SA-CONTRIB-2010-092 - Advanced Book Blocks - Multiple Vulnerabilities

The Advanced Book Blocks module enables you to integrate with the API provided by the JQuery Menu module version 1.8 and higher to provide click and expand book menus with the ability to customize each block individually. The module contained Cross Site Scripting vulnerabilities which could allow...

Researchers: Google Aurora Attackers Back in Business?

Just when you thought it was safe to go back in your e-mail…Researchers say a new round of targeted attacks appear to come from the same group responsible for attacks against Google and other top U.S. firms. Writing on the Symantec Security blog...

Уязвимости в IB Promotion Advanced Business Web Suite

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и Insufficeint Anti-automation уязвимостях в IB Promotion Advanced Business Web Suite это украинская коммерческая CMS. XSS: http://site/search/?qs=’;alertdocument.cookie;// Это DOM Based XSS. Insufficeint Anti-automation:...

Advanced Guestbook 2.2 Blind SQL Injection Vulnerabilities

Exploit for php platform in category web applications ========================================================== Advanced Guestbook 2.2 Blind SQL Injection Vulnerabilities ========================================================== Exploit Title : Advanced Guestbook 2.2 Blind SQL Injection...

[SECURITY] Fedora 14 Update: znc-0.093-2.svn2101.fc14

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

[SECURITY] Fedora 12 Update: znc-0.093-2.svn2101.fc12

ZNC is an IRC bouncer with many advanced features like detaching, multiple users, per channel playback buffer, SSL, IPv6, transparent DCC bouncing, Perl and C++ module support to name a few...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray 0-day

No description provided by source. // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 html script language="JavaScript" defer var sCode =...

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray

Advanced File Vault - eSellerateControl350.dll ActiveX HeapSpray // Exploit Title: Advanced File VaulteSellerateControl350.dll Activex Heap Spray 0-day // Date: 08-08-2010 // Author: ThE g0bL!N // Version: 0-day // Tested on: xp sp2 var sCode =...

Advanced File Vault(eSellerateControl350.dll) Activex Heap Spray

Exploit for windows platform in category remote exploits ================================================================ Advanced File VaulteSellerateControl350.dll Activex Heap Spray ================================================================ // Exploit Title: Advanced File...

Joomla com_adsmanager SQL Injection Vulnerability

Exploit for php platform in category web applications ======================================== Joomla comadsmanager SQli Vulnerability ======================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

MDVA-2009:097 : drakx-net

This bugfix update to drakx-net fixes a number of issues: - wireless passwords with '' character were not properly handled bug 50670 - wireless connection settings were not preserved for different connections bug 46010 - when configuring Advanced Settings in draknetcenter, some variables were not...

Sql injection

SQL injection vulnerability in the A21glossary Advanced Output a21glossaryadvancedoutput extension before 0.1.12 for TYPO3 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2009-4950

The CVE concerns the TYPO3 extension A21glossary Advanced Output (a21glossary_advanced_output) prior to version 0.1.12. The issue is a SQL injection vulnerability in the extension that could allow remote attackers to execute arbitrary SQL commands via unspecified vectors. Affected component: a21g...

CVE-2010-0915

Unspecified vulnerability in the Oracle Advanced Product Catalog component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1.2 allows remote authenticated users to affect confidentiality and integrity via unknown vectors...

Sql injection

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

CVE-2010-2686

Multiple SQL injection vulnerabilities in clientes.asp in the TopManage OLK module 1.91.30 for SAP allow remote attackers to execute arbitrary SQL commands via the 1 PriceFrom, 2 PriceTo, and 3 InvFrom parameters, as reachable from olk/cp/searchCart.asp, and other unspecified vectors when...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities on the IBM BladeCenter with Advanced Management Module AMM firmware build ID BPET48L, and possibly other versions before 4.7 and 5.0, allow remote attackers to inject arbitrary web script or HTML via the 1 INDEX or 2 IPADDR parameter to...

PG Social Networking - Arbitrary File Upload

PG Social Networking - Arbitrary File Upload ============================================================== PG Social Networking --Shell upload Vulnerabilty ============================================================== Name : PG Social Networking --Shell upload Vulnerabilty Date : july 9,2010...

Ghost Recon Advanced Warfighter - Integer Overflow / Array Indexing Overflow

Source: http://aluigi.org/adv/grawful-adv.txt Luigi Auriemma Applications: Ghost Recon Advanced Warfighter Ghost Recon Advanced Warfighter 2 http://ghostrecon.us.ubi.com/graw2/ Versions: GRAW = 1.35 GRAW2 = 1.05 Platforms: Windows Bugs: A interger overflow B Array indexing overflow Exploitation:...

Ubisoft Ghost Recon Advanced Warfighter - Integer Overflow Array Indexing Overflow

Ubisoft Ghost Recon Advanced Warfighter - Integer Overflow Array Indexing Overflow source: https://www.securityfocus.com/bid/41459/info Ghost Recon Advanced Warfighter GRAW is prone to an integer-overflow vulnerability and an array-indexing-overflow vulnerability. Successful exploits may allow...