SAP GUI 7.1 WebViewer2D ActiveX — Insecure Methods

Application: EAI WebViewer2D EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected:Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov...

SAP GUI 7.1 WebViewer3D ActiveX — Insecure Methods

Application: EnjoySAP, SAP GUI for Windows 6.4 and 7.1 Versions Affected: Tested on 7100.2.7.1038 PL 7 Vendor URL: Bugs: Insecure method, File owervriting Exploits: YES Reported: 02.07.2009 Vendor response: 02.07.2009 Date of Public Advisory: 28.09.2009 Author: Alexandr Polyakov Description SAP G...

rgboard v4 5p1 (07.07.27) Multiple Remote Vulnerabilities

No description provided by source. rgboard v4 5p1 07.07.27 Multiple Vulnerability bY [email protected] / rgboard VERSION v4 07.07.27is widely used bulletin board system of Korea. It is freely available for all platforms that supports PHP and MySQL. But I find a XSS vuln ,LFI vuln and RFI vuln. I...

CVE-2009-0388

creationtimestamp| type| source ---|---|--- 2009-02-04 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7990 2009-02-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/8024...

CVE-2009-0460

creationtimestamp| type| source ---|---|--- 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7952 2009-02-03 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7951...

CVE-2009-0458

creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7941 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7940...

CVE-2009-0459

creationtimestamp| type| source ---|---|--- 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7941 2009-02-02 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7940...

Synactis All_IN_THE_BOX ActiveX v3 Null byte File Overwrite Vuln

Exploit for unknown platform in category remote exploits ================================================================ Synactis AllINTHEBOX ActiveX v3 Null byte File Overwrite Vuln ================================================================ Digital Security Research Group DSecRG Advisory...

Synactis All_IN_THE_BOX ActiveX 3.0 - Null Byte File Overwrite

Digital Security Research Group DSecRG Advisory DSECRG-09-006 http://www.dsecrg.com/pages/vul/show.php?id=62 Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL: http://synactis.com Bugs: Null byte File overwriting Exploits: YES Reported: 15.01.2009 Vendor response: NONE...

Synactic ALL_IN_THE_BOX File Overwrite

DSECRG-09-006 Synactis AllINTHEBOX ActiveX Control - Null byte File Owervrite Synactis AllINTHEBOX ActiveX Control ALLINTHEBOX.OCX can be used to owervrite any any file in target system. Vulnerable method is "SaveDoc" Application: Synactis AllINTHEBOX ActiveX Versions Affected: 3 Vendor URL:...

SuSE Update for mozilla,MozillaThunderbird,seamonkey SUSE-SA:2007:022

Check for the Version of mozilla,MozillaThunderbird,seamonkey OpenVAS Vulnerability Test $Id: gbsuse2007022.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for mozilla,MozillaThunderbird,seamonkey SUSE-SA:2007:022 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks...

SuSE Update for MozillaFirefox,seamonkey SUSE-SA:2007:019

Check for the Version of MozillaFirefox,seamonkey OpenVAS Vulnerability Test $Id: gbsuse2007019.nasl 8050 2017-12-08 09:34:29Z santu $ SuSE Update for MozillaFirefox,seamonkey SUSE-SA:2007:019 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Pixie CMS 1.0 - Multiple Local File Inclusions

Pixie CMS 1.0 - Multiple Local File Inclusions Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solutio...

Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications =========================================================== Pixie CMS 1.0 Multiple Local File Inclusion Vulnerabilities =========================================================== Digital Security Research Group DSecRG Advisory DSECRG-09-0...

Pixie CMS 1.0 - Multiple Local File Inclusions

Digital Security Research Group DSecRG Advisory DSECRG-09-005 Application: Pixie CMS Versions Affected: 1.0 Vendor URL: http://www.getpixie.co.uk/ Bug: Multiple Local File Include Exploits: YES Reported: 29.08.2008 Vendor Response: 30.08.2008 Solution: NONE Date of Public Advisory: 27.01.2009...

CVE-2009-0299

creationtimestamp| type| source ---|---|--- 2009-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7878 2009-07-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/9236...

CVE-2009-0295

creationtimestamp| type| source ---|---|--- 2009-01-26 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7867...

AXIS 70U Privilege Escalation / XSS

DSECRG-09-004 AXIS 70U Network Document Server - Privilege Escalation and XSS Vulnerabilities found in Web Interface of device AXIS 70U Network Document Server. 1. Local File Include and Privilege Escalation. Standard user can escalate privileges to administrator. 2. Multiple Linked XSS...

Oracle Application Server - multiple security vulnerabilities

Application: Oracle Application Server Versions Affected: Oracle Application Server 10.1.2.0.2 Vendor URL: http://oracle.com Bugs: Response Splitting XSS Exploits: YES Reported: 21.01.2009 Vendor response: 23.01.2009 Date of Public Advisory: 22.02.2012 Author: Alexandr Polyakov Description Oracle...

CVE-2009-0730

creationtimestamp| type| source ---|---|--- 2009-01-18 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7815 2009-02-23 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32807...