VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability (CVE-2010-2558)

VUPEN Security Research - Microsoft Internet Explorer "CIframeElement" Object Use-after-free Vulnerability CVE-2010-2558 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Microsoft Internet Explorer is a web browser developed by Microsoft and included as part of the...

Secunia Research: glpng PNG Processing Two Integer Overflow Vulnerabilities

====================================================================== Secunia Research 11/08/2010 - glpng PNG Processing Two Integer Overflow Vulnerabilities - ====================================================================== Table of Contents Affected...

Cross-site Request Forgery (CSRF) Vulnerabilities in Webmatic

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Webmatic which could be exploited to perform cross-site request forgery attacks. 1 Cross-site request forgery CSRF in Webmatic 1.1 The vulnerability exists due to insufficient validation of the request origin in...

Secunia Research: MantisBT "Add Category" Script Insertion Vulnerability

====================================================================== Secunia Research 05/08/2010 - MantisBT "Add Category" Script Insertion Vulnerability - ====================================================================== Table of Contents Affected...

Mini-stream Ripper v3.1.2.1 Buffer Overflow (DEP Bypass)

Exploit for windows platform in category local exploits ======================================================== Mini-stream Ripper v3.1.2.1 Buffer Overflow DEP Bypass ======================================================== / DISCLAIMER THIS PROGRAM IS NOT INTENDED TO BE USED ON OTHER COMPUTERS...

MySQL 3 Error Based SQLi

Ну, собственно, как я уже писал в теме "Шпаргалка", помимо запросов, предложенных Qwazar Код: union select 1,count,concatselect pass from users limit 1,0x3a,floorrand02 x from users group by x and row1,1select+count,concatselect pass from users limit 1,0x3a,floorrand02 x from users group by x lim...

Insomnia : ISVA-100730.1 - CMS Multiple SQL injection Vulnerabilities

Insomnia Security Vulnerability Advisory: ISVA-100730.1 Name: EasyManage CMS Multiple SQL injection Vulnerabilities Released: 30 July 2010 Vendor Link: http://www.face.co.nz/easymanage Affected Products: Easy Manage CMS Original Advisory: http://www.insomniasec.com/advisories/ISVA-100730.1.htm...

Vulnerability Broker Draws Line in Disclosure Sand

Looking to put pressure on software vendors who procrastinate on fixing security flaws, the world’s biggest broker of vulnerability data is drawing a line in the sand. Starting August 4, TippingPoint’s Zero Day Initiative ZDI will enforce a six-month deadline for patches on all vulnerabilities...

Cross-site Request Forgery (CSRF) in pimcore

High-Tech Bridge SA Security Research Lab has discovered vulnerability in pimcore which could be exploited to perform cross-site request forgery attacks. 1 Cross-site Request Forgery CSRF in pimcore The vulnerability exists due to insufficient validation of the request origin in...

Secunia Research: Autonomy KeyView wkssr.dll Floating Point Conversion Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll - - Floating Point Conversion Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView rtfsr.dll RTF Parsing Signedness Error - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView wkssr.dll String Indexing Vulnerability

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll String Indexing Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView Compound File Parsing Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView Compound File Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView wkssr.dll Integer Underflow Vulnerability

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll Integer Underflow Vulnerability - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wosr.dll Data Block Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows

====================================================================== Secunia Research 28/07/2010 - Autonomy KeyView wkssr.dll Record Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Multiple Vulnerabilities in CMS Source

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in CMS Source, which could be exploited to perform cross-site scripting and SQL Injection attacks and compromise vulnerable system. 1 Cross-site scripting XSS vulnerabilities in CMS Source 1.1 The vulnerability exis...

Multiple Cross-site Scripting (XSS) Vulnerabilities in allinta CMS

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in allinta CMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerabilities in allinta CMS 1.1 The vulnerability exists due to input sanitation error in the "langURL"...

[DSECRG-09-068] SAP NetWaver SLD - multiple XSS

Digital Security Research Group DSecRG Advisory DSecRG-09-068 Application: SAP NetWeaver SLD Versions Affected: 6.4 - 7.02 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 14.12.2009 Vendor response: 15.12.2009 last response: 06.05.2010 Date of Public Advisory: 13.07.2010 CVE-number:...

SAP Netweaver 6.4 - 7.0 Cross Site Scripting

Digital Security Research Group DSecRG Advisory DSECRG-09-040 Application: SAP Netweaver Versions Affected: Version 6.4 - 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 26.05.2009 Vendor response: 27.05.2009 Date of Public Advisory: 13.07.2010 CVE-number: Author: Alexandr Polyak...