61 matches found
openSUSE Security Update : OpenOffice_org (openSUSE-SU-2011:0337-1)
Maintenance update to LibreOffice-3.3.1. It adds some interesting features, fixes many bugs, including several security vulnerabilities. The previous OpenOfficeorg packages are also renamed to libreoffice. LibreOffice is continuation of the OpenOffice.org project. This update replaces the...
Estonia institutes volunteer cyber army !
In 2007, when Estonia's government, financial and media computer networks were attacked by unknown Russian hackers following the government's decision of relocating a Soviet war memorial, it must have been hard to believe that something good would come from it at the end. With that attack, Estoni...
CruxCMS 3.0.0 Bypass / Shell Upload / SQL Injection / XSS / LFI
waraxe-2010-SA078 - Multiple Vulnerabilities in CruxCMS 3.0.0 =============================================================================== Author: Janek Vind "waraxe" Date: 27. December 2010 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-78.html Affected Software: CruxCMS is a...
U.S. Adopts Military Tactics for Rising Cyberwar Threats
The increasing threats of cyberwar are keeping U.S. officials busy alongside ongoing wars on terror and drugs. Recent incidents highlight the rising cyberwarfare concerns: Google reported espionage attacks originating from China, mysterious Internet traffic activities related to China, the Stuxne...
Orbit Downloader 2.8.7 Arbitrary File Deletion Vulnerability
No description provided by source. waraxe-2009-SA073 - Arbitrary File Deletion in Orbit Downloader = 2.8.7 =============================================================================== Author: Janek Vind "waraxe" Date: 21. March 2009 Location: Estonia, Tartu Web:...
waraxe-2008-SA069.txt
waraxe-2008-SA069 - Multiple Sql Injection in vBulletin 3.7.4 =============================================================================== Author: Janek Vind "waraxe" Date: 17. November 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-69.html Description of vulnerable software:...
ipb235-sql.txt
?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" // Estonia, Tartu // http://www.waraxe.us/...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ========================================================== Invision Power Board = 2.3.5 Remote SQL Injection Exploit ========================================================== ?php errorreportingEALL;...
Invision Power Board <= 2.3.5 Remote SQL Injection Exploit
No description provided by source. ?php errorreportingEALL; /////////////////////////////////////////////////////////////////////// /////////////////////////////////////////////////////////////////////// // IPB = 2.3.5 sql injection exploit // Version 1.0 // written by Janek Vind "waraxe" //...
Unfixed XSS vulnerability at www.bankofestonia.info
Security researcher Fugitif, has submitted on 08/07/2008 a cross-site-scripting XSS vulnerability affecting www.bankofestonia.info, which at the time of submission ranked 3840668 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/07/2008. It is...
waraxe-2008-SA064.txt
waraxe-2008-SA064 - Sql Injection in MyBB 1.2.11 =============================================================================== Author: Janek Vind "waraxe" Date: 21. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-64.html Target software description: MyBB is a discussion...
waraxe-2008-SA-061.txt
waraxe-2008-SA061 - Remote Code Execution in MyBB 1.2.10 =============================================================================== Author: Janek Vind "waraxe" Independent discovery: koziolek Date: 16. January 2008 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-61.html Target...
[waraxe-2007-SA#058] - Critical Sql Injection in NukeSentinel 2.5.12
waraxe-2007-SA058 - Critical Sql Injection in NukeSentinel 2.5.12 ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-58.html Target software description: Developer:...
waraxe-2007-SA054.txt
waraxe-2007-SA054 - Local File Inclusion in Dance Music module for phpNuke ============================================================================ Author: Janek Vind "waraxe" Date: 25. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-54.html Target software...
waraxe-2006-SA-046.txt
================================================================================ waraxe-2006-SA046 ================================================================================ Critical sql injection in phpNuke 7.5-7.8...
[waraxe-2005-SA#041] - Critical Sql Injection in PhpNuke 6.x-7.6 Top module
================================================================================ waraxe-2005-SA041 ================================================================================ Critical Sql Injection in PhpNuke 6.x-7.6 Top module...
[waraxe-2005-SA#039] - Critical Sql Injection in Sgallery module for PhpNuke
================================================================================ waraxe-2005-SA039 ================================================================================ Critical Sql Injection in Sgallery module for PhpNuke...
[waraxe-2004-SA#029 - Possible remote file inclusion in PhpNuke 6.x - 7.3]
================================================================================ waraxe-2004-SA029 ================================================================================ Possible remote file inclusion in PhpNuke 6.x - 7.3...
[waraxe-2004-SA#014 - Cross-Site Scripting aka XSS in AzDGDatingLite]
================================================================================ waraxe-2004-SA014 ================================================================================ Cross-Site Scripting aka XSS in AzDGDatingLite...
[waraxe-2004-SA#009 - Non-critical Sql injection and XSS bug in PhpBB 2.0.6c]
================================================================================ waraxe-2004-SA009 ================================================================================ Non-critical Sql injection and XSS bug in PhpBB 2.0.6c...