Sitecom Home Storage Center - Directory Traversal

Sitecom Home Storage Center - Directory Traversal Security Advisory AA-004: Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory...

Sitecom Home Storage Center Directory Traversal

Exploit for hardware platform in category web applications Directory Traversal Vulnerability in Sitecom Home Storage Center Severity Rating: High Discovery Date: July 29, 2012 Vendor Notification: July 30, 2012 Disclosure Date: September 3, 2012 Vulnerability Type= Directory Traversal Impact= -...

Cyberoam UTM Multiiple Vulnerabilities

Exploit for hardware platform in category web applications Affected Software: Cyberoam CR50ia 10.01.0 build 678 Vulnerability: OS Command Execution Severity: High Release Date: Unreleased I. Background "Cyberoam Unified Threat Management appliances offer assured security, connectivity and...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution Egghunter !/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds =...

Sysax Multi Server 5.52 - File Rename Buffer Overflow Remote Code Execution (Egghunter)

!/usr/bin/python Title: Sysax Multi Server " sys.exit1 target = sys.argv1 port = intsys.argv2 user = sys.argv3 password = sys.argv4 opersys = sys.argv5 base64 encode the provided creds creds = base64.encodestringuser+"\x0a"+password msfpayload windows/shellbindtcp LPORT=4444 R|msfencode -e...

V-CMS 1.0 Shell Upload

------------------------------------------------------------------------ Software................V-CMS 1.0 Vulnerability...........Arbitrary Upload Threat Level............Very Critical 5/5 Download................http://v-cms.org/ Discovery Date..........11/13/2011 Tested On...............Window...

Joomla NoNumber Framework Local File Inclusion / Shell Upload

Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl The nnframework plugin by NoNumber! contains multiple...

NoNumber Framework Joomla! Plugin Multiple Vulnerabilities

Exploit for php platform in category web applications Exploit Title: NoNumber Framework Joomla! Plugin Multiple Vulnerabilities Discovery Date: 10 October 2011 Reported Date: 11 October 2011 Patch Date: 17 October 2011 Release Date: 17 October 2011 Author: jdc Software Link: http://nonumber.nl Th...

Norman Security Suite 8 - 'nprosec.sys' Local Privilege Escalation

include include include include / Discovered by : Xst3nZ Jérémy Brun-Nouvion ---- Software ------------------------------------------------------------------------- Program : Norman Security Suite 8 Official page : http://www.norman.com/products/securitysuite/en Description : "This easy-to-use...

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal

Trend Micro Data Loss Prevention Virtual Appliance 5.5 - Directory Traversal Software: Trend Micro Data Loss Prevention Virtual Appliance 5.5 Vulnerability: Directory Traversal Threat Level: Serious 5/5 Download: http://support.trendmicro.com.cn/TM- Product/Product/DLP/5.5/Manager/5.5GM/DLPVA-...

Tele Data Contact Management Server Directory Traversal

Exploit for windows platform in category web applications ------------------------------------------------------------------------ Software................Tele Data Contact Management Server Vulnerability...........Directory Traversal Threat Level............Serious 3/5...

Tele Data Contact Management Server - Directory Traversal

------------------------------------------------------------------------ Software................Tele Data Contact Management Server Vulnerability...........Directory Traversal Threat Level............Serious 3/5 Download................http://teledata.qc.ca/tdcms/ Discovery Date..........6/1/201...

Tickets 2.13 SQL Injection Vulnerability

No description provided by source. !------------------------------------------------------------------------ Software................Tickets 2.13 Vulnerability...........SQL Injection Threat Level............Critical 4/5 Download................http://www.ticketscad.org/ Discovery...

i-doIT 0.9.9-4 LFI Vulnerability

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................i-doIT 0.9.9-4 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.i-doit.org/...

eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities

eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

Tickets 2.13 - SQL Injection

------------------------------------------------------------------------ --Description-- A sql injection vulnerability in Tickets 2.13 can be exploited to extract arbitrary data. In some environments it may be possible to create a PHP shell. --PoC--...

eGroupware 1.8.001.20110421 Multiple Vulnerabilities

Exploit for php platform in category web applications ------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5...

eGroupWare 1.8.001.20110421 - Multiple Vulnerabilities

------------------------------------------------------------------------ Software................eGroupware 1.8.001.20110421 Vulnerability...........Local File Inclusion Threat Level............Critical 4/5 Download................http://www.egroupware.org/ Discovery Date..........5/19/2011 Teste...

Mollify 1.8.0.1 Cross Site Scripting

------------------------------------------------------------------------ Software................Mollify 1.8.0.1 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.mollify.org/ Discovery Date..........5/19/2011 Tested...

Tugux CMS 1.2 XSS / LFI / SQL Injection / URL Redirection

Title: Tugux CMS 1.2 Multiple Remote Vulnerabilities ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Vendor: Tugux Studios ¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯¯ Product web page: http://www.tugux.com...