SAP NetWeaver Administrator Panel ECC 6.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory Application: SAP NetWeaver Administrator panel Versions Affected: SAP NetWeaver Administrator panel from ECC 6.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 07.09.2009 Vendor response: 08.09.2009 Date of Public Advisory: 09.11.2010...

Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit

No description provided by source. Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also shorter shellcode than what you have...

Cross-site Scripting (XSS) Vulnerability in WPTouch Wordpress Plugin

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WPTouch Wordpress Plugin which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WPTouch Wordpress Plugin: CVE-2010-4779 The vulnerability exists due to input sanitation...

Multiple Vulnerabilities in Eclime

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Eclime which could be exploited to perform cross-site scripting and SQL injection attacks. 1 Cross-site scripting XSS vulnerability in Eclime: CVE-2010-4852 The vulnerability exists due to input sanitation error ...

Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit

Exploit for Android platform in category remote exploits ============================================================== Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit ============================================================== Exploit Title: Android 2.0/2.1 Use-After-Free Remot...

Image of the Day: Dissecting The ZeroAccess Crimeware

We know a lot about the effects of malicious programs like rootkits and Trojan downloaders. The job of finding out exactly how the programs work, however, is painstaking. That’s because most malware authors worth their salt take steps to make their creations hard to understand. Code obfuscation a...

Ears Perk Interest As New Biometric Identifier

There’s more to ears than meets the eye, at least according to recently released report by UK researchers, which finds that ear shape may be a more reliable measure of individuality than the widely-used fingerprint. Ear shape is gaining new ground to become a credible biometric, according to the...

Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit

Google Android 2.02.1 - Use-After-Free Remote Code Execution on Webkit Exploit Title: Android 2.0/2.1 Use-After-Free Remote Code Execution on Webkit Date: 14/11/2010 Author: Itzhak Avraham, mj Tested on: Droid 2.1 CVE : CVE-2010-1807 Better exploit better rate and more flexible for changes, also...

Secunia Research: Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability

====================================================================== Secunia Research 09/11/2010 - Microsoft PowerPoint PP7X32.DLL Record Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution

Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis Provencher Protek Research Lab's WebSite:...

Secunia Research: Microsoft Office Drawing Shape Container Parsing Vulnerability

====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affected...

Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution

Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Author: Francis Provencher Protek Research Lab's Blog:...

Novell Groupwise Internet Agent IMAP LIST LSUB Code Execution

Exploit for linux platform in category dos / poc ===================================================================== Novell Groupwise Internet Agent IMAP LIST LSUB Command Code Execution ===================================================================== Application: Novell Groupwise Internet...

Microsoft Office Drawing Shape Container Parsing Vulnerability

No description provided by source. ====================================================================== Secunia Research 09/11/2010 - Microsoft Office Drawing Shape Container Parsing Vulnerability - ====================================================================== Table of Contents Affecte...

Novell Groupwise Internet Agent IMAP LIST Command Code Execution

Exploit for linux platform in category dos / poc ======================================================================= Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution ======================================================================= Application: PRL Novell Groupwis...

Barracuda Networks Launches Bug Bounty Program

Following the lead of Mozilla and Google, Barracuda Networks is launching a bug bounty program that will pay out cash rewards for vulnerabilities found in the company’s own products. The move by Barracuda, a maker of mail security and data protection products, is the first such bug bounty program...

Insecure Loading of Dynamic Link Libraries in Windows Applications

US-CERT is aware of a class of vulnerabilities related to how some Windows applications may load external dynamic link libraries DLLs. When an application loads a DLL without specifying a fully qualified path name, Windows will attempt to locate the DLL by searching a defined set of directories. ...

Novell Groupwise Internet Agent - IMAP LIST Remote Code Execution

Novell Groupwise Internet Agent - IMAP LIST Remote Code Execution Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Autho...

Novell Groupwise Internet Agent - IMAP 'LIST' Remote Code Execution

Application: PRL Novell Groupwise Internet Agent IMAP LIST Command Remote Code Execution Vulnerability Platforms: Linux Exploitation: Remote code execution CVE Number: Pending Novell TID: 7007151 ZeroDayInitiative: ZDI-10-242 Author: Francis Provencher Protek Research Lab's Blog:...

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution

Novell Groupwise Internet Agent - IMAP LIST LSUB Remote Code Execution Application: Novell Groupwise Internet Agent IMAP LIST LSUB Command Remote Code Execution Vulnerability Platforms: SLES 10 SP3 GroupWise 8.0.2 Exploitation: Remote code execution CVE Number: Novell TID: 7007157 Author: Francis...