Synergy 1.4 Protocol Cleartext Weakness Proof Of Concept

Exploit Title: Synergy Protocol cleartext weakness PoC Date:April 5th 2011 Author: Sw1tCh Software Link: http://synergy-foss.org/ Version: 1.4 -= Info =- Synergy is Free and Open Source Software that lets you easily share your mouse and keyboard between multiple computers, where each computer has...

Perl 5.x - 'lc()' / 'uc()' TAINT Mode Protection Security Bypass

source: https://www.securityfocus.com/bid/47124/info Perl is prone to a security-bypass weakness that occurs when laundering tainted input. Attackers can leverage this issue to bypass security checks in perl applications that rely on TAINT mode protection functionality. This opens such applicatio...

Installation Path Disclosure Weakness in Joomla!

High-Tech Bridge SA Security Research Lab has discovered a weakness in Joomla! which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Joomla! The weakness exists due to application reveals the full path to installation directory in...

Multiple Vulnerabilities in Viscacha

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in Viscacha which could be exploited to perform cross-site scripting attacks and disclose potentially sensitive information. 1 Cross-site scripting XSS vulnerabilities in Viscacha 1.1 The vulnerability exists due to...

Apache HTTP Server ETag Header Information Disclosure Weakness

A weakness has been discovered in the Apache HTTP Server if configured to use the FileETag directive. Copyright C 2011 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...

DroidDream Attack Underscores Weaknesses of App Stores

The Android Market incident that surfaced Wednesday in which Google was forced to pull more than 20 apps that had been Trojaned is the latest piece of evidence that the mobile app store model is broken and is setting users up for failure. The details of the Android Market episode should be famili...

Installation Path Disclosure Weakness in xt:Commerce

High-Tech Bridge SA Security Research Lab has discovered a weakness in xt:Commerce which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in xt:Commerce The weakness exists due to application reveals the full path to installation...

Installation Path Disclosure Weakness in Tribiq CMS | HTB22857

High-Tech Bridge SA Security Research Lab has discovered a weakness in Tribiq CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Tribiq CMS: CVE-2011-2727 The weakness exists due to application reveals the full path to...

Installation Path Disclosure Weakness in NextGEN Gallery wordpress plugin

High-Tech Bridge SA Security Research Lab has discovered a weakness in NextGEN Gallery wordpress plugin which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in NextGEN Gallery wordpress plugin The weakness exists due to application...

CA ARCserve D2D Axis2 Default Credentials Remote Code Execution (CVE-2010-0219)

CA ARCserve D2D is a disk-based backup solution that allows protecting and recovering business data on both physical and virtual servers. It includes a web 2.0 interface that proactively delivers updates. A remote code execution vulnerability has been reported in CA ARCserve D2D. The vulnerabilit...

HP Universal CMDB Server Axis2 Default Credentials Remote Code Execution

HP Universal CMDB is a modular management system that consists of a business-service-oriented data model with built-in discovery of configuration items CIs and configuration item dependencies, visualization and mapping of business services, and tracking of configuration changes. A remote code...

Installation Path Disclosure Weakness in Flatnux

High-Tech Bridge SA Security Research Lab has discovered a weakness in Flatnux which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Flatnux The weakness exists due to application reveals the full path to installation directory in...

Installation Path Disclosure Weakness in Coppermine

High-Tech Bridge SA Security Research Lab has discovered a weakness in Coppermine which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Coppermine The weakness exists due to application reveals the full path to installation...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6883)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

SuSE 10 Security Update : OpenOffice_org (ZYPP Patch Number 6884)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness CVE-2009-2949: XPM Import Integer Overflow CVE-2009-2950: GIF Import Heap Overflow CVE-2009-3301: MS Word sprmTDefTable Memory Corruption CVE-2009-3302: MS Word sprmTDefTable Memory Corruption...

SuSE 11 Security Update : OpenOffice_org (SAT Patch Number 2080)

This update of OpenOfficeorg includes fixes for the following vulnerabilities : - XML signature weakness. CVE-2009-0217 - XPM Import Integer Overflow. CVE-2009-2949 - GIF Import Heap Overflow. CVE-2009-2950 - MS Word sprmTDefTable Memory Corruption. CVE-2009-3301 - MS Word sprmTDefTable Memory...

Installation Path Disclosure Weakness in Pluck CMS

High-Tech Bridge SA Security Research Lab has discovered a weakness in Pluck CMS which could be exploited to gain access to potentially sensitive information. 1 Installation path disclosure weakness in Pluck CMS The weakness exists due to application reveals the full path to installation director...

samba: Race condition by mount (mount.cifs) operations

client/mount.cifs.c in mount.cifs in smbfs in Samba 3.0.22, 3.0.28a, 3.2.3, 3.3.2, 3.4.0, and 3.4.5 allows local users to mount a CIFS share on an arbitrary mountpoint, and gain privileges, via a symlink attack on the mountpoint directory file...

SSH password weakness

Added: 01/05/2011 CVE: CVE-1999-0502 Background Passwords are the most commonly used method of authenticating users to a server. The combination of a login name and password is used to verify the identity of a user requesting access, and to determine what parts of the server the user has permissi...

Debian DSA-2136-1 : tor - buffer overflow

Willem Pinckaers discovered that Tor, a tool to enable online anonymity, does not correctly handle all data read from the network. By supplying specially crafted packets a remote attacker can cause Tor to overflow its heap, crashing the process. Arbitrary code execution has not been confirmed but...