Oracle Document Capture empop3.dll Insecure Methods

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting, File deleting Exploits: YES...

Multiple Vulnerabilities in ViArt Shop

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ViArt Shop which could be exploited to perform cross-site scripting and cross-site request forgery attacks. 1 Cross-site scripting XSS vulnerability in ViArt Shop The vulnerability exists due to input sanitation...

IGNOU Website SQL Injection

IGNOU currently serves approximately 3.8 million students in India and 40 countries abroad in twenty one schools and a network of 59 regional centres, 7 sub-regional centres, 2600 study centres, and 52 overseas centres. IGNOU website is somehow vulnerable to SQL Injection & Weak Authentication...

Multiple Vulnerabilities in ReOS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in ReOS which could be exploited to perform SQL injection attacks and compromise vulnerable system. 1 SQL injection vulnerabilities in ReOS 1.1 The vulnerability exists due to input sanitation errors in the...

After A Lull, Botnets Back In Business

After a lull in the fourth quarter of 2010, spam appears to be back in full force, according to reports from both Websense, Commtouch and Symantec Corp.Spam volume was up 45% in the first half of January after diving in Q4 according to a Commtouch spam report. Reports show the recently dormant...

CVE-2010-2599

Unspecified vulnerability in Research In Motion RIM BlackBerry Device Software before 6.0.0 allows remote attackers to cause a denial of service browser hang via a crafted web page...

CVE-2010-2599

The CVE-2010-2599 entry affects BlackBerry Device Software older than 6.0.0, where the browser can be brought to a partial DoS by viewing a crafted web page. TEHTRI-Security/SECURITYVULNS:DOC:25534 indicates a patch was released by BlackBerry to address this vulnerability (Browser DoS). The under...

RIM Issues Fix For Remote Bug in BlackBerry Enterprise Server

Research in Motion, the maker of the BlackBerry devices and software, has released a patch for a flaw in its BlackBerry Enterprise Server software that could enable an attacker to execute arbitrary code on an affected server. The vulnerability in the BES software specifically lies in the PDF...

Microsoft Data Access Components - Remote Overflow (MS11-002)

.body test // This code has been released under the Q Public License by Trolltech // http://en.wikipedia.org/wiki/QPublicLicense // Source: http://vreugdenhilresearch.nl/ms11-002-pwn2own-heap-overflow/ var StartTime = new Date; var FinalHeapSpraySize = 900; //var SmallHoleSize = 0x1F0; var...

Multiple Vulnerabilities in Pivotx

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Pivotx which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Pivotx: CVE-2011-0772 1.1 The vulnerability...

Mobile Device Users More Susceptible to Phishing Scams

Mobile devices are making us dumber – at least when it comes to security, according to research conducted by security firm Trusteer. Research published by the company found that smartphone and computer tablet users are three times more susceptible to email phishing scams than traditional PC and...

PT-2011-45: Denial of Service in SAP

The specialists of the Positive Research center have detected "Denial of Service" vulnerability in SAP. A vulnerability has been reported in the SAP DIAG protocol parser, which can be exploited by attackers to cause a denial of service. How to fix Update your software up to the latest version...

Secunia Research: Microsoft Office FlashPix Property Set Parsing Buffer Overflow

====================================================================== Secunia Research 14/12/2010 - Microsoft Office FlashPix Property Set Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft Office FlashPix Tile Data Two Buffer Overflows

====================================================================== Secunia Research 14/12/2010 - Microsoft Office Two FlashPix Tile Data Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Microsoft Office PICT Filter Integer Truncation Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office PICT Filter Integer Truncation Vulnerability - ====================================================================== Table of Contents Affected...

Authentication Bypass Vulnerability in phpMySport

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in phpMySport which could be exploited to bypass authentication mechanisms and gain access to the application. 1 Authentication bypass vulnerability in phpMySport The vulnerability exists due to insufficient...

Secunia Research: Microsoft Office TIFF Image Converter Endian Conversion Vulnerability

====================================================================== Secunia Research 14/12/2010 - Microsoft Office TIFF Image Converter - - Endian Conversion Vulnerability - ====================================================================== Table of Contents Affected...

Cross-site Scripting (XSS) Vulnerability in WonderCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...

Sybase Afaria 6.0 Cross Site Request Forgery

nSense Vulnerability Research Security Advisory NSENSE-2010-004 --------------------------------------------------------------- Affected Vendor: SAP Affected Product: Sybase Afaria 6.0 Platform: Windows Impact: User assisted code execution via CSRF Vendor response: Patch CVE: None Credit: Knud...

Secunia Research: Microsoft Office TIFF Image Converter Two Buffer Overflows

====================================================================== Secunia Research 14/12/2010 - Microsoft Office TIFF Image Converter Two Buffer Overflows - ====================================================================== Table of Contents Affected...