OroCRM - Stored XSS Vulnerability

No description provided by source. Affected software: OroCRM is an easy-to-use, open source CRM with built in marketing automation tools for your commerce business. It's the CRM built for both sales and marketing! Discovered by: Provensec Website: http://www.provensec.com Author: Provensec Labs...

Threat Outbreak Alert RuleID11574: Email Messages Distributing Malicious Software on September 16, 2014

Medium Alert ID: 35728 First Published: 2014 September 16 16:17 GMT Version: 1 Summary Cisco Security has detected significant activity related to spam email messages distributing malicious software. Email messages that are related to this threat RuleID11574 may contain the following files: Name ...

Dd-wrt Router Information Disclosure

Remote information disclosure Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Belkin Router Information Disclosure

Remote administrator password Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

WordPress MailPoet Newsletters File Upload

File upload vulnerability in WordPress MailPoet Newsletters wysija-newsletters Plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ManageEngine Desktop Central 9.0.0 File Upload

File upload vulnerability in ManageEngine Desktop Central statusUpdate Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

ManageEngine EventLog Analyzer 9.9 File Upload

File upload vulnerability in ManageEngine EventLog Analyzer agentUpload Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...

Crescendo - Sales CRM Authentication Bypass Vulnerability

Exploit for asp platform in category web applications Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu email protected Vendor Homepag...

Crescendo - Sales CRM SQL Injection

Crescendo - Sales CRM Authentication Bypass Vulnerability Exploit Title: Crescendo - Sales CRM Authentication Bypass Vulnerability Sql Injection Google Dork: N/A Date: July 15 , 2014 Exploit Author: Monendra Sahu [email protected] Vendor Homepage: http://dejavuprotech.com/crecendo.php Test...

Auto Database System 1.0 Infusion Addon SQL injection Vulnerability

No description provided by source. Exploit Title: PHP-Fusion Auto Database System 1.0 Infusion SQL injection Date: 8-2-2011 Author: Saif El-Sherei Software Link: http://www.php-fusion.co.uk/infusions/addondb/view.php?addonid=146 Version: Auto Database System 1.0 Infusion, PHP-fusion 7.01..03 Test...

OSI Codes PHP Live! Support 3.1 - Remote File Inclusion Vulnerability

No description provided by source. ? Homepage : http://www.indonesiancoder.com ? Location : INDONESIA ? Vendor : http://www.phplivesupport.com/ ? Describe : PHP Live! Support v3.1 c by OSI Codes Inc. Chat with your website visitors with PHP Live! Provide Live Support on your Website Increase your...

AlienVault OSSIM av-centerd Util.pm RCE

Remote code execution vulnerability in AlienVault OSSIM av-centerd Util.pm Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...

FTC Asking DEF CON to Help Catch Robocallers

The United States Federal Trade Commission is sick and tired of illegal robocalling, and it’s hosting a contest this year at the DEF CON hacker conference in Las Vegas in an attempt to do something about it. The consumer protection agency’s weariness likely stems from the more than 150,000...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

CVE-2014-2199

meetinginfo.do in Cisco WebEx Event Center, WebEx Meeting Center, WebEx Sales Center, WebEx Training Center, WebEx Meetings Server 1.5.1.131 and earlier, and WebEx Business Suite WBS 27 before 27.32.31.16, 28 before 28.12.13.18, and 29 before 29.5.1.12 allows remote attackers to obtain sensitive...

PHP-Fusion 7.02.05 downloads.php SQL Injection

SQL Injection vulnerability in PHP-Fusion downloads.php orderby Parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Zabbix httpmon.php SQL Injection

SQL Injection vulnerability in OpenEMR Zabbix httpmon.php applications parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

Wordpress Search Everything SQL Injection

SQL Injection vulnerabilty in Wordpress Search Everything plugin Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

pfSense Snort File Disclosure

File disclosure vulnerability in snortlogview.php Vulnerability Type: File Disclosure For the exploit source code contact DSquare Security sales team...

Hardware Maker LaCie Admits Yearlong Data Breach

The French computer hardware company LaCie, perhaps best known for their external hard drives, announced this week it fell victim to a data breach that may have put at risk the sensitive information of anyone who has purchased a product off their website during the last year. According to an...