Absolute Form Processor XE-V 1.5 - Remote Change Password

Absolute Form Processor XE-V 1.5 - Remote Change Password Absolute Form Processor XE-V 1.5 Remote Change Pasword Home:http://www.xigla.com E-mail : Username : Password :/b...

The biggest security vulnerability — people!

We recently conducted a project focused on confidential data security enterprisestrategygroup.com that will be published soon. However, here are some interesting advance results that support this venerable security dictum. ESG asked 308 North American and European security professionals from larg...

Discuz! 6.0.1 (searchid) Remote SQL Injection Exploit-vulnerability warning-the black bar safety net

The following proceduresmethodsmay carry offensive,for security research and teaching purposes,at your own risk!& lt;? php errorreportingEALL&ENOTICE; printr" +------------------------------------------------------------------+ Exploit discuz6. 0. 1 Just work as php=5 & mysql=4.1 BY james...

PHP-Fusion Mod Kroax 4.42 - category SQL Injection

PHP-Fusion Mod Kroax 4.42 - category SQL Injection ========================================================== The kroax phpfusion Remote SQL-injection. ========================================================== Author : boom3rang Contact : [email protected] webpage : www.khg-crew.ws ---...

Microsoft IE 7 DisableCachingOfSSLPages选项失效漏洞

BUGTRAQ ID: 29120 Internet Explorer是微软发行的非常流行的WEB浏览器。 管理员和用户可以在Internet Explorer中设置DisableCachingOfSSLPages选项以防止将私人数据保存到磁盘上，这个选项的注册表项为： HKCUSoftwareMicrosoftWindowsCurrentVersionInternetSettingsDisableCachingOfSSLPages 当启用了这个选项后，Internet Explorer 7仍会将启用了SSL的网页缓存到磁盘上，导致将私人或敏感数据写到磁盘。 Microsoft...

Sun ONE and Sun Java System Applications vulnerable to cross-site scripting via default error page

Overview A cross-site scripting vulnerability in Sun ONE and Sun Java System Applications may allow an attacker to read or modify data in web pages and cookies. Description From Sun Alert Notification 102164: A Cross Site Scripting XSS vulnerability in various releases of the Sun Java System Web...

[Full-disclosure] RechnungsZentrale V2 - SQL injection and Remote PHP inclusion vulnerabilities

The Advisory can be found here: http://www.g-0.org/code/rz2-adv.html Regards, GroundZero Security Research and Software Development http://www.groundzero-security.com Wir widersprechen der Nutzung oder Ubermittlung unserer Daten fur Werbezwecke oder fur die Markt- oder Meinungsforschung § 28 Abs....

CVE-2005-4046

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct...

CVE-2005-4046

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct...

CVE-2005-4046

The CVE-2005-4046 entry affects the Reverse SSL Proxy Plug-in used with Sun Java System Application Server Standard Edition 7 (2004Q2), Application Server Enterprise Edition 8.1 (2005Q1), and Sun ONE Application Server 7 Standard Edition. The vulnerability is unspecified but allows remote attacke...

CVE-2005-4046: Undefined Security Weakness

Unspecified vulnerability in Reverse SSL Proxy Plug-in for Sun Java System Application Server Standard Edition 7 2004Q2, Application Server Enterprise Edition 8.1 2005Q1, and Sun ONE Application Server 7 Standard Edition, as used in multiple web servers, allows remote attackers to conduct...

Java XSLT security advisory addendum

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ============================================ Illegalaccess.org security advisory addendum ============================================ Vendor informed: April, 2004 Public Advisory released: August 2, 2004 Today: August 9, 2004 URL:...

CVE-2002-0788

CVE-2002-0788 involves the PGP 7.0.3 client when used with Windows Encrypted File System (EFS) and the “wipe deleted files” option. The interaction creates cleartext temporary files that cannot be wiped or deleted due to strong permissions, potentially exposing cleartext data to local users or at...

Apache Tomcat 3.0 - Directory Traversal

source: https://www.securityfocus.com/bid/2518/info Apache Tomcat in a Windows NT environment could be led to traverse the normal directory structure and return requested files from outside of the document root. By including '/../' sequences along with specially chosen characters in requested URL...