Information disclosure

The COBIME application before 0.9.4 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem...

CVE-2013-0720

CVE-2013-0720 affects the COBIME Android app prior to 0.9.4. The root cause is weak permissions on unspecified files, enabling an app with access to the local filesystem to obtain sensitive information stored by COBIME. Reported as an information-disclosure vulnerability with potential disclosure...

IBM Rational AppScan Enterprise SQL注入漏洞

BUGTRAQ ID: 58686 CVECAN ID: CVE-2013-0511 IBM Rational AppScan是应用安全性软件，能够在开发的各个阶段扫描并测试所有常见的Web应用漏洞。 IBM Rational AppScan Enterprise 8.6 - 8.6.0.2没有正确过滤SQL查询内使用的某些输入，可导致SQL注入漏洞。 0 IBM Rational AppScan 8.x IBM Rational AppScan 5.x 厂商补丁： IBM --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

AContent 1.3 - Local File Inclusion

AContent 1.3 - Local File Inclusion Exploit Title: AContent 1.3 Local File Inclusion Date: 21-03-2013 Author: DaOne Vendor Homepage: http://atutor.ca/acontent/ Software Link: https://sourceforge.net/projects/acontent/files/AContent-1.3.tar.gz/download Category: webapps/php Version: 1.3 Tested on:...

Internet Explorer 8 Exploit Found in Watering Hole Campaign Targeting Chinese Dissidents

On March 16th, we discovered a premeditated waterhole campaign that hosts exploits and malware on websites frequented by a specific target group. In this case the target includes Chinese dissidents. For the attacker, this approach is highly attractive since it is very difficult to discover the...

Question2Answer - Cross-Site Request Forgery

Question2Answer - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/58414/info Question2Answer is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain unauthorized actions and gain access to the affected...

WiFilet 1.2 iPad iPhone - Multiple Vulnerabilities

Title: ====== WiFilet v1.2 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=867 VL-ID: ===== 867 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

WiFilet 1.2 CSRF / LFI / Shell Upload

Title: ====== WiFilet v1.2 iPad iPhone - Multiple Web Vulnerabilities Date: ===== 2013-02-22 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=867 VL-ID: ===== 867 Common Vulnerability Scoring System: ==================================== 6.3 Introduction: =============...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM (advReplicationAdmin) (CVE-2013-0372)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager advReplicationAdmin February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote exploitable: Yes Credits:...

TeamSHATTER Security Advisory: SQL Injection in Oracle EM (dBClone) (CVE-2013-0374)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 TeamSHATTER Security Advisory SQL Injection in Oracle Enterprise Manager dBClone February 20, 2013 Risk Level: High Affected versions: Oracle Enterprise Manager Database Control 10.2.0.3, 10.2.0.4, 10.2.0.5, 11.1.0.7, 11.2.0.2, 11.2.0.3 Remote...

Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities

Document Title: =============== Remote File Manager v1.2 iOS - Multiple Web Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=882 Release Date: ============= 2013-02-23 Vulnerability Laboratory ID VL-ID: ====================================...

[WAppEx v2.0] Web Application Exploitation Tool

WAppEx is an integrated Web Application security assessment and exploitation platform designed with the whole spectrum of security professionals to web application hobbyists in mind. It suggests a security assessment model which revolves around an extensible exploit database. Further, it...

BlackNova Traders - news.php SQL Injection

BlackNova Traders - news.php SQL Injection source: https://www.securityfocus.com/bid/57910/info BlackNova Traders is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker ...

osCommerce - Cross-Site Request Forgery

osCommerce - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/57892/info osCommerce is prone to a cross-site request-forgery vulnerability because the application fails to properly validate HTTP requests. Exploiting this issue may allow a remote attacker to perform certain...

cURL Buffer Overflow

cURL buffer overflow Wed 06 February 2013 Volema found remotely exploitable buffer overflow vulnerability in libcurl POP3, SMTP protocol handlers which lead to code execution RCE. When negotiating SASL DIGEST-MD5 authentication, the function Curlsaslcreatedigestmd5message uses the data provided...

Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities

Document Title: =============== Air Disk Wireless 1.9 iPad iPhone - Multiple Vulnerabilities References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=850 Release Date: ============= 2013-02-07 Vulnerability Laboratory ID VL-ID: ===================================...

Web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc...

Important: freetype

Issue Overview: A flaw was found in the way the FreeType font rendering engine processed certain Glyph Bitmap Distribution Format BDF fonts. If a user loaded a specially-crafted font file with an application linked against FreeType, it could cause the application to crash or, possibly, execute...

F5 BIG-IP 11.2.0 SQL Injection

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: SQL Injection product: F5 BIG-IP vulnerable version: =11.2.0 fixed version: 11.2.0 HF3 11.2.1 HF3 CVE number: CVE-2012-3000 impact: Medium homepage: http://www.f5.com/...

Scripts Genie Classified Ultra - SQL Injection / Cross-Site Scripting

source: https://www.securityfocus.com/bid/57465/info Classified Ultra is prone to an SQL-injection vulnerability and a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. Exploiting these vulnerabilities could allow an attacker to steal cookie-based...