iPower CMS SQL Injection

Securitylab.ir Application Info: Name: iPower CMS Website: http://www.dingwei.cn Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql injection Risk: Medium...

Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Integer Underflow - ====================================================================== Table of Contents Affected...

Secunia Research: OpenOffice.org Word Document Table Parsing Buffer Overflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Buffer Overflow - ====================================================================== Table of Contents Affected...

Secunia Research: OpenOffice.org Word Document Table Parsing Integer Underflow

====================================================================== Secunia Research 01/09/2009 - OpenOffice.org Word Document Table Parsing Integer Underflow - ====================================================================== Table of Contents Affected...

Code injection

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

A certain ActiveX control in lnresobject.dll 7.1.1.119 in the Research In Motion RIM Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11 allows remote attackers to cause a denial of service Internet Explorer crash by referencing the control's CLSID in the classid attribute of an OBJECT...

CVE-2009-3038

The CVE-2009-3038 issue affects the ActiveX control in lnresobject.dll 7.1.1.119 used by the Research In Motion (RIM) Lotus Notes connector for BlackBerry Desktop Manager 5.0.0.11. The vulnerability allows remote attackers to cause a denial of service (Internet Explorer crash) by referencing the ...

QuarkMail Local File Inclusion

Securitylab.ir Application Info: Name: QuarkMail Website: http://www.ipmotor.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Local File Inclusion Risk: Medium...

80% of Web Users Running Unpatched Versions of Flash/Acrobat

From ZDNet Dancho Danchev According to a research published by Trusteer earlier this month, 79.5% of the 2.5 million users of their Rapport security service run a vulnerable version of Adobe Flash, with 83.5% also running a vulnerable version of Acrobat. The company has also criticized Adobe by...

Cerberus FTP 3.0.1 - ALLO Remote Overflow Denial of Service (Metasploit)

Cerberus FTP 3.0.1 - ALLO Remote Overflow Denial of Service Metasploit Application: Cerberus FTP 3.0.1 Platforms: Windows XP Professional SP2 crash: N/A Exploitation: remote DoS Date: 2009-08-24 Author: Francis Provencher Protek Research Lab's 1 Introduction 2 Technical details 3 The Code...

TCPDB 3.8 Remote Content Change Bypass Vulnerabilities

Exploit for unknown platform in category web applications ====================================================== TCPDB 3.8 Remote Content Change Bypass Vulnerabilities ====================================================== Application Info: Name: TCPDB Version: 3.8 Website: http://www.tcpdb.com/...

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service

Lotus note connector for BlackBerry Manager 5.0.0.11 - ActiveX Denial of Service Application: Lotus note connector for Blackberry Manager 5.0.0.11 And maybe other application that use it.. Platforms: Windows XP Professional French SP2 and SP3 crash: IE 8.0.6001.18702 IE 6.0.2900.2180 Exploitation...

Botmasters Holding Summer Clearance Sale

How much does a bot cost these days? Like everything else in our economy, the price of a bot-infected PC fluctuates significantly, based on supply, demand, volume purchased and any number of other factors. But according to research done by the folks at Cisco, bots can be had for as little as 10...

Adobe JRun 4 - logfile (Authenticated) Directory Traversal

Adobe JRun 4 - logfile Authenticated Directory Traversal Digital Security Research Group DSecRG Advisory DSECRG-09-052 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reporte...

[DSECRG-09-022] Adobe Coldfusion 8 Multiple Linked XSS Vulnerabilies

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

Adobe Coldfusion 8 XSS / XSRF

http://www.dsecrg.com/pages/vul/show.php?id=122 Digital Security Research Group DSecRG Advisory DSECRG-09-022 Application: Adobe Coldfusion 8 Versions Affected: Adobe Coldfusion 8 Vendor URL: http://adobe.com Bugs: Multiple Linked XSS,XSRF Exploits: YES Reported: 12.01.2009 Vendor response:...

Discuz 6.0 SQL Injection

Securitylab.ir Application Info: Name: Discuz Version: 6.0 Website: http://www.discuz.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Vulnerability Risk: Medium Dork: © 2008 - 2009...

SAP NetWeaver Cross Site Scripting

http://www.dsecrg.com/pages/vul/show.php?id=133 Digital Security Research Group DSecRG Advisory DSECRG-09-033 Application: SAP NetWeaver Application Server Java Versions Affected: Version 7.0 Vendor URL: http://SAP.com Bugs: XSS Exploits: YES Reported: 18.03.2009 Vendor response: 19.03.2009 Date ...

Joe Grand on the DEFCON Badge, Hacking Parking Meters and the Hazards of Security Research

Dennis Fisher talks with Joe Grand of Grand Idea Studio about the design for this year’s DEFCON badge, the secret feature he added that no one has uncovered yet and his research on hacking smart parking meters. Download SHOW NOTES: Hacking The Defcon 2009 Badge Subscribe to the Digital Undergroun...

CVE-2009-2643

Multiple unspecified vulnerabilities in the PDF distiller in the Attachment Service component in Research In Motion RIM BlackBerry Enterprise Server BES software 4.1.3 through 5.0 and BlackBerry Professional Software 4.1.4 allow user-assisted remote attackers to cause a denial of service memory...