7512 matches found
Skype: Client Error Causes Global Outage
In response to a 24 hour outage that occurred last week on their internet voice and video chat platform, Skype’s Chief Information Officer has revealed that an error in some versions of the company’s software client is to blame. CIO Lars Rabbe, writing on Skype’s ‘The Big Blog,’ confirmed reports...
www.eVuln.com : HTTP Response Splitting in Social Share
www.eVuln.com advisory: HTTP Response Splitting in Social Share Summary: http://evuln.com/vulns/168/summary.html Details: http://evuln.com/vulns/168/description.html -----------Summary----------- eVuln ID: EV0168 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low Type: HTT...
HttpBlitz Web Server - Denial of Service
HttpBlitz Web Server - Denial of Service !/usr/bin/python Title: HttpBlitz DOS Date: 12/24/2010 Author: otoy Software Link: http://sourceforge.net/projects/httpblitz/files/HttpBlitz.msi/download Tested on: Windows XP SP3 ====================================================================== / / /...
WiPhire : A Wireless Penetration Testing Tool !
If you are active in the wireless penetration testing field, you must have seen a few scripts that either help you crack Wired Equivalent Privacy WEP. You also must have seen a few scripts that help you perform MITM attacks. But, not scripts that help you crack WEP and help you with MITM at the...
Windows 7 IIS7.5 FTPSVC UNAUTH'D Remote DoS PoC
Exploit for windows platform in category dos / poc import socket, sys print "\n" print "----------------------------------------------------------------" print "| Windows 7 IIS7.5 FTPSVC UNAUTH'D REMOTE DOS POC |" print "| Matthew Bergin, Bergin Penetration Testing |" print "| Win7 Ultimate v6.1...
Injader CMS Multiple Vulnerabilities
Exploit for php platform in category web applications Vulnerability ID: HTB22745 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityininjadercms1.html Product: Injader CMS Vendor: http://www.injader.com/ http://www.injader.com/ Vulnerable Version: 2.4.4 Vendor Notification: 07 December 20...
Hycus CMS 1.0.3 Local File Inclusion
Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status: Not Fixed, Vendor Alerted, Awaiting...
Hycus CMS - Multiple Vulnerabilities
Hycus CMS - Multiple Vulnerabilities Vulnerability ID: HTB22737 Reference: http://www.htbridge.ch/advisory/lfiinhycuscms.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: LFI Status:...
SQL injection in Hycus CMS
Vulnerability ID: HTB22740 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhycuscms2.html Product: Hycus CMS Vendor: Hycus Web Development Team http://www.hycus.com/ Vulnerable Version: 1.0.3 Vendor Notification: 07 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendo...
Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004
Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET Affected versions. v6.7 verified and possibly others...
html-edit CMS - Multiple Vulnerabilities
Vulnerability ID: HTB22734 Reference: http://www.htbridge.ch/advisory/sqlinjectioninhtmleditcms.html Product: HTML-EDIT CMS Vendor: html-edit web services http://www.html-edit.org/ Vulnerable Version: 3.1.8 Vendor Notification: 02 December 2010 Vulnerability Type: SQL Injection Status: Fixed by...
Elcom CommunityManager.NET - Authentication Bypass
Elcom CommunityManager.NET - Authentication Bypass Elcom CommunityManager.NET Auth Bypass Vulnerability - Security Advisory - SOS-10-004 Release Date. 20-Dec-2010 Last Update. - Vendor Notification Date. 22-Jan-2010 Product. Elcom Technology's CommunityManager.NET Platform. IIS with ASP.NET...
Metasploit Framework v3.5.1 Updated Version Download !
Our favourite exploitation framework – The Metasploit Framework has been updated! We now have Metasploit version 3.5.1! "The Metasploit Framework is a penetration testing toolkit, exploit development platform, and research tool. The framework includes hundreds of working remote exploits for a...
www.eVuln.com : "link" and "linkdescription" XSS in Social Share
www.eVuln.com advisory: "link" and "linkdescription" XSS in Social Share Summary: http://evuln.com/vulns/165/summary.html Details: http://evuln.com/vulns/165/description.html -----------Summary----------- eVuln ID: EV0165 Software: Social Share Vendor: n/a Version: 2010-06-05 Critical Level: low...
XSS vulnerability in BLOG:CMS
Vulnerability ID: HTB22725 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinblogcms1.html Product: BLOG:CMS Vendor: Radek Hulan http://blogcms.com/ Vulnerable Version: 4.2.1.e and probably prior versions Vendor Notification: 30 November 2010 Vulnerability Type: XSS Cross Site Scriptin...
[SECURITY] [DSA-2133-1] New collectd packages fix denial of service
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-2133-1 [email protected] http://www.debian.org/security/ Raphael Geissert December 13, 2010 http://www.debian.org/security/faq -...
DSA-2133-1 collectd - denial of service
Bulletin has no description...
GnackTrack R2 - Penetration Testing linux !
"GnackTracksh is a Live and installable Linux distribution designed for Penetration Testing and is based on Ubuntu. Although this sounds like BackTrack, it's most certainly not; it's very similar but based on the much loved GNOME!" This release does NOT contain Nessus pre-installed as the authors...
XSS vulnerability in Zimplit CMS
Vulnerability ID: HTB22716 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinzimplitcms1.html Product: Zimplit CMS Vendor: Zimplit http://www.zimplit.com/ Vulnerable Version: Current at 22.11.2010 and Probably Prior Versions Vendor Notification: 22 November 2010 Vulnerability Type: XSS...
