Hornbill Supportworks ITSM 1.0.0 SQL Injection

Summary SQL Injection Vulnerability in ITSM component of Hornbill Supportworks Application CVE number: CVE-2013-2594 Impact: High Vendor homepage: http://www.hornbill.com Vendor notified: 19/11/2012 Vendor response: This issue has reportedly been fixed but the vendor refused to give version...

Infected Site Spreading SMS Android Malware

The website of a popular watch retailer is reportedly redirecting users that visit the site on Android-based devices to a number of malicious domains serving up premium rate SMS malware. According to a WebRoot report, users that visit the unnamed watch-selling website in Bulgaria are redirected t...

CVE-2010-5183

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

Race condition

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5183

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

CVE-2010-5183

CVE-2010-5183 affects Webroot Internet Security Essentials 6.1.0.145 on Windows XP. The root cause is a race condition that lets local users bypass kernel-mode hook handlers and run code that could evade signature-based detection via certain user-space memory changes during hook-handler execution...

PT-2012-1395 · Webroot · Webroot Internet Security Essentials

Name of the Vulnerable Software and Affected Versions: Webroot Internet Security Essentials version 6.1.0.145 Description: A race condition exists that allows local users to bypass kernel-mode hook handlers and execute dangerous code. This is achieved through certain user-space memory changes...

CVE-2010-5183: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Webroot Internet Security Essentials 6.1.0.145 on Windows XP allows local users to bypass kernel-mode hook handlers, and execute dangerous code that would otherwise be blocked by a handler but not blocked by signature-based malware detection, via certain user-space memory change...

WordPress Sitemile Auctions plugin arbitrary file upload vulnerability-vulnerability warning-the black bar safety net

Affected system: WordPress Sitemile Auctions Plugin 2. x Description: -------------------------------------------------------------------------------- WordPress is a PHP language and MySQL database development Blog（blog, blogengine, users can support PHP and MySQL database server on build your ow...

WordPress Foxypress Plugin 'uploadify.php' Arbitrary File Upload Vulnerability

WordPress Foxypress Plugin is prone to file upload vulnerability. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Unrestricted file upload

Multiple unrestricted file upload vulnerabilities in the WP Symposium plugin before 11.12.24 for WordPress allow remote attackers to execute arbitrary code by uploading a file with an executable extension using 1 uploadify/uploadadminavatar.php or 2 uploadify/uploadprofileavatar.php, then accessi...

Codesys CmpWebServer Multiple Vulnerabilities

Codesys is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Energine 2.3.8 Multiple Vulnerabilities

Exploit for php platform in category web applications Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection Status: Not Fixed, Vendor Alerted, Awaiting Vendor Response Risk level: Medium Credit: High-Tech...

energine 2.3.8 - Multiple Vulnerabilities

energine 2.3.8 - Multiple Vulnerabilities Vulnerability ID: HTB22783 Reference: http://www.htbridge.ch/advisory/sqlinjectionvulnerabilityinenergine.html Product: Energine Vulnerable Version: 2.3.8 and probably prior versions Vendor Notification: 28 December 2010 Vulnerability Type: SQL Injection...

BlogEngine.NET Unauthorized Access / Directory Traversal

Product: BlogEngine.NET Vendor informed: 24 Sep 2010 Fixed Version Released: 01 Jan 2011 Affected Versions: 1.6.x and prior versions Severtiy: Critical Impact: Information Discloure and System Compromise Description: BlogEngine.NET is an open source .NET blogging project that was born out of desi...

httpdASM 0.92 Directory Traversal

------------------------------------------------------------------------ Software................httpdASM 0.92 Vulnerability...........Directory Traversal Download................http://www.japheth.de/httpdASM.html Release Date............12/27/2010 Tested On...............Windows XP...

WordPress Plugin Mediatricks Viva Thumbs - Multiple Information Disclosure Vulnerabilities

source: https://www.securityfocus.com/bid/45539/info The Mediatricks Viva Thumbs plugin for WordPress is prone to multiple information-disclosure vulnerabilities because it fails to properly sanitize user-supplied input. Attackers can exploit these issues using directory-traversal strings to...

Project Jug Directory Traversal

------------------------------------------------------------------------ Software................Project Jug Vulnerability...........Directory Traversal Download................http://sourceforge.net/p/projectjug/home/ Release Date............10/31/2010 Tested On...............Windows Vista...

Project Jug 1.0.0 - Directory Traversal

source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot directory. Information harvested may aid i...

Project Jug 1.0.0 - Directory Traversal

Project Jug 1.0.0 - Directory Traversal source: https://www.securityfocus.com/bid/44569/info Project Jug is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. Exploiting this issue will allow an attacker to read files outside the webroot...