Juniper Junos J-Web Administrator Logs XSS (PSN-2011-10-392)

According to its self-reported version number, the J-Web component of the remote Juniper device has a persistent cross-site scripting vulnerability. During the authentication process, user controlled input is added to the administrator logs. When an administrator reviews the logs, that user...

Facebook New Year Scraps - SQL Injection Vulnerability

Document Title: =============== Facebook New Year Scraps - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=274 Release Date: ============= 2011-10-27 Vulnerability Laboratory ID VL-ID: ==================================== 274...

Opera Browser v11.52 - Stack Buffer Overflow Vulnerability

Document Title: =============== Opera Browser v11.52 - Stack Buffer Overflow Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=299 CNNVD-201110-708 http://www.cnnvd.org.cn/vulnerability/show/cvid/2011100708 Release Date: =============...

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K

Artillery 0.1 alpha - New tool for Linux Protection by ReL1K A new Tool "Artillery" - for Linux Protection has been Released by ReL1K Founder DerbyCon, Creator of the Social-Engineer Toolkit. It's written in Python and completely open-source. Artillery is a combination of a honeypot, file...

HTC Android Vulnerability - Exposes Phone numbers, Gps, SMS, Emails etc

HTC Android Vulnerability - Exposes Phone numbers, Gps, SMS, Emails etc If you are running a HTC Android smartphone with the latest updates applied, chances are your personal data is freely accessible to any app you have given network access to in the form of full Internet permissions.This...

Fedora Update for cherokee FEDORA-2011-12698

Check for the Version of cherokee OpenVAS Vulnerability Test Fedora Update for cherokee FEDORA-2011-12698 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison

Lulzsec Hacker tracked by Proxy logs, can face 15 years prison The FBI believes that the homeless man they arrested on Thursday was "Commander X", a member of the People's Liberation Front PLF associated with Anonymous hacktivism. The logs maintained by HideMyAss.com, in addition to other evidenc...

Red Hat JBoss Products Multiple Vulnerabilities (status page) - Active Check

Red Hat JBoss products are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Evidence of Infected SCADA Systems Washes Up in Support Forums

While security experts and lawmakers debate the seriousness of cyber threats to critical infrastructure, one security researcher says that evidence that viruses and spyware already have access to industrial control systems is hiding in plain sight: on Web based user support forums. Close to a doz...

WordPress Plugin Super CAPTCHA 2.2.4 - SQL Injection

Exploit Title: WordPress Super CAPTCHA plugin Accounts Flagged'; for$i=0;$iusers ." SET spam='1' WHERE ID='". $UIDs$i ."'"; mysqlquery"UPDATE ". $wpdb-users ." SET userstatus='1' WHERE ID='". $UIDs$i ."'"; echo'USER ID: '. $UIDs$i .' marked as spammer.';...

NFC connectivity troubleshooting steps

Challenge A job fails with an error related to NFC Network File Copy connectivity. For example: Error: NFC storage connection is unavailable. Failed to create NFC download stream. Failed to create NFC upload stream. Cause The cause of most NFC errors fall into 4 primary categories: DNS The proxy ...

Backup job fails with error: Insufficient system resources exist to complete the requested service.

Challenge The following entry can be seen in the log file: Client error: Insufficient system resources exist to complete the requested service Cause The error is relayed by Veeam Backup & Replication from the underlying Windows OS. Solution As the underlying Windows OS is reporting this error,...

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable

DarkComet-RAT v4.0 Fix1 Released - Fully Cryptable DarkComet-RAT v4.0 Change log - DarkComet-RAT is now compiled on Delphi XE instead of Delphi 2010. - Synthax highlighter added in remote keylogger. - Multithreading is now more efficient, no more freezing, using a new powerfull and stable...

iGuard V2.81 Player - Critical Pointer Vulnerability

Document Title: =============== iGuard V2.81 Player - Critical Pointer Vulnerability Release Date: ============= 2011-08-06 Vulnerability Laboratory ID VL-ID: ==================================== 106 Product & Service Introduction: =============================== Die Fähigkeit, Ihren Kunden...

CVE-2011-3008

The default configuration of Avaya Secure Access Link SAL Gateway 1.5, 1.8, and 2.0 contains certain domain names in the Secondary Core Server URL and Secondary Remote Server URL fields, which allows remote attackers to obtain sensitive information by leveraging administrative access to these...

Apache Log Extractor tool

Apache Log Extractor tool Apache Log Extractor is a quick script to export URL information from Apache access logs. The thought behind this script was to provide a list of known URL's on a remote server by analysing the logs. This list could then be used as the input for further testing tools e.g...

Apache Log Extractor tool

Apache Log Extractor tool Apache Log Extractor is a quick script to export URL information from Apache access logs. The thought behind this script was to provide a list of known URL's on a remote server by analysing the logs. This list could then be used as the input for further testing tools e.g...

Password History Count does not work for ATLASSIAN-SECURITY directories

Testing this locally on Crowd 227, I set the password history count to 1, then tried resetting my password through the interface and through 'Forgot Password' e-mail link, but was able to consistent use old passwords. I also expired the password, forcing a password change, but that also let me...

Veeam Service Fails to Start with Error 1920

Challenge A service relating to Veeam Backup & Replication fails to start and displays the message: Error 1920. Service failed to start. Verify that you have sufficient privileges to start system services. Copy Solution Common Causes The service is set to run as an account other than Local System...