigured DSL and cable modems are worsening a well-known problem with the Internet’s DNS, making it easier for hackers to launch DDoS attacks against their victims. According to research, part of the problem is blamed on the growing number of consumer devic...