Multiple Cross-Site Scripting Vulnerabilities in Owl Intranet Knowledgebase

Owl Intranet Knowledgebase is a multi-user document management system. Multiple cross-site scripting vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote attackers to inject arbitrary web script or HTML via authentication by leveraging searches in the title field of browsephp or to...

CVE-2013-4754

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

CVE-2013-4754

CVE-2013-4754 affects Owl Intranet Knowledgebase 1.10. The vulnerability is multiple cross-site scripting (XSS) flaws that allow remote authenticated users to inject arbitrary web script or HTML via (1) the Search field to browse.php and (2) the Title field to prefs.php. Root cause: unsanitized u...

CVE-2013-4754

Multiple cross-site scripting XSS vulnerabilities in Owl Intranet Knowledgebase 1.10 allow remote authenticated users to inject arbitrary web script or HTML via 1 the Search field to browse.php or 2 the Title field to prefs.php...

Core Secrets — NSA Used ‘Undercover Agents’ In Foreign Companies

Sometimes we wonder that how the National Security Agency NSA reached such a wide range of its Surveillance operation across the world – which you can measure from several secret documents released by the former NSA contractor Edward Snowden. This hell parameter of the NSA’s operation was not...

Owl Intranet Engine 0.95 'register.php' Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/30410/info Owl Intranet Engine is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browse...

Owl Intranet Engine 0.7 Authentication Bypass Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7595/info Owl has been reported prone to an authentication bypass vulnerability. The issue presents itself due to a lack of sufficient sanitization when checking the validity of usernames and passwords supplied to...

Ray Sharp DVR Password Retriever

This module takes advantage of a protocol design issue with the Ray Sharp based DVR systems. It is possible to retrieve the username and password through the TCP service running on port 9000. Other brands using this platform and exposing the same issue may include Swann, Lorex, Night Owl, Zmodo,...

[RT-SA-2011-005] Owl Intranet Engine: Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

RedTeam Pentesting GmbH

Advisory: Owl Intranet Engine: Information Disclosure and Unsalted Password Hashes The Owl Intranet Engine uses no salting in the password hashing procedure. Furthermore, users in the "Administrators" group are able to see the MD5 password hashes of every user using the web interface. Details...

Owl Intranet Engine 1.00 - 'userid' Authentication Bypass

source: https://www.securityfocus.com/bid/51076/info Owl Intranet Engine is prone to an authentication-bypass vulnerability. An attacker can exploit this issue to bypass the authentication process and gain administrative access to the application. Owl Intranet Engine 1.00 is affected; other...

Owl Intranet Engine 1.00 Authentication Bypass

Advisory: Owl Intranet Engine: Authentication Bypass During a penetration test, RedTeam Pentesting discovered an Authentication Bypass vulnerability in the Owl Intranet Engine, which allows unauthenticated users administrative access to the affected systems. Details ======= Product: Owl Intranet...

DEBIAN-CVE-2009-5082

The 1 configure and 2 config.guess scripts in GNU troff aka groff 1.20.1 on Openwall GNU//Linux aka Owl improperly create temporary files upon a failure of the mktemp function, which makes it easier for local users to overwrite arbitrary files via a symlink attack on a temporary file...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

DEBIAN-CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

Buffer overflow

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

Multiple buffer overflows in a BarnOwl before 1.0.5 and b owl 2.1.11 allow remote attackers to execute arbitrary code via vectors involving 1 a crafted zcrypt message, related to zcrypt.c; 2 a reply command on a message with a Zephyr Cc: list, related to zwrite.c; and unspecified other use of the...

CVE-2009-0363

CVE-2009-0363 affects BarnOwl prior to 1.0.5 and Owl prior to 2.1.11. Multiple buffer overflows could allow remote code execution via (1) crafted zcrypt messages (zcrypt.c) or (2) a reply command on a message with a Zephyr Cc: list (zwrite.c), plus unspecified other uses. No patch/version fix is ...