XSS vulnerability in Spitfire

Vulnerability ID: HTB22485 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinspitfire2.html Product: Spitfire Vendor: Claus Muus http://spitfire.clausmuus.de/ Vulnerable Version: 1.0.336 and Probably Prior Versions Vendor Notification: 08 July 2010 Vulnerability Type: XSS Cross Site...

Wireless and Wired Network Interceptor: the Interceptor

The Interceptor is a wireless wired network tap. Basically, a network tap is a way to listen in to network traffic as it flows past. I haven’t done extensive research but all the ones I found when looking passed the copy of the traffic onto a specified wired interface which was then plugged into ...

XSRF (CSRF) in Pixie

Vulnerability ID: HTB22471 Reference: http://www.htbridge.ch/advisory/xsrfcsrfinpixie1.html Product: Pixie Vendor: Toggle Labs Ltd http://www.getpixie.co.uk/ Vulnerable Version: 1.0.4 and Probably Prior Versions Vendor Notification: 01 July 2010 Vulnerability Type: CSRF Cross-Site Request Forgery...

Saint Corporation Cross Site Scripting / HTML Injection

SAINT Corporation XSS Defacement Vulnerability Management, Assessment, Penetration Testing SAINT Corporation provides network security tools to financial, government and educational institutions around the world SAINT customers. The SAINT® vulnerability assessment tools are recognized as industry...

PsNews 1.3 - SQL Injection

Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...

PsNews 1.3 SQL Injection

Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==- http://www.site.com/path/ndetail.php?id=SQL1...

PsNews v1.3 SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================= PsNews v1.3 SQL Injection Vulnerability ======================================= Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor :...

PsNews 1.3 - SQL Injection

PsNews 1.3 - SQL Injection Exploit Title : PsNews Sql Injection Vulnerability Date : 6 - 7 - 2010 Author : S.W.T Vendor : http://www.psnews.sourceforge.net Version : 1.3 Tested on : Linux & Windows Home : WwW.SeC-WaR.CoM -== SQL Injection Vulenrability ==-...

SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite

Exploit for windows platform in category remote exploits ================================================= SasCam WebCam Server v2.6.5 ActiveX SEH Overwrite ================================================= 'SEH Overwrite exploited by Blake 'Original EIP method by callAX 'Tested on XP SP3/IE7 in...

Grafik CMS 1.1.2 Cross Site Scripting

Vulnerability ID: HTB22439 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityingrafikcms1.html Product: Grafik CMS Vendor: GrafikPower Vulnerable Version: 1.1.2 and Probably Prior Versions Vendor Notification: 14 June 2010 Vulnerability Type: XSS Cross Site Scripting Status: Not Fixed,...

Placeto CMS SQL Injection

Exploit Title : Placeto CMS Auth. Bypass Vulnerability Date : 15 - 5 - 2010 Author : S.W.T Version : All Versions Tested on : Linux Home : WwW.SeC-WaR.CoM Go To The Admin Panel , And Enter The Following Username = or'1'='1' Password = S.W.T This Is Security War Team Penetration Testing & Ethical...

Placeto CMS Auth. Bypass Vulnerability

Exploit for php platform in category web applications ====================================== Placeto CMS Auth. Bypass Vulnerability ====================================== Exploit Title : Placeto CMS Auth. Bypass Vulnerability Date : 15 - 5 - 2010 Author : S.W.T Vendor : www.blahertech.org Version...

XSS vulnerability in Scribe CMS

Vulnerability ID: HTB22422 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinscribecms2.html Product: Scribe CMS Vendor: Sigmer Technologies Vulnerable Version: Current at 03.06.2010 and Probably Prior Versions Vendor Notification: 07 June 2010 Vulnerability Type: XSS Cross Site...

[MajorSecurity SA-075]CMS RedAks 2.0 - SQL injection vulnerability

MajorSecurity SA-075CMS RedAks 2.0 - SQL injection vulnerability Details ============= Product: CMS RedAks v.2.0 Security-Risk: high Remote-Exploit: yes Vendor-URL: http://www.redaks.com/ Advisory-Status: published Credits ============= Discovered by: David Vieira-Kurz of MajorSecurity Original...

Alex Horan on Penetration Testing and the Business of Security

Dennis Fisher talks with Alex Horan of Core Security about penetration testing, the place of security within a business and Core’s new push to make security more accessible and understandable for business leaders. Podcast audio courtesy of sykboy65 Subscribe to the Digital Underground podcast on...

CMS RedAks 2.0 - SQL Injection vulnerability

Exploit for php platform in category web applications ============================================ CMS RedAks 2.0 - SQL Injection vulnerability ============================================ Details ============= Product: CMS RedAks v.2.0 Security-Risk: high Remote-Exploit: yes Vendor-URL:...

[MajorSecurity SA-069]Invision Power Board - stored Cross site Scripting

MajorSecurity SA-069Invision Power Board - stored Cross site Scripting Details ======= Product: Invision Power Board Security-Risk: moderated Remote-Exploit: yes Vendor-URL: http://www.invisionpower.com Vendor-Status: informed Advisory-Status: published Credits ============ Discovered by: David...

Q&A: HD Moore on Metasploit, Disclosure and Ethics

We conducted our third live chat this week, this one with HD Moore, the founder of the Metasploit Project and the CSO of Rapid7. Moore got a lot of great questions on a wide variety of topics, so if you weren’t able to join us, here’s a full transcript of the chat. Dennis Fisher: Hi everyone, and...

Making Penetration Testing Mainstream

HD Moore, the founder of the Metasploit Project and now the CSO of Rapid7, talks at the SOURCE conference in Boston about the mainstream acceptance and importance of penetration testing...

Fedora Update for dsniff FEDORA-2010-5535

Check for the Version of dsniff OpenVAS Vulnerability Test Fedora Update for dsniff FEDORA-2010-5535 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...