1702 matches found
DNI, Justice Department Deny Targeting Americans for Surveillance Based on Religion, Politics
The Director of National Intelligence and the Department of Justice have denied a report based on leaked documents from Edward Snowden that United States intelligence and law enforcement agencies conduct surveillance of Americans based on their ethnicity, religious affiliation or political stance...
Paypal BBP #108 MOS - Persistent Web Vulnerability
Document Title: =============== Paypal BBP 108 MOS - Persistent Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1049 PayPal Security UID: qw115bSN Release Date: ============= 2014-07-07 Vulnerability Laboratory ID VL-ID:...
EFF Sues NSA, ODNI Over Zero-Day Disclosure Processes
The Electronic Frontier Foundation wants a peek behind the curtain of the government’s Vulnerabilities Equities Process. The advocacy group on Tuesday filed a Freedom of Information Act FOIA lawsuit against the National Security Agency and the Office of the Director of National Intelligence hopin...
Joomla Component mosDirectory 2.3.2 - Remote File Inclusion Vuln
No description provided by source. --==+=================== Electronic Security Team www.Yee7.com =================+==-- --==+ Joomla Component mosDirectory 2.3.2 Remote File Inclusion +==-- --==+=============================================================================+==-- Software: Joomla...
ABBS Electronic Flash Cards 2.1 .fcd Buffer Overflow Exploit
No description provided by source. Exploit Title: ABBS Electronic Flash Cards Buffer Overflow Exploit Software Link: http://abbs.qsnx.net/downloads/abbs-flashcards.zip Version: 2.1 triggering details : open the app, go to test, click on random, and start test, then chose the fcd file, and booom...
OpenEMR Electronic Medical Record Software 3.2 - Multiple Vulnerabilities
No description provided by source. Redspin Security Notice -- RSN-2010-01 Multiple vulnerabilities in OpenEMR Electronic Medical Record Software Overview ---------------- Quote from http://www.oemr.org/ OpenEMR is a free medical practice management, electronic medical records, prescription writin...
GAzie <= 5.20 Cross Site Request Forgery
No description provided by source. ======================================== GAzie = 5.20 Cross Site Request Forgery ======================================== Author: giudinvx Email: giudinvxatgmaildotcom Date: 5/02/2012 Site: http://www.giudinvx.altervista.org/...
ABBS Electronic Flashcards 2.1 - Buffer Overflow Exploit (MSF)
No description provided by source. This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core'...
EA Battlefield 2 and Battlefield 2142 Multiple Arbitrary File Upload Vulnerabilities
No description provided by source. Source: http://aluigi.org/adv/bf2urlz-adv.txt Luigi Auriemma Application: Refractor 2 engine Games: Battlefield 2 = 1.50 aka 1.5.3153-802.0 http://www.battlefield.ea.com/battlefield/bf2/ Battlefield 2142 = 1.50 aka 1.10.48.0...
TCExam <= 11.2.011 - Multiple SQL Injection Vulnerabilities
No description provided by source. TCExam =11.2.011 Multiple SQL Injection Vulnerabilities Vendor: Tecnik.com s.r.l. Product web page: http://www.tcexam.org Affected version: 11.2.009, 11.2.010 and 11.2.011 Summary: TCExam is a FLOSS system for electronic exams also know as CBA - Computer-Based...
Linux Kernel Stack Infoleaks Vulnerability
No description provided by source. //Enjoy... // //-Dan / You've done it. After hours of gdb and caffeine, you've finally got a shell on your target's server. Maybe next time they will think twice about running MyFirstCompSciProjectFTPD on a production machine. As you take another sip of Mountain...
Nokia Electronic Documentation 5.0 Connection Redirection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8625/info A vulnerability has been discovered in Nokia Electronic Documentation NED that may allow an attacker to redirect connections to a third party system. The problem likely occurs due to the NED server failing to...
Electronic Engineering Tool (EE TOOL) <= 0.4.1 File Include Vulnerability
No description provided by source. Script Download: http://kent.dl.sourceforge.net/sourceforge/eetool/eetool-0.4-1.tar.gz Code: if$type == 1 $url = $cgipath . ipcalc.cgi; else $url = $cgipath . ipcalc.cgi?host=$host&mask1=$mask1&mask2=$mask2; nclude$url;...
Nokia Electronic Documentation 5.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8626/info Nokia Electronic Documentation NED has been reported prone to a cross-site scripting vulnerability. The issue has been conjectured to present itself due to a lack of sufficient sanitization performed on user...
OpenEMR 3.2.0 - SQL Injection and XSS
No description provided by source. Exploit Title: OpenEMR v3.2.0 Multiple Vulnerabilities Date: December 26, 2010 Author: Blake Software Link: http://sourceforge.net/projects/openemr/ Version: 3.2.0 Tested on: Windows XP SP3 Description: Open Source Practice Management, Electronic Medical Record,...
OpenEMR 4.1.1 (ofc_upload_image.php) Arbitrary File Upload Vulnerability
No description provided by source. ??php / OpenEMR 4.1.1 ofcuploadimage.php Arbitrary File Upload Vulnerability Vendor: OpenEMR Product web page: http://www.open-emr.org Affected version: 4.1.1 Summary: OpenEMR is a Free and Open Source electronic health records and medical practice management...
iCat Electronic Commerce Suite 3.0 File Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2126/info iCat Electronic Commerce Suite is an application which enables a user to create and manage web based catalogues. A remote user may retrieve known files on a target system running iCat Electronic Commerce Suite...
Kordil EDMS 2.2.60rc3 - SQL Injection Vulnerability
No description provided by source. Exploit Title: Kordil EDMS v2.2.60rc3 SQL Injection Vulnerability Date: 12/05/2012 Exploit Author: Woody Hughes [email protected] Vendor Homepage: http://sourceforge.net/projects/kordiledms/ Software Link:...
The Uploader 2.0 - Remote File Upload Vulnerability
No description provided by source. ======================================================================================================= Script Name : The Uploader 2.0 Language : php Author : Master Mind Home : www.vbspiders.com ============================================== Exploit : example:...
Nokia Electronic Documentation 5.0 Directory Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/8624/info Nokia Electronic Documentation NED is prone to a vulnerability that may enable remote attackers to list directory contents. This issue may be exploited by appending a dot . to a request for a NED page...