SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

No description provided by source. Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

SAP GUI 6.4 - ActiveX Accept Remote Buffer Overflow PoC Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer...

SAP GUI 6.4 - ActiveX (Accept) Remote Buffer Overflow (PoC)

Digital Security Research Group DSecRG Advisory DSECRG-09-015 Original Advisory: http://dsecrg.com/pages/vul/show.php?id=115 Application: SAP GUI for Windows, EnjoySAP Versions Affected: Version 6.4 Vendor URL: http://SAP.com Bugs: Buffer Overflow Exploits: YES Reported: 13.11.2008 Vendor respons...

SAP GUI 6.4 ActiveX (Accept) Remote Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ======================================================= SAP GUI 6.4 ActiveX Accept Remote Buffer Overflow PoC ======================================================= Digital Security Research Group DSecRG Advisory DSECRG-09-015 Application: SAP G...

ECShop PHP Code Execution

Securitylab.ir Application Info: Name: ecshop Version: 2.6.2 Website: http://www.ecshop.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: info@securitylabdotir & [email protected] =========================================================== :: integrate.php :: if...

Microsoft warns of dangerous DirectShow flaw, attacks

Microsoft today warned that hackers are using rigged QuickTime media files to exploit an unpatched vulnerability in DirectShow, the APIs used by Windows programs for multimedia support. The company has activated its security response process to deal with the zero-day attacks has issued a pre-patc...

BlackBerry附件服务PDF处理器多个未明安全漏洞

Bugraq ID: 35102 CNCAN ID：CNCAN-2009052702 BlackBerry企业服务器的BlackBerry附件服务组件处理恶意PDF文件时存在多个安全问题，远程攻击者可以利用漏洞以应用服务进程权限执行任意指令，或导致拒绝服务攻击。 攻击者可以通过发送包含特殊构建的PDF文件的EMAIL消息来触发，目前没有详细漏洞细节提供。 Symantec Clientless VPN Gateway 4400 Series 4.0 SP3 Symantec Clientless VPN Gateway 4400 Series 4.0 SP2 Symantec...

Secunia Research: Sun Solaris "sadmind" Buffer Overflow Vulnerability

====================================================================== Secunia Research 23/05/2009 - Sun Solaris "sadmind" Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

LxBlog XSS / SQL Injection

Securitylab.ir Application Info: Name: LxBlog Website: http://www.lxblog.net Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql/Xss Risk: Medium =========================================================...

Namad Cms Remote File Download

Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File Download Vulnerability Risk: Medium Dork: "Copyrigh...

DMXReady Registration Manager 1.1 Shell Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

DMXReady Registration Manager 1.1 - Arbitrary File Upload Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir...

DMXReady Registration Manager 1.1 - Arbitrary File Upload

Securitylab.ir Application Info: Name: DMXReady Registration Manager Version: 1.1 Website: http://www.dmxready.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Arbitrary File Upload Vulnerability Risk...

Research: Password 'secret question' woefully insecure

In research to be presented at the IEEE Symposium on Security and Privacy virginia.edu this week, researchers from Microsoft and Carnegie Mellon University plan to show that the secret questions used to secure the password-reset functions of a variety of websites are woefully insecure. In a study...

Namad (IMenAfzar) 2.0.0.0 - Remote File Disclosure

Namad IMenAfzar 2.0.0.0 - Remote File Disclosure Securitylab.ir Application Info: Name: Namad Version: 2.0.0.0 Website: http://imenafzar.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote File...

MoonCat Information Changer

Securitylab.ir Application Info: Name: MoonCat Website: http://olpkeps.com Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Remote Info Change Risk: Low Dork: "Design by OLPKEPS.COM"...

MaxCMS 2.0 - incajax.asp SQL Injection

MaxCMS 2.0 - incajax.asp SQL Injection Securitylab.ir Application Info: Name: Maxcms Version: 2.0 Discoverd By: Securitylab.ir Website: http://securitylab.ir Contacts: adminatsecuritylab.ir & info@securitylabdotir Vulnerability Info: Type: Sql Injection Risk: Medium...

How to defend against botnet attacks

Botnets have become one of the more insidious threats on the Internet in the last few years. Large-scale botnets such as the Storm, Asprox and Nugache networks have caused tremendous problems by serving as platforms for spamming operations, DDoS attacks and other mischief. In this podcast from...

Secunia Research: Microsoft PowerPoint Atom Parsing Buffer Overflows

====================================================================== Secunia Research 12/05/2009 - Microsoft PowerPoint Atom Parsing Buffer Overflows - ====================================================================== Table of Contents Affected...

Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass

====================================================================== Secunia Research 07/05/2009 - Garmin Communicator Plug-In Domain Locking Security Bypass - ====================================================================== Table of Contents Affected...