Oracle Document Capture 10.1.3.5 - Insecure Method Buffer Overflow

Oracle Document Capture 10.1.3.5 - Insecure Method Buffer Overflow Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Docume...

Oracle Document Capture 10.1.3.5 - Insecure Method / Buffer Overflow

Source: http://packetstormsecurity.org/files/view/97871/DSECRG-11-006.txt ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-006 internal DSECRG-09-066 Application: Oracle Document Capture Versions Affected: Oracle Document Capture 10.1.3.5 Vend...

Oracle Document Capture Actbar2.ocx Insecure Method

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-00153 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting Exploits: YES Reported: 22.03.2010 Vendor response:...

SAP Crystal Report Server 2008 Directory Traversal

ÇDSECRG-11-003 Internal DSECRG-00145 SAP Crystal Report Server 2008 - Directory Traversal Directory traversal vulnerability discovered in the module PerformanceManagement application SAP Crystal Report Server 2008, which allows you to read any file on the OS. Application: SAP Crystal Report Serve...

Oracle Document Capture empop3.dll Insecure Methods

ActiveX components contain insecure methods. Digital Security Research Group DSecRG Advisory DSECRG-11-005 internal DSECRG-00154 Application: Oracle Document Capture Versions Affected: Release 10gR3 Vendor URL: www.oracle.com Bugs: insecure method, File overwriting, File deleting Exploits: YES...

VMware Portal 3.1 Cross Site Scripting

DSECRG-09-058 Vmware View - XSS vulnerability Linked XSS in VMware Portal Digital Security Research Group DSecRG Advisory DSECRG-09-058 Application: VMware View Portal Versions Affected: alert/XSS/.source Solution Update VmWare View to version 3.1.3 References...

VMSA-2010-0008 VMware View 3.1.3 addresses an important cross-site scripting vulnerability

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ VMware Security Advisory Advisory ID: VMSA-2010-0008 Synopsis: VMware View 3.1.3 addresses an important cross-site scripting vulnerability Issue date: 2010-05-05 Updated on:...

VMware View 3.1.3 addresses an important cross-site scripting vulnerability

VMware View 3.1.3 addresses an cross-site scripting vulnerability in VMware View. In order for an attacker to exploit the vulnerability, the attacker would need to lure the user to click on the attacker's URL. VMware would like to thank Alexey Sintsov from Digital Security Research Group DSecRG f...

VMware Remote Console e.x.p build-158248 - Format String

DSECRG-09-053 VMware Remote Console - format string vulnerability http://www.dsecrg.com/pages/vul/show.php?id=153 VMrc vulnerable to format string attacks. Exploitation of this issue may lead to arbitrary code execution on the system where VMrc is installed. Digital Security Research Group DSecRG...

SAP GUI 7.00 - BExGlobal Active-X unsecure method

SAP GUI 7.00 - BExGlobal Active-X unsecure method Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution...

SAP GUI 7.00 - BExGlobal Active-X unsecure method

Security vulnerability found in SAP GUI 7.10 and BI 7.0 that allows operating system functions to be called remotely. Application: SAP GUI Versions Affected: SAP GUI SAP GUI 7.1 Vendor URL: http://SAP.com Bugs: Insecure method. Code Execution. Exploits: YES Reported: 16.10.2009 Vendor response:...

Symantec Antivirus Client Proxy 10 Buffer Overflow

Exploit for unknown platform in category local exploits ================================================== Symantec Antivirus Client Proxy 10 Buffer Overflow ================================================== Application: Symantec Antivirus Client Proxy Versions Affected: Version 10 Vendor URL:...

Alteon OS BBI (Nortell) - Cross-Site Scripting / Cross-Site Request Forgery

Exploit Title: Alteon OS BBI Nortell - Multiple Vulnerabilities Date: 16 Nov 09 Author: Sintsov Alexey Software Link: downoad link if available Version: Date: Mon, 16 Nov 2009 14:01:04 +0300 Digital Security Research Group DSecRG Advisory http://dsecrg.com/pages/vul/show.php?id=161 Various XSS an...

OSSIM 2.1 SQL Injection / XSS

OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions Affected: 2.1 and may be 2.1.1 Vendor URL:...

OSSIM 2.1 - SQL Injection Cross-Site Scripting

OSSIM 2.1 - SQL Injection Cross-Site Scripting OSSIM - Open Source Security Information Management is vulnerable to multiple security vulnerabilities. 1. SQL Injections 2. Linked XSS 3. Unauthorized access Digital Security Research Group DSecRG Advisory DSECRG-09-055 Application: OSSIM Versions...

Adobe JRun 4 - 'logfile' (Authenticated) Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-052 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reported: 20.01.2009 Vendor response: 21.01.2009 Solution: YES...

Adobe JRUN Directory Traversal

Digital Security Research Group DSecRG Advisory DSECRG-09-051 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reported: 20.01.2009 Vendor response: 21.01.2009 Solution: YES...

[DSECRG-09-052] Adobe JRun 4 Directory Traversal Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-052 Application: Adobe JRun Application Server Versions Affected: 4 updater 7 Vendor URL: http://www.adobe.com/products/jrun/ Bug: Directory Traversal File Read Exploits: YES Reported: 20.01.2009 Vendor response: 21.01.2009 Solution: YES...

SAP Cfolders Multiple Linked XSS Vulnerabilities

Digital Security Research Group DSecRG Advisory DSECRG-09-021 Original advisory: http://dsecrg.com/pages/vul/show.php?id=121 Application: SAP Cfolders SAP SRM, SAP ECC, SAP Knowledge Management and SAP NetWeaver cRooms collaboration rooms Vendor URL: http://SAP.com Bugs: Multiple Liked XSS Risk:...

AbleSpace 1.0 SQL Injection

original advisory: http://dsecrg.com/pages/vul/show.php?id=137 Digital Security Research Group DSecRG Advisory DSECRG-09-037 Application: AbleSpace Versions Affected: 1.0 Vendor URL: http://abk-soft.com/ Bugs: Multiple Blind SQL Injections, Multiple XSS Exploits: YES Reported: 18.03.2009 Vendor...