OpenX Ad Server 2.8.7 Cross Site Request Forgery

Exploit for php platform in category web applications ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage:...

OpenX Ad Server 2.8.7 - Cross-Site Request Forgery

Secur-I Research Group Security Advisory ======================================================================= Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.or...

OpenX Ad Server 2.8.7 Cross Site Request Forgery

Title: OpenX Ad Server CSRF Vulnerability Product: OpenX Ad Server Vulnerable version: 2.8.7 and probably earlier versions Fixed version: N/A Impact: High Homepage: http://www.openx.org/ Vulnerability ID: SV-01 Found: 7/7/2011 By: Narendra Shinde Secur-I Research Group http://securview.com/...

Researchers Find Browser History-Sniffing Still Ongoing

The practice of history sniffing, which has been seen as out-of-bounds and a serious privacy violation for the better part of a decade now, is still ongoing by some ad networks, researchers have found. A study completed recently by researchers at Stanford University’s Center for Internet and...

RHEL 6 : NetworkManager (RHSA-2011:0930)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2011:0930 advisory. - NetworkManager: Did not honour PolicyKit authadmin action element by creation of Ad-Hoc wireless networks CVE-2011-2176 Note that Nessus has not...

HJCMS enterprise website management system 7.0 injection vulnerability-vulnerability warning-the black bar safety net

Author:anon Vulnerability in /hjadmin/addj. asp !-- include file="../conn. asp"--%set js = server. CreateObject"ADODB. RecordSet"sql="select from ad where id="& request. QueryString"id"set js = conn. Execute Sqlif js"lx"=1 thengoaler = goaler + "a href=""adurl. asp? id="& js"id"&""" target="""&...

German AD-Free Blog SQL Injection

+Title : German AD-Free Blog Sql Injection +Vender : http://www.adfreeblog.org/ +Auther : Bl4ck.Viper Turkish Hacker +Email : [email protected] +Date : 15/06/2011 +Home : www.skote-vahshat.com Err0r 0n : index.php Exploit : http://target.eu/index.php?cat=SQL Demo :...

PT-2011-3576

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to execute arbitrary SQL commands. This can be achieved via a CP ENLARGESTYLE cookie to the default URI under inventivex/managetraining/ or unspecified input to...

PT-2011-1361

Name of the Vulnerable Software and Affected Versions MediaCAST versions 8 and earlier Description The issue allows remote attackers to discover usernames and cleartext passwords by reading the error messages returned for requests that use the UserID parameter to the "authenticate ad setup...

Yahoo! PH Purple Hunt 2.0 Ad Compromised !

Yahoo! PH Purple Hunt 2.0 Ad Compromised ! Earlier the other day, I was browsing through the Yahoo! PH site and the Yahoo! Purple Hunt 2.0 ad caught my attention. Curious as I am, I clicked on the ad and surprisingly my browser downloaded a suspicious file named com.com. Apparently this ad...

Istgah CMS Cross Site Scripting / SQL Injection

=========================================================================== Istgah Cms Multiple Vulnerability =========================================================================== Name: Istgah Cms Multiple Vulnerability Vendor: http://www.iran-team.com/agahi1.html Price: $40 Date: 2011-04-1...

Banner Ad Management Script - SQL Injection

Banner Ad Management Script - SQL Injection + Exploit Title : Banner Ad Management Script Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 02-04-2011 + Software Link: http://www.softbizscripts.com/banner-ads-management-script-features.php + category: We...

Softbiz Banner Ad Management SQL Injection

Exploit Title : Banner Ad Management Script Sql Injection Vulnerability + Author : Egyptian.H4x0rz + Contact : SpYatHotmail.Com + Date : 02-04-2011 + Software Link: http://www.softbizscripts.com/banner-ads-management-script-features.php + category: Web Apps SQli + HomePage : Black-hat.cc...

Unfixed Redirect vulnerability at ad.3dnews.ru

Security researcher Sony, has submitted on 20/03/2011 a Redirect vulnerability affecting ad.3dnews.ru, which at the time of submission ranked 2920 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently unfixed. If you belie...

One Million Web Sites Infected At End of 2010

There was a sharp jump in the prevalence of malicious Web advertisements in the final quarter of 2010, with loosely monitored “remnant” ad networks responsible for an increasing share of the attacks, according to a report from the firm Dasient. The Dasient Q4 Malware Update reported that more tha...

Fedora 15 : telepathy-gabble-0.11.7-1.fc15 / telepathy-glib-0.13.13-1.fc15 (2011-1284)

Telepathy-Gabble changes, including a security fix : - fd.o32390: Gabble now treats a request for a ContactSearch channel with Server set to the empty string as equivalent to not specifying a server, and rejects requests where the JID specified for Server is invalid. - fd.o32874: Offline contacts...

CVE-2011-0391

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

Design/Logic Flaw

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

CVE-2011-0391

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...

CVE-2011-0391: Undefined Security Weakness

Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service thread consumption and device outage via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205...