SAP NetWaver JPR Proxy Server — Multiple XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver JPR Proxy Vendor URL: Bugs: XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of SAP Security Note Published: 14.09.2010 Date of Public Advisory: 14.12.2010 Author: Dmitriy Evdokimov Description SAP NetWeaver...

SAP NetWeaver ISpeak — XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver J2EE Engine Ispeak Application Vendor URL: http://www.sap.com Bugs:XSS Exploits: YES Reported: 25.01.2010 Vendor response: 26.01.2010 Date of Public Advisory: 0.07.2011 CVSS: 4.3 Author:Dmitriy Evdokimov Description SAP NetWeaver Ispeak...

SAP NetWeaver MessagingServer — XSS

Application: SAP NetWeaver Versions Affected: SAP NetWeaver Messaging system from 7.10-7.30 Vendor URL: http://www.sap.com Bugs: Linked XSS and Stored XSS Exploits: YES Reported: 25.01.2010 Vendor response: 25.01.2010 Date of Public Advisory: 12.04.2011 Author: Alexandr Polyakov Description...

Ubuntu: Security Advisory (USN-890-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Aurora Attack Malware Components May Be Four Years Old

Although the first known attacks using the Aurora malware that compromised Google weren’t discovered until late last year, some parts of the malware codebase has been in existence in China for nearly four years, raising questions about how many other attacks it might have been used in during that...

Blaze Apps 1.4.0.051909 Cross Site Scripting / SQL Injection

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

Microsoft Windows Defender ActiveX Heap Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================== Microsoft Windows Defender ActiveX Heap Overflow PoC ==================================================== Exploits title :Microsoft Windows Defender ActiveX Heap Overflow PoC tested on :windows...

CVE-2010-2005

creationtimestamp| type| source ---|---|--- 2010-01-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33543 2010-01-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33541 2010-01-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/33542 2010-01-19...

Blaze Apps Multiple Vulnerabilities

www.BugReport.ir AmnPardaz Security Research Team Title: Blaze Apps Multiple Vulnerabilities Vendor: http://blazeapps.codeplex.com Vulnerable Version: 1.4.0.051909 and prior versions Exploitation: Remote with browser Fix: N/A - Description: Blaze Apps is a ASP .NET 2 Content Management System. It...

CVE-2010-0367

creationtimestamp| type| source ---|---|--- 2010-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34116 2010-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34117...

CVE-2010-0366

creationtimestamp| type| source ---|---|--- 2010-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34119 2010-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34120...

PSI CMS 0.3.1 SQL Injection

PSI CMS v. 0.3.1 SQLi Vulns By learn3r hacker from nepal [email protected] Product name: psi-cms Product vendor: http://psi.tarakan.eu/ This product suffers from multiple SQLi... + Exploits:...

PSI CMS v. 0.3.1 SQLi Vulns

Exploit for unknown platform in category web applications =========================== PSI CMS v. 0.3.1 SQLi Vulns =========================== Product name: psi-cms Product vendor: http://psi.tarakan.eu/ This product suffers from multiple SQLi... + Exploits:...

PSI CMS 0.3.1 - SQL Injection

PSI CMS 0.3.1 - SQL Injection PSI CMS v. 0.3.1 SQLi Vulns By learn3r hacker from nepal [email protected] Product name: psi-cms Product vendor: http://psi.tarakan.eu/ This product suffers from multiple SQLi... + Exploits:...

Alwjeez Script - Database Backup

::::::::::::::::Exploit::::::::::: Security war For more exploits visit sec-war.com &1610...

Simply Classified 0.2 Cross Site Request Forgery / Cross Site Scripting

Simply Classified 0.2 XSS & CSRF Vulnerabilities Download: http://www.hotscripts.com/listing/simplyclassifieds/ Found by: mrme Tested On: Windows Vista Note: For educational purposes only Author contact date: 16th December 2009 Advisory:...

linux/x86 write(0 Hello core!\n"" 12)

No description provided by source. / writehello-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it to see if my dup2loop worked. If you don't get "Hello core!\n" back it's a good indicator your shell won't be functional th...

linux/x86 if(read(fd buf 512)<=2) _exit(1) else buf()

No description provided by source. / h3ll-core.c by Charles Stevenson [email protected] I made this as a chunk you can paste in to make modular remote exploits. I use it as a first stage payload when I desire to follow up with a real large payload of goodness. This actually is a bit larger than...

'Blitzableiter' Protects Against Flash Player Exploits

A German security researcher has released an open-source tool that analyses and cleans up Flash code before playback to prevent security holes in Adobe Flash Player from being exploited. The tool, called “Blitzableiter” lightning rod, is the brainchild of Felix “FX” Lindner, a well-known hacker w...

Despite Danger, Adobe Says JavaScript Support Important

Despite the fact that the majority of malware exploits use JavaScript to trigger an attack in Adobe’s PDF Reader product, the company says it’s impossible to completely remove JavaScript support without causing major compatibility problems. In a Q&A listen to podcast with Threatpost editors Denni...