Kryptos Logic Advisory: IBM Tivoli Storage Manager (TSM) Local Root

http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca.txt http://www.kryptoslogic.com/advisories/2010/kryptoslogic-ibm-tivoli-dsmtca-exploit.c ==-===-=====-=======-===========-=============-================= IBM Tivoli Storage Manager TSM Local Root Kryptos Logic, December 20...

Microsoft Closes Door on Stuxnet with December Patch

Microsoft released its monthly patch Tuesday bulletins fixing more than 40 vulnerabilities in a variety of products including Microsoft Windows, Internet Explorer and Sharepoint Server. The release, the company’s final monthly patch of 2010, brings the total number of security fixes to 106 – the...

Microsoft Releases Advance Notification for December Security Bulletin

Microsoft has issued a Security Bulletin Advance Notification indicating that its December release will contain 17 bulletins. Two of these bulletins will have a severity rating of critical and will be for Microsoft Windows and Internet Explorer. Fourteen of the bulletins will have a severity rati...

Freefloat FTP Server Buffer Overflow Exploit (Meta)

Exploit for windows platform in category remote exploits =================================================== Freefloat FTP Server Buffer Overflow Exploit Meta =================================================== This file is part of the Metasploit Framework and may be subject to redistribution and...

ProFTPd-1.3.3c - Backdoor Command Execution (Metasploit)

$Id: proftpd133cbackdoor.rb 11214 2010-12-03 12:34:38Z swtornio $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Jax Calendar 1.34 - Remote Admin Access

Exploit Title: Jax Calendar 1.34 Remote Admin Access Exploit Date: December 30th, 2009 Author: Sora Software Link: http://www.jtr.de/scripting/php Version: 1.34 Tested on: Windows Vista and Linux Backtrack 3 ---------------------------- Jax Calendar 1.34 Remote Admin Access Exploit Author: Sora...

CVE-2009-4469

creationtimestamp| type| source ---|---|--- 2009-12-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/10668...

Explorer 7.20 Cross Site Scripting

Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & XaV PoC :...

Explorer 7.20 - Cross-Site Scripting

Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & XaV PoC :...

Explorer V7.20 Cross Site Scripting Vulnerability

No description provided by source. Script Name : Explorer V7.20 Version : V7.20 Release Candidate 1 REV A Bug Type : XSS vulnerability Found by : Metropolis Discovered : 20 December 2009 Download app : http://www.jbc-explorer.info/?action=download&download=16 Dork : JBC explorer by Psykokwak & Xa...

Pluxml-Blog Beta 4.2 XSS

Script Name : Pluxml-blog Version : Pluxml-blog bêta 4.2 Bug Type : XSS vulnerability Found by : Metropolis Discovered : 17 December 2009 Download app : http://telechargements.pluxml.org/pluxml-blog-beta4-2.zip PoC : http://target/path/core/admin/auth.php?p=1Xss example :...

LinkPal 1.0 - SQL Injection

LinkPal 1.0 - SQL Injection Tybe: Auth Bypass Remote SQL Injection Vulnerability Vendor:www.datachecknh.com ? ? Software:LinkPal v1.0 ? Price $$9.95 One-time fee ? author: R3d-D3v!L ? ? Date: 15.d3c.2009 ?T!ME: 08:14 p//\ ? Home: www.Xp10.Me ? ? E-MaiL : [email protected]...

Linkster - PHPMySQL SQL Injection

Linkster - PHPMySQL SQL Injection o=====================================================================================o -:- Linkster - a PHP/MySQL link indexing script SQL Injection Vulnerability -:- Vendor : http://gliebster.com Author : Angela Zhang Contact : [email protected] Date : 15 -...

Linkster - PHP/MySQL SQL Injection

o=====================================================================================o -:- Linkster - a PHP/MySQL link indexing script SQL Injection Vulnerability -:- Vendor : http://gliebster.com Author : Angela Zhang Contact : [email protected] Date : 15 - December - 2009...

DISA STIG SRR Still Vulnerable

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 After the issue in CVE-2009-4211 was made public, the Unix SRR script was removed from http://iase.disa.mil/stigs/SRR/unix.html with a note saying: ?Due to a recently identified security issue, please do not run any version of the UNIX SRR scripts unt...

TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability

TPTI-09-08: HP OpenView NNM ovlogin.exe CGI userid/passwd Heap Overflow Vulnerability http://dvlabs.tippingpoint.com/advisory/TPTI-09-08 December 9, 2009 -- CVE ID: CVE-2009-3846 -- Affected Vendors: Hewlett-Packard -- Affected Products: Hewlett-Packard OpenView Network Node Manager --...

Invision Power Board Local File Inclusion / SQL Injection

============================================= - Release date: December 4th, 2009 - Discovered by: Dawid Golunski - Severity: Moderately High ============================================= I. VULNERABILITY ------------------------- Invision Power Board = 3.0.4 Local PHP File Inclusion and SQL...

Joomla! Component Joaktree 1.0 - SQL Injection

/ ! Joomla! Joaktree component SQL injection vulnerability ! Author : Don Tukulesto [email protected] ! Homepage : http://www.indonesiancoder.com ! Date : November 30, 2009 ! Tune In : http://antisecradio.fm choose your weapon / Software Information + Developer : Niels van Dantzig + Downlo...

Mercury/32 <= v4.01b PH Server Module Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Mercury/32 %...

PuTTy.exe <= v0.53 Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'PuTTy.exe %q This module exploi...