CYBSEC Release: SAP Security - Paper & Tool release

I am proud to announce the release of a White-paper and an open-source tool, both addressing security of SAP R/3 systems. The paper describes vulnerabilities discovered in the SAP RFC interface implementation and library, as well as some attacks that can be performed over SAP systems. The tool,...

Unfixed XSS vulnerability at www.webhost4life.com

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.webhost4life.com, which at the time of submission ranked 16660 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.equipmenttrader.nl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.equipmenttrader.nl, which at the time of submission ranked 5125603 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It...

Unfixed XSS vulnerability at www.truckworld.pl

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.truckworld.pl, which at the time of submission ranked 2014416 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at direct.formas.se

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting direct.formas.se, which at the time of submission ranked 2378829 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Fixed XSS vulnerability at homer.med.ualberta.ca

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting homer.med.ualberta.ca, which at the time of submission ranked 6255 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.trucks-de.eu

Security researcher St@R-gaZ3r, has submitted on 03/11/2007 a cross-site-scripting XSS vulnerability affecting www.trucks-de.eu, which at the time of submission ranked 977389 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

CVE-2007-1192

CVE-2007-1192 affects HyperBook Guestbook 1.30. The issue is improper access control: sensitive data is stored under the web root, enabling a remote attacker to directly download the admin password hash from data/gbconfiguration.dat. This constraint is evidenced across multiple sources in the con...

CVE-2007-1192

Thomas R. Pasawicz HyperBook Guestbook 1.30 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download an admin password hash via a direct request for data/gbconfiguration.dat...

Unfixed XSS vulnerability at www.w-hotspots.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.w-hotspots.gr, which at the time of submission ranked 4506952 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Unfixed XSS vulnerability at www.papasotiriou.gr

Security researcher St@R-gaZ3r, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.papasotiriou.gr, which at the time of submission ranked 50005 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...

Buffer overflow

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

CVE-2007-0670

Buffer overflow in bos.rte.libc in IBM AIX 5.2 and 5.3 allows local users to execute arbitrary code via the "r-commands", possibly including 1 rdist, 2 rsh, 3 rcp, 4 rsync, and 5 rlogin...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.hnms.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hnms.gr, which at the time of submission ranked 68928 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

Unfixed XSS vulnerability at www.hospo.com

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.hospo.com, which at the time of submission ranked 2832727 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is...

Unfixed XSS vulnerability at www.vres.gr

Security researcher St@R-gaZ3r, has submitted on 01/11/2007 a cross-site-scripting XSS vulnerability affecting www.vres.gr, which at the time of submission ranked 32854 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 04/11/2007. It is currently...

rediffbol.txt

Rediff Bol Downloader Allows Downloading and Spawning Arbitary Files Affected Program : Rediff Bol Download ActiveX ActiveX OCX Control that downloads the Rediff Bol Messenger setup and spawns it. Related URL : http://messenger.rediff.com/newbol/ Discovered by : Gregory R. Panakkal Vulnerability...