PT-2012-2892

Name of the Vulnerable Software and Affected Versions PHP version 5.3.9 Description The issue allows remote attackers to execute arbitrary code via a request containing a large number of variables, related to improper handling of array variables in the php register variable ex function. This...

Charlie Miller now working with DoD for Cyber Security

Charlie Miller is a former hacker who has become an information security consultant now working with Department of Defense DoD for helping out with cyber security. He was invited to the conference on cyber conflict held by the NATO Cooperative Cyber Defense Center of Excellence in Tallinn, where ...

Tech-ex kesion 6. x - 7.06 continue to use-vulnerability warning-the black bar safety net

Today with a black wide engage in a edu, it is a sad reminder of the webmaster, some time ago was installed the tech-ex 6. 5, and now directly get your ass kicked. that... t00ls a large cattle provides the use of the method, I burst the md5, but understand not out···the mssql version of section...

Atlanta IT Worker Hacked Ex-Employers Database

Atlanta IT Worker Hacked Ex-Employers Database An Atlanta man could receive up to five years in prison after pleading guilty Wednesday to hacking into a former employer's patient database, stealing information and then wiping the database clean. Federal prosecutors said Eric McNeal, 37, used the...

Sony Hires Ex- Homeland Security Official after PlayStation Hack

Sony Hires Ex- Homeland Security Official after PlayStation Hack Sony has hired a former official at the US Department of Homeland Security for the new post of chief information security officer, months after a massive hacking attack leaked information on 100 million user accounts on its games...

CVE-2011-2577: Undefined Security Weakness

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq465...

PT-2011-3935

Name of the Vulnerable Software and Affected Versions Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs versions prior to TC 4.0.0 or F9.1 Description The issue allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 o...

Tech-ex CMS website system 0day releases-vulnerability warning-the black bar safety net

Keywords: Powered By KesionCMS V5. 5 inurl:User/UserReg. asp Step one: access to/user/userreg. asp registered user Step two: access/KSeditor/selectupfiles. asp, check the auto-naming options, upload named as X. asp;X. jpg files Step three: access the Upload file path xm. asp;xm.jpg...

Authentication flaw

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

CVE-2011-1409

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

CVE-2011-1409

CVE-2011-1409 affects Frams’s Fast File EXchange (F*EX, fex). The vulnerability allows an unauthenticated remote attacker to bypass authentication and upload arbitrary files via a request that omits an authentication ID, potentially impacting confidentiality and integrity. The issue is documented...

CVE-2011-1409

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

PT-2011-3106

Name of the Vulnerable Software and Affected Versions Frams's Fast File EXchange FEX, aka fex versions prior to 20110610 Description The issue allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID. Recommendations For versions...

CVE-2011-1409: Improper Authentication

Frams's Fast File EXchange FEX, aka fex 20100208, and possibly other versions before 20110610, allows remote attackers to bypass authentication and upload arbitrary files via a request that lacks an authentication ID...

CVE-2011-0354

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method...

CVE-2011-0354: Undefined Security Weakness

The default configuration of Cisco Tandberg C Series Endpoints, and Tandberg E and EX Personal Video units, with software before TC4.0.0 has a blank password for the root account, which makes it easier for remote attackers to obtain access via an unspecified login method...

PT-2011-2291

Name of the Vulnerable Software and Affected Versions Cisco Tandberg C Series Endpoints versions prior to TC4.0.0 Cisco Tandberg E and EX Personal Video units versions prior to TC4.0.0 Description The issue concerns a default configuration that sets a blank password for the root account, making i...

Tandberg E, EX and C Series Endpoints Default Credentials

Exploit for hardware platform in category remote exploits -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Cisco Security Advisory: Default Credentials for Root Account on Tandberg E, EX and C Series Endpoints Advisory ID: cisco-sa-20110202-tandberg Revision 1.0 For Public Release 2011 February 2...

PT-2011-1389

Name of the Vulnerable Software and Affected Versions NetWin Surgemail versions prior to 4.3g Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the username ex parameter to the surgeweb program. This enables attackers to execute...

CVE-2010-3547

CVE-2010-3547 affects PeopleSoft FMS ESA - EX in Oracle PeopleSoft/JD Edwards Suite, specifically 8.9 Bundle #38, 9.0 Bundle #31, and 9.1 Bundle #6. The vulnerability allows remote authenticated users to compromise confidentiality and integrity via unknown vectors. The Oracle October 2010 Critica...