[SECURITY] Fedora 19 Update: check-mk-1.2.4p2-1.fc19

check-mk is a general purpose Nagios-plugin for retrieving data. It adopts a new approach for collecting data from operating systems and network compone nts. It obsoletes NRPE, checkbyssh, NSClient, and checksnmp and it has many benefits, the most important are a significant reduction of CPU usag...

HP Service Manager多个安全漏洞

CVE ID:CVE-2013-1493、CVE-2013-2067、CVE-2013-6202 HP Service Manager是一款软件即服务可以帮助您迅速部署一个全面的IT 服务管理解决方案。 HP Service Manager存在多个安全漏洞： 1，不正确过滤返回给用户的输入，允许远程攻击者利用漏洞构建恶意URI，诱使用户解析，当恶意数据被查看时，可获取敏感信息或劫持用户会话。 2，应用程序存在跨站请求伪造漏洞，允许远程攻击者构建恶意URI，诱使用户解析，可以目标用户上下文执行恶意操作。 3，存在未明错误，允许攻击者利用漏洞执行任意代码，目前没有详细漏洞细节提供。...

Bio Basespace SDK 0.1.7 API Key Exposure

The Bio Basespace SDK 0.1.7 Ruby Gem API client code passes the APIKEY to a curl command. This exposes the api key to the shell and process table. Another user on the system could snag the api key by just monitoring the process table. Title: Bio Basespace SDK 0.1.7 Ruby Gem exposes API Key via...

destoon b2b system all version SQL injection vulnerability analyses reference exp-vulnerability warning-the black bar safety net

在 include/global.func.php in stripsql function to pass the incoming value for the filter, but we can bypass this limit, to achieve the full version of the injected function stripsql$string $search =...

OPC UA Browse Next Response Command

...

WeBid 1.0.6 SQL Injection Vulnerability

WeBid version 1.0.6 suffers from a remote SQL injection vulnerability. Exploit Title: WeBid 1.0.6 SQL Injection Vulnerability Google Dork: "Powered by WeBid" Exploit Author: Life Wasted Vendor Homepage: http://www.webidsupport.com/ Version: Tested on 1.0.6, but could affect other version Tested O...

Samsung smart TV vulnerability allow attacker to read storage remotely

ReVuln Ltd. , a small security company headed by Donato Ferrante and Luigi Auriemma, post a video that demonstrates that how attacks can gain root on the appliances. Samsung Smart TV contain a vulnerability which allows remote attackers to swipe data from attached storage devices. In this...

Group Office Calendar - calendarjson.php SQL Injection

Group Office Calendar - calendarjson.php SQL Injection /-------------------------------------\ | Group-Office Calendar SQL Injection | -------------------------------------/ Summary ======= Versions of Group-Office a web app for online collaboration prior to 4.0.90 are subject to a SQL injection...

Check_MK Agent Detection

CheckMK agent, an IT monitoring service, is running on the remote host. CheckMK allows clients to retrieve large amounts of data about the target. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid59837; scriptversion"1.4"; scriptcvsdate"Date: 2019/11/22";...

Joomla XBall SQL Injection

Exploit Title : Joomla Component comxball SQL Injection Vulnerability Author : CoBRa21 E-Mail : uykucu at windowslive.com My Team : Lojistik ALLSTAR cyber-warrior.org Google Dork : inurl:index.php?option=comxball Status : High-Risk SQL Vulnerability...

MyBB MyTabs Plugin - SQL Injection

MyBB MyTabs Plugin - SQL Injection ===================================================================== MyBB 0day \ MyTabs plugin SQL injection vulnerability ===================================================================== Exploit title : MyBB 0day \ MyTabs plugin SQL injection vulnerabilit...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

OSForensics – Digital investigations faster

OSForensics – Digital investigations faster Here there is a new utility called OSForensics, currently it is freely available that I found very useful for conducting a computer forensics. OSForensics can retrieve data about recently accessed applications, documents, media and network shares by...

Report: bin Laden Raid Yields Treasure Trove of Data

The Wall Street Journal is reporting that Navy Seals hauled off a treasure trove of data, including computers, hard drives and portable storage devices, following their successful raid on the compound of Osama bin Laden – a raid that culminated with the death of the terrorist leader. Navy SEALS...

Log1 CMS 2.0 - Multiple Vulnerabilities

+---------------------------------------+ | Log1 CMS 2.0 Multiple Vulnerabilities | +---------------------------------------+ Vulnerable Web-App : Log1 CMS 2.0 Vulnerability : Multiple Vulnerabilities. Author : Aodrulez. Atul Alex Cherian Email : [email protected] Google-Dork : "POWERED BY LOG...

mySeatXT 0.164 SQL Injection

------------------------------------------------------------------------ Software................mySeatXT 0.164 Vulnerability...........SQL Injection Download................http://sourceforge.net/projects/coursems Release Date............2/16/2011 Tested On...............Windows Vista + XAMPP...

Ускоритель MySQL-inj

Если данный способ уже где-то описан - прошу кинуть ссылочки. Метод был существенно доработан - читай мой пост ниже! Хочу рассказать вам о новой может я что-то пропустил? технике вывода данных при MySQL injection. Дело в том, что очень неудобно когда при наличии уязвимости в результате мы можем...

PHP Empeng SQL Injection

=========================================== PHP Empeng SQL Injection Vulnerability =========================================== +Title : PHP Empeng SQL Injection Vulnerability +Software : Empeng Nek coro jowone opo yo ?? +Vendor : NN +Download : NN +Author : josalijoe +Contact :...

Работа с инъекциями в MySQL третьей версии

Работа с инъекциями в MySQL третьей версии. Предполагается что у вас есть некоторые знания синтаксиса SQL, а также опыт работы со слепыми инъекциями. Достаточно часто встречаюсь с тем что после того как люди узнают что имеют дело с инъекцией в скриптах, использующих мускул 3 версии, говорят что т...

Easynet Forum Host (topic.php) SQL Injection Vulnerbility

Exploit for unknown platform in category web applications ========================================================= Easynet Forum Host topic.php SQL Injection Vulnerbility ========================================================= Exploit Title: Easynet Forum Host topic.php SQL Injection...