AiDesign SQL Injection

Exploit Title: AiDesign SQL Injection Vulnerability Google Dork: "Powered by: AiDesign" Date: 8/1/2012 Author: H4ckCity Security Team Discovered By: farbodmahini Home: WwW.H4ckCity.Org Vendor Software: www.adx.hk Version: All Version Category:: webapps Security Risk:: High Tested on: GNU/Linux...

Review : GFI LanGuard - Network Security Scanner & Vulnerability Management Tool

I'm a firm believer in multitasking. I tend to work on several things simultaneously; the more monitors I have connected the more things I can do in parallel, and I can bounce back and forth between tasks, given that no one interrupts me. When I find an application that can do more than one thing...

Dede CMS - SQL Injection

Dede Cms All Versions Sql Vulnerability Exploit Date: 30/12/2011 - 13:00 Author: CWH | Finded By : Nafsh We Are : Mr.M4st3r , Nafsh , SkoteVahshat , HijaX Support: Cyberwh.org Mail: [email protected] Software Website: http://www.dedecms.com Security Risk: High Platform: Php $ Dorks: inurl:"id"...

JonDo 00.16.001 Released - Automatic error recognition and easier usability

JonDo 00.16.001 Released - Automatic error recognition and easier usability JonDos publishes a new version of the JonDo-Software, an IP changer and IP anonymization program, that you can use for anonymous surfing in the Internet with high security anonymous proxy servers. What is JonDo? JonDo is ...

Trusted Sites Zone (Whitelisting)

Keep in mind that when the Internet Zone is set to High, you may encounter web sites that do not function properly due to one or more of the associated security settings. This is where the Trusted sites zone can help. If you trust that the site will not contain malicious content, you can add it t...

Disable ActiveX Controls

For a more fine-grained control over what features are allowed in the zone, click the Custom Level button. At this point, you can control the specific security options that apply to the current zone. For example ActiveX can be disabled by selecting Disable for Run ActiveX controls and plug-ins...

Security Zones

Select the Security tab. This provides a list of the various security zones that Internet Explorer uses. For each of these zones, you can select a Custom Level of protection. By clicking the Custom Level button, you will see a second window open that permits you to select various security setting...

Joomla Universal Remote File Inclusion

Joomla component comuniversal = Remote File Inclusion Vulnerability exploit +Software: Joomla component comuniversal UWCMS Universal Web CMS +Version: 1.0.0 +License: http://www.gnu.org/copyleft/gpl.html GNU/GPL +Source: http://uwcms.sourceforge.net +CWE ID : 98 +Security Risk: High +Remote...

iGaming CMS 1.5 - Cross-Site Request Forgery

NeX of the HackTalk team has found a CSRF Vulnerability in iGaming CMS v 1.5 that allows an attacker to make new administrative account, and run SQL queries. Pentest Information: ============ NeX has discovered a Cross Site Request ForgeryCSRF vulnerability in iGaming CMS 1.5 Details ============...

fujitsu-serverview-exec.txt

Advisory: Fujitsu-Siemens ServerView Remote Command Execution RedTeam Pentesting discovered a remote command execution in the Fujitsu- Siemens ServerView during a penetration test. The DBAsciiAccess CGI script is vulnerable to a remote command execution because of a parameter which is not properl...

Microsoft XML核心服务XMLHTTP控件内存破坏漏洞（MS06-071）

Microsoft XML核心服务（MSXML）允许使用JScript、VBScript和Microsoft Visual Studio 6.0的用户构建可与其他符合XML 1.0标准的应用程序相互操作的XML应用。 在Microsoft XML Core Services的XMLHTTP 4.0...

BibORB.txt

= Advisory: Multiple Vulnerabilities in BibORB = ================================================ Multiple vulnerabilities were found in BibORB which result in SQL injection, XSS, directory traversal and arbitrary file upload. == Details == ============= Product: BibORB Affected Version: 1.3.2,...

Thomson TCW690 POST Password Validation Vulnerability

I found a vulnerability in this cablemodem which a malicious user inside LAN can get the control of the cablemodem easily. This cablemodem model is given by the spanish ISP "AUNA". Details ======= Product: Thomson TCW690 cablemodem Affected Version: ST42.03.0a not tested in minor versions Immune...

[Full-Disclosure] Thomson TCW690 Denial Of Service Vulnerability

I found a vulnerability in this cablemodem which a malicious user inside LAN can reset it easily. This cablemodem model is given by the spanish ISP "AUNA". Details ======= Product: Thomson TCW690 cablemodem Affected Version: ST42.03.0a possible others Immune Version: ??? Security-Risk: high...

[Full-Disclosure] Advisory: Multiple Vulnerabilities in BibORB

= Advisory: Multiple Vulnerabilities in BibORB = ================================================ Multiple vulnerabilities were found in BibORB which result in SQL injection, XSS, directory traversal and arbitrary file upload. == Details == ============= Product: BibORB Affected Version: 1.3.2,...

HP-UX Security patch : PHSS_16147

The remote host is missing HP-UX Security Patch number PHSS16147 . Security Vulnerability in dtmail/rpc.ttdbserverd on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid17096;...

HP-UX Security patch : PHKL_23478

The remote host is missing HP-UX Security Patch number PHKL23478 . Sec. Vulnerability in setrlimit1M rev. 1 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16751; scriptversion"1.7"...

HP-UX Security patch : PHCO_27882

The remote host is missing HP-UX Security Patch number PHCO27882 . SSRT2336 Rev.5 XDR library %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16750; scriptversion"1.7"; name"english...

HP-UX Security patch : PHNE_13475

The remote host is missing HP-UX Security Patch number PHNE13475 . Security Vulnerability with land on HP-UX %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16526; scriptversion"1.7...

HP-UX Security patch : PHCO_15206

The remote host is missing HP-UX Security Patch number PHCO15206 . Security Vulnerability Software Distributor SD %NASLMINLEVEL 70300 C Tenable Network Security, Inc. if ! definedfunc"bnrandom" exit0; include'deprecatednasllevel.inc'; include'compat.inc'; ifdescription scriptid16835;...