3466 matches found
Seportal SQLi
Blind SQL injection in redirect.php Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...
Chaouki Bekrar: The Man Behind the Bugs
VANCOUVER–Say what you will about Chaouki Bekrar, but the man is nothing if not frank. Bekrar, who is the public face of the VUPEN team that has been toying with the Pwn2Own contest this week, has become a lightning rod in the debate over exploit sales, and from all outward appearances, he couldn...
An End to Offensive Security Research? Unlikely
Many industries tend to run in identifiable cycles. Financial services, the auto industry, entertainment–they all have cycles. Because the security industry isn’t nearly as old as any of these, it hasn’t had much of a chance to establish such cycles. But one seems to be appearing now in the form ...
Extcalendar RFI
Remote file inclusion via mosConfigabsolutepath Vulnerability Type: Remote File Include For the exploit source code contact DSquare Security sales team...
用友ICC网站客服系统远程代码执行漏洞
简要描述： 全部采用用友ICC客服系统,上线前没有做严格测试!导致漏洞产生!全部可以获得管理权限! 网络游戏 盛大网络 光通娱乐 在线销售 麦考林 母婴之家 教育 威迅教育 中锐留学 汽车 广州本田 永达汽车 物流 顺丰速运 申通快递 保险 太平洋保险 PICC中国人保 软件/互联网 金山软件 政府 上海公共研发平台 金融 中国银联 环迅电子商务有限公司 IFX 大成基金 东亚银行 运营商 中国电信 中国联通 安徽电信 西藏电信 行业资讯平台 泡泡网 中国汽车网 中国塑料网 网易163 零售卖场 苏宁电器 详细说明： 以下网站客服系统全部采用用友ICC客服系统 网络游戏 盛大网络 光通娱...
Directory traversal
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...
CVE-2012-1290
The CVE-2012-1290 entry describes a Cross-site scripting (XSS) vulnerability in SAP NetWeaver 7.0, specifically in the Internet Sales (crm.b2b) module and the b2b/auction/container.jsp page. The issue is exploitable via the _loadPage parameter, allowing an attacker to inject arbitrary web script ...
CVE-2012-1289
SAP NetWeaver 7.0 is affected by multiple directory traversal vulnerabilities in log.jsp/log_view.jsp under Internet Sales (crm.b2b) and Application Administration (com.sap.ipc.webapp.ipc). The root cause is improper validation of the logfilename parameter, allowing remote authenticated users to ...
PT-2012-3177
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description The issue allows remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to API endpoints such as "b2b/admin/log.jsp" or "b2b/admin/log view.jsp" in the Internet...
CVE-2012-1289: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in SAP NetWeaver 7.0 allow remote authenticated users to read arbitrary files via a .. dot dot in the logfilename parameter to 1 b2b/admin/log.jsp or 2 b2b/admin/logview.jsp in the Internet Sales crm.b2b component, or 3 ipc/admin/log.jsp or 4...
PT-2012-3178
Name of the Vulnerable Software and Affected Versions SAP NetWeaver version 7.0 Description A cross-site scripting issue exists, allowing remote attackers to inject arbitrary web script or HTML. This is achieved via the loadPage parameter in the b2b/auction/container.jsp file within the Internet...
Horde RCE
Horde unauthorized backdoor 11/11 - 02/12 Vulnerability Type: Remote Command Execution For the exploit source code contact DSquare Security sales team...
Online Dating Sites Getting Around With Customers Data
Just in time for Valentine’s Day, the privacy watchdogs over at the Electronic Frontier Foundation have put together a guide for those tempted to dance the algorithm electric. Their findings: online dating services may be getting around with your personal data. Leading online dating sites hold on...
Wordpress Really Easy Slider 0.1 File Upload
File upload vulnerability in Wordpress Really Easy Slider plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Category List Portfolio Page 1.3 File Upload
File upload vulnerability in Wordpress Category List Portfolio Page plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress CAC Featured Content 0.8 File Upload
File upload vulnerability in Wordpress CAC Featured Content plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Wordpress Kino Gallery 1.0 File Upload
File upload vulnerability in Wordpress Kino Gallery plugin Vulnerability Type: File Upload For the exploit source code contact DSquare Security sales team...
Joomla Component com_horoscope LFI
A simple LFI Vulnerability Vulnerability Type: Local File Include For the exploit source code contact DSquare Security sales team...