Knowledge Base EE v4.62.0 - SQL Injection Vulnerability

Title: ====== Knowledge Base EE v4.62.0 - SQL Injection Vulnerability Date: ===== 2012-09-11 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=702 VL-ID: ===== 702 Common Vulnerability Scoring System: ==================================== 8.5 Introduction: =============...

Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath Buffer Overflow

Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath Buffer Overflow //Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+...

Aladdin Knowledge System Ltd - PrivAgent.ocx ChooseFilePath BOF

Exploit for windows platform in category remote exploits //Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+...

Aladdin Knowledge System Ltd Buffer Overflow

//Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+ '%u655d%ub8dc%u4fd6%uf619%udaf0%u51aa%uf500%u83b2%u7e62%u6020%u0b47%u54fc%u5f0c'+...

Aladdin Knowledge System Ltd - 'PrivAgent.ocx' ChooseFilePath Buffer Overflow

//Messagebox jsle var MessageBox = unescape '%ue9be%uac66%udb2b%ud9c2%u2474%u58f4%uc931%u3fb1%uc083%u3104%u1070%u7003%u0b10'+ '%u7593%u50c0%uf285%u9233%u2907%u2d89%u0459%u5a8a%ua6e8%u2ad8%u4c07%ucea8%u149c'+ '%u655d%ub8dc%u4fd6%uf619%udaf0%u51aa%uf500%u83b2%u7e62%u6020%u0b47%u54fc%u5f0c'+...

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO:...

Aladdin Knowledge System Ltd. Active-X Buffer Overflow

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Aladdin Knowledge System Ltd. PrivAgent ActiveX Control 2.0 - Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Aladdin Knowledge System Ltd PrivAgent ActiveX Control 2.0 Multiple Vulnerabilities

Exploit for windows platform in category dos / poc ============================================================================================= FILE INFO: ============================================================================================= Aladdin Knowledge System Ltd. PrivAgent ActiveX...

Joomla! Component com_fss 1.9.1.1447 - SQL Injection

Exploit Title: Joomla Freestyle Support comfss sqli Dork: N/A Date: 17-10-2012 Author: Daniel Barragan "D4NB4R" Twitter: @D4NB4R Vendor: http://freestyle-joomla.com Version: Version 1.9.1.1447 last update on Oct 15, 2012 License: Commercial Download: http://freestyle-joomla.com/fssdownloads Teste...

HackAdemy – Free eLearning Platform

I talked with Marius Corici Co-founder and CEO for Hack a Server project about Hackademy – eLearning Platform. What is HackAdemy? It is a free, eLearning platform specializing in InfoSec courses. HackAdemy is a place where people can learn and teach eachother about online security using principle...

CVE-2011-5195

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Conference Systems 2.3.4 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload a PHP file...

CVE-2011-5196

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2011-5196

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2011-5195

CVE-2011-5195 describes a CSRF vulnerability in the Open Conference Systems (Public Knowledge Project) component at index/manager/fileUpload. The flaw lets remote attackers hijack administrator sessions for requests that upload a PHP file, affecting versions 2.3.4 and earlier. The underlying issu...

CVE-2011-5197

Public Knowledge Project Open Harvester Systems (PKP OHS) versions 2.3.1 and earlier are affected by a CSRF vulnerability in index/manager/fileUpload that allows remote attackers to hijack administrator authentication when uploading PHP files. The description specifies the affected component and ...

PT-2012-2172

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Conference Systems versions 2.3.4 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

PT-2012-2174

Name of the Vulnerable Software and Affected Versions Public Knowledge Project Open Harvester Systems versions 2.3.1 and earlier Description A cross-site request forgery CSRF issue exists in the index/manager/fileUpload endpoint, allowing remote attackers to hijack the authentication of...

CVE-2011-5197: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Harvester Systems 2.3.1 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...

CVE-2011-5196: Cross-Site Request Forgery (CSRF)

Cross-site request forgery CSRF vulnerability in index/manager/fileUpload in Public Knowledge Project Open Journal Systems 2.3.6 and earlier allows remote attackers to hijack the authentication of administrators for requests that upload PHP files...