ASPSiteware Project Reporter 1.0 SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Demo Link:http://www.aspsiteware.com/Project/ Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to:...

ASPSiteWare Project Reporter - SQL Injection

Author: R4dc0re Exploit Title: ASPSiteware Project Reporter SQL injection Vulnerability Date: 04-12-2010 Vendor or Software Link: www.aspsiteware.com Category:WebApp Version:1.0 Price:50$ Contact: [email protected] Website: www.1337db.com Greetings to: R0073r1337db.com, L0rd CrusAd3r,Sid3^effects...

A Closer Look At ATM Skimmers

Security reporter Brian Krebs goes visual with ATM skimmers, asking readers to look at images and see if they would be able to tell the difference between a real ATM card reader and actual skimming devices. Read the full article. KrebsonSecurity.com...

WinMount 3.4.1020 Final Commandline Vulnerability

Exploit for windows platform in category local exploits ================================================= WinMount 3.4.1020 Final Commandline Vulnerability ================================================= Exploit Title : Commandline vulnerability Date : 27 Oct 2010 Author : STRELiTZIA Software :...

Design/Logic Flaw

VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server CPS 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager NOM 6.0 GA through 6.5.5; Veritas Backup Reporter VBR 6.0 GA through 6.6; Veritas Storage Foundation SF 3.5; Veritas Storage Foundation for Windows High...

CVE-2009-3027: Improper Authentication

VRTSweb.exe in VRTSweb in Symantec Backup Exec Continuous Protection Server CPS 11d, 12.0, and 12.5; Veritas NetBackup Operations Manager NOM 6.0 GA through 6.5.5; Veritas Backup Reporter VBR 6.0 GA through 6.6; Veritas Storage Foundation SF 3.5; Veritas Storage Foundation for Windows High...

Issue security based on workflow status

I would be great if permission types could be associated with workflow status. What we would like to do is limit the ability to edit an issue by the reporter to a specific workflow status. Using the issue security scheme is not possible since the reporter should always be allowed to view the issu...

HP OpenView Reporter / HP OpenView Performance Agent DoS

No description provided...

[security bulletin] HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service (DoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01612418 Version: 1 HPSBMA02391 SSRT071481 rev.1 - HP OpenView Reporter and HP Reporter Running on Windows, Remote Denial of Service DoS NOTICE: The information in this Security Bulletin should b...

joomlaprodesk-lfi.txt

------------------------------------------------------------------------------------------------------- Joomla Component ProDesk v 1.0 AND 1.2 comprodesk&includefile Local File Inclusion Vulnerability http://joomlashowroom.com/index.php/Pro-Desk-Support-Center/Pro-Desk-Support-Center.html...

CVE-2007-4349

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

CVE-2007-4349: Undefined Security Weakness

The Shared Trace Service aka OVTrace in HP Performance Agent C.04.70 aka 4.70, HP OpenView Performance Agent C.04.60 and C.04.61, HP Reporter 3.8, and HP OpenView Reporter 3.7 aka Report 3.70 allows remote attackers to cause a denial of service via an unspecified series of RPC requests aka Trace...

CVE-2008-4646

The CVE concerns the Websense Reporter Module in Websense Enterprise 6.3.2. Affected component: Websense Reporter Module; vulnerability: the SQL database system administrator password is stored in plaintext in CreateDbInstall.log. Root cause: credentials are written to a log file, exposing the pa...

CVE-2008-4646: Undefined Security Weakness

The Websense Reporter Module in Websense Enterprise 6.3.2 stores the SQL database system administrator password in plaintext in CreateDbInstall.log, which allows local users to gain privileges to the database...

Websense Reporter模块CreateDbInstall.log本地信息泄露漏洞

BUGTRAQ ID: 31746 Websense是业界领先的Web安全和网页过滤解决方案。 在安装过程中如果Websense Reporter Server上存在本地SQL Server的话，安装程序就会在CreateDbInstall.log日志文件中以明文存储管理员口令。本地用户可以通过访问安装目录中的这个zip格式口令获得敏感信息。 Websense Enterprise 6.3.2 临时解决方法： 删除CreateDbInstall.log日志文件。 厂商补丁： Websense -------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Blue Coat Reporter Default admin Credentials

Binary data 4701.prm...

Blue Coat Reporter Detection

Binary data 4700.prm...

Blue Coat Reporter Default Password (admin) for 'admin' Account

Nessus could gain administrative access to the Blue Coat Reporter install on the remote host using 'admin' for both the username and password. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid34346; scriptversion"$Revision: 1.8 $"; scriptcvsdate"$Date: 2013/01/25...

Blue Coat Reporter Detection

The remote host is running Blue Coat Reporter, a web reporting system for monitoring centralized logs from Blue Coat appliances. And this service is used to access the application. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid34334; scriptversion"1.10";...

[security bulletin] HPSBMA02238 SSRT061260 rev.1 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c01109617 Version: 1 HPSBMA02238 SSRT061260 rev.1 - HP OpenView Reporter Running Shared Trace Service, Remote Arbitrary Code Execution NOTICE: The information in this Security Bulletin should be...