Western Digital's WD TV Live SMP/Hub - Privilege Escalation

Introduction ============ The WD TV Live Streaming Media Player is a consumer device to play various audio and video formats. Additionally it allows access to multiple video streaming services like Netflix, Hulu or Youtube.1 The device allows customization of its user interface and limited remote...

Cotonti 0.6.23 SQL Injection

================================================================== Vulnerable Software: cotonti-0.6.23 Official Site: http://www.cotonti.com/ Tested version: http://cotonti.googlecode.com/files/cotonti-0.6.23.7z ================================================================== About Software:...

CVE-2012-0716

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Cross site scripting

Cross-site scripting XSS vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-0720

Cross-site scripting XSS vulnerability in the Integration Solution Console in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via a crafted URL...

CVE-2012-0716

Cross-site scripting XSS vulnerability in the Administration Console in IBM WebSphere Application Server 7.0 before 7.0.0.23 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

Attorney General Holder Announces Probe Into Cyberwar Leaks

U.S. Attorney General Eric Holder has issued an assignment to the U.S. District Attorneys to start an investigation into possible leaks of classified information, presumably by individuals within the Obama administration who recently spoke anonymously about the administration’s ties to the...

PHPNet 1.8 SQL Injection

SQL Injection This exploit is for a vulnerability in ler.php, but are the same vulnerability on imprimir.php and imagem.php. ler.php?id=SQLi imprimir.php?id=SQLi imagem.php?id=SQLi Usage: php file.php http://server/path/ Login bypass In login page, you can bypass the login using "SQLi strings". G...

RedHat Update for krb5 RHSA-2011:0447-01

Check for the Version of krb5 OpenVAS Vulnerability Test RedHat Update for krb5 RHSA-2011:0447-01 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms o...

PHPCollab 2.5 Unauthenticated Access

Date: 3/5/2012 Author: team ' and 1=1-- Software Link: http://www.phpcollab.com/ Version: 2.5 Vulnerability was found during the AthCon IT Security Conference CTF CTF organizer: echothrust We identified that the PhpCollab application installed under http://192.0.0.2/phpcollab/ allows the...

Ajaxmint Gallery 1.0 Local File Inclusion

========================================================= VUlnerable Software: Ajaxmint Gallery version 1.0 @Software AjaxMint Gallery @Author Rajapandian - [email protected] http://ajaxmint.com/ =========================================================...

Supernews <= 2.6.1 SQL Injection Exploit

Exploit for php platform in category web applications ?php Exploit Title: Supernews = 2.6.1 SQL Injection Exploit Google Dork: intext:"2003 - 2004 : SuperNews : Todos os direitos reservados" Date: 2012/ Author: WhiteCollarGroup Software Link: http://phpbrasil.com/script/vT0FaOCySSH/supernews...

PT-2012-1803 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 3.1 Description: The issue affects the net subsystem in the Linux kernel, where it does not properly restrict the use of the IFF TX SKB SHARING flag. This allows local users with the CAP NET ADMIN capability to...

FEMA: State, Local Officials Not Prepared to Respond to Cyberattack

A report by the Federal Emergency Management Agency FEMA finds that state and local government officials in the U.S. are pessimistic about their ability to respond to a cyberattacks. The National Preparedness Report NPR was commissioned by the Obama Administration. It found that, although the...

CSRF in the "configure custom field" Multi Checkboxes add new custom field option screen

The administration screen which facilitates the addition of new custom field options is vulnerable to csrf, as it does not check that the atltoken submitted is in fact legitimate for the user submitting it you can put in any value for the token field. To access this screen you can go to a url...

CSRF in the "configure custom field" Multi Checkboxes add new custom field option screen

The administration screen which facilitates the addition of new custom field options is vulnerable to csrf, as it does not check that the atltoken submitted is in fact legitimate for the user submitting it you can put in any value for the token field. To access this screen you can go to a url...

CSRF in the "configure custom field" Multi Checkboxes add new custom field option screen

The administration screen which facilitates the addition of new custom field options is vulnerable to csrf, as it does not check that the atltoken submitted is in fact legitimate for the user submitting it you can put in any value for the token field. To access this screen you can go to a url...

CVE-2012-0543

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...

Design/Logic Flaw

Unspecified vulnerability in the BI Publisher formerly XML Publisher component in Oracle Fusion Middleware 10.1.3.4.1 and 10.1.3.4.2 allows remote attackers to affect integrity via unknown vectors related to Administration...

CVE-2012-0543

CVE-2012-0543 affects Oracle Fusion Middleware BI Publisher (XML Publisher) 10.1.3.4.1/10.1.3.4.2; an unspecified vulnerability in the BI Publisher Administration vector allows remote attackers to affect integrity. The supplied documents do not specify the root cause beyond this component, any co...