CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

PHP-Fusion 7.02.05 downloads.php SQL Injection

SQL Injection vulnerability in PHP-Fusion downloads.php orderby Parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Zabbix httpmon.php SQL Injection

SQL Injection vulnerability in OpenEMR Zabbix httpmon.php applications parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Wordpress Search Everything SQL Injection

SQL Injection vulnerabilty in Wordpress Search Everything plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

pfSense Snort File Disclosure

File disclosure vulnerability in snortlogview.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Hardware Maker LaCie Admits Yearlong Data Breach

The French computer hardware company LaCie, perhaps best known for their external hard drives, announced this week it fell victim to a data breach that may have put at risk the sensitive information of anyone who has purchased a product off their website during the last year. According to an...

vtiger CRM 6.0 RC RCE

Remote command execution vulnerability in vtiger CRM Install Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder LFI

Local file include vulnerability in vtiger CRM kcfinder component Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...

vTiger CRM 5.4.0 kcfinder File Upload

File upload vulnerability in vtiger CRM kcfinder component Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Threat Outbreak Alert: Fake Sales Notification Email Messages on March 21, 2014

Medium Alert ID: 33467 First Published: 2014 March 24 13:26 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales notification for the recipient. The text in the email message attempts to convince the recipient to open...

Seportal 2.5 SQLi

SQL injection in staticpages.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 get_tickets_list SQLi

SQL Injection vulnerability in vtiger CRM getticketslist SOAP method in /soap/customerportal.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

vtiger CRM 5.4.0 File Upload

File upload vulnerability in vtiger CRM SOAP AddEmailAttachment service Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Joomla 3.2.2 mod_tags_similar SQL Injection

SQL Injection vulnerability in Joomla 3.2.2 modtagssimilar/helper.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

webERP 4.11.3 - 'SalesInquiry.php?SortBy' SQL Injection

============================================================== Title ...| SQL Injection in webERP Version .| 4.11.3 Date ....| 28.02.2014 Found ...| HauntIT Blog Home ....| http://www.weberp.org ==============================================================...

Threat Outbreak Alert: Fake Sales Document Notification Email Messages on February 24, 2014

Medium Alert ID: 33022 First Published: 2014 February 25 19:02 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales document for the recipient. The text in the email message attempts to convince the recipient to open...

Threat Outbreak Alert: Fake Sales Document Notification Email Messages on February 24, 2014

Medium Alert ID: 33021 First Published: 2014 February 25 19:00 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages that claim to contain a sales document for the recipient. The text in the email message attempts to convince the recipient to open...

php_address_book authentication SQL injection

SQL Injection vulnerability in PHP Address Book Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

appRain 3.0.2 SQL Injection

SQL Injection vulnerability in appRain Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Bugging the Bug Market

PUNTA CANA–The Microsoft bug bounty program, started last year as a way to encourage researchers to develop new offensive and defensive techniques, has been a success so far and the company is looking for new ways to expand it in the future. Katie Moussouris, the security strategist at Microsoft...