Java RMI Services Default Configuration Remote Loading

Added: 07/29/2011 Background The Java Remote Method Invocation RMI system allows an object running in one Java virtual machine to invoke methods on an object running in another Java virtual machine. RMI provides for remote communication between programs written in the Java programming language...

Java RMI Server Insecure Default Configuration Java Code Execution

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'Java RMI Server Insecure Default...

Java RMI Server Insecure Default Configuration Java Code Execution

Exploit for multiple platform in category remote exploits $Id: javarmiserver.rb 13186 2011-07-15 20:44:08Z egypt $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on...

Hack your Sony PSP : ISO Tool v1.975 Released !

Hack your Sony PSP : ISO Tool v1.975 Released ! So I don't know if you're familiar with the latest version of Takka's ISO Tool or not, but I just downloaded it after reading about this "Fake NP data" feature. While I'm not 100% clear, mainly because of the poor Google Translation, it seems v1.975...

Nook Color Bluetooth Chip Hacked !

Barnes and Noble's full color touch screen, Wi-Fi and 3G enabled eReader tablet NOOK color ships with a Bluetooth chip that is not activated. Well, not anymore. A user occip at XDA-developers has managed to start the Bluetooth on the device and scanning and connecting to devices is working well...

Native Instruments Service Center 2.2.5 - Local Privilege Escalation

Native Instruments Service Center 2.2.5 - Local Privilege Escalation Native Instruments Service Center 2.2.5 Local Privilege Escalation Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 2.2.5 R596 Summary: The NI Service Center is ...

Native Instruments Service Center 2.2.5 Insecure Library Loading

/ Native Instruments Service Center 2.2.5 Insecure Library Loading Vulnerability Vendor: Native Instruments GmbH Product web page: http://www.native-instruments.com Affected version: 2.2.5 R596 Summary: The NI Service Center is a service used for Product Activation. Desc: The Service Center suffe...

Application Logic Error in DT Centrepiece

Vulnerability ID: HTB22522 Reference: http://www.htbridge.ch/advisory/applicationlogicerrorindtcentrepiece.html Product: DT Centrepiece Vendor: DT Services http://www.dt.net.nz/ Vulnerable Version: 4.5 and Probably Prior Versions Vendor Notification: 22 July 2010 Vulnerability Type: Application...

Grid. Система распределенных вычислений.

Введение. Материал появился в результате анализа замечаний и предложений, поступивших от тех, кто прочитал статью “Процесс создания ПО для распределенных вычислений C++”. Отсутствие явного распределения задачи сервером между клиентами и отсутствие конкретной задачи в принципе заставили автора ина...

Multiple Vulnerabilities in DT Centrepiece

High-Tech Bridge SA Security Research Lab has discovered multiple vulnerabilities in DT Centrepiece which could be exploited to perform cross-site scripting attacks and bypass certain security restrictions. 1 Cross-site scripting XSS vulnerabilities in DT Centrepiece 1.1 The vulnerability exists...

Read the Screensaver-Configuration (enabled and lock) on GNOME and KDE

Read the Screensaver-Configuration enabled and lock on GNOME and KDE. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

XOOPS Profiles Module Activation Security Bypass Vulnerability

XOOPS is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:xoops:xoops"; ifdescription...

Apple Safari 4.0.5 parent.close() Code Execution

Tested on: Apple Safari 4.0.5 / XP SP2 Polish Shellcode: Windows Execute Command calc Local: Yes Remote: Yes POPUP must be enabled Ctrl+Shift+K Just for fun ; -- window.open"0day.htm"; //parent.close activation self.close;...

CVE-2010-1906

The CVE-2010-1906 entry concerns tgsrv.exe in Consona Dynamic Agent components (Repair Service, Repair Manager, Subscriber Activation, Subscriber Agent). The root cause is reliance on a predictable timestamp field to validate input to the named pipe \.\pipe\__RepairService_pipe__company, enabling...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

Authentication flaw

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2009-4851

The activation resend function in the Profiles module in XOOPS before 2.4.1 sends activation codes in response to arbitrary activation requests, which allows remote attackers to bypass administrative approval via a request involving activate.php...

CVE-2009-4851

XOOPS Profiles Module vulnerability (pre-2.4.1) allows remote attackers to bypass administrative approval via activation resend: activation codes are sent in response to arbitrary activation requests (activate.php). Affects XOOPS Profiles Module; root cause is improper handling of activation requ...

Comptel Provisioning and Activation - index.jsp?error_msg_parameter Cross-Site Scripting

Comptel Provisioning and Activation - index.jsp?errormsgparameter Cross-Site Scripting source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. ...

Comptel Provisioning and Activation - 'index.jsp?error_msg_parameter' Cross-Site Scripting

source: https://www.securityfocus.com/bid/38534/info Comptel Provisioning and Activation is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of ...